topic Re: Cisco ISE 2.4 with L-ISE-TACACS= SKU in Network Access Control

Cisco ISE 2.4 with L-ISE-TACACS= SKU

Arie -- — Wed, 31 Oct 2018 10:28:09 GMT

Hi,

The customer just bought SNS-3595-K9 with pre-installed Cisco ISE 2.4.

The license for Device Admin which bought is L-ISE-TACACS= SKU.

I read the Cisco 2.4 licensing that L-ISE-TACACS-ND= is the SKU for Device Admin license in ISE 2.4.

What should I do with the L-ISE-TACACS= license that already bought? Have anyone experiencing this? Can I still use L-ISE-TACACS= into ISE 2.4?

Thank you

Arie

Re: Cisco ISE 2.4 with L-ISE-TACACS= SKU

Arne Bier — Wed, 31 Oct 2018 11:36:12 GMT

Absolutely yes. I did it just the other day. When you upload the PAK into the Cisco licensing portal then you can generate the ISE license file as normal.

Re: Cisco ISE 2.4 with L-ISE-TACACS= SKU

hslai — Thu, 01 Nov 2018 03:47:54 GMT

Arne Bier is right. It's also explained in one of the FAQ in ISE Ordering Guide:

Q. We purchased Device Admin previously. Do I need to buy more licenses if I upgrade to 2.4?
A. If you purchased Device Admin as a deployment-wide license, you can continue to utilize all nodes in the

deployment for TACACS+ transactions even after upgrade to 2.4. This means the license entitles your deployment to the maximum number of nodes supported by ISE for the deployment.

Re: Cisco ISE 2.4 with L-ISE-TACACS= SKU

Damien Miller — Thu, 01 Nov 2018 03:58:30 GMT

If we have a customer that bought the old deployment tacacs license L-ISE-TACACS=, and didn't apply it to a pre 2.4 deployment, can they fulfill and apply the pak directly to 2.4?

Or is this something that will have to be handled by the licensing group?

Re: Cisco ISE 2.4 with L-ISE-TACACS= SKU

Marvin Rhoads — Thu, 01 Nov 2018 04:24:14 GMT

Yes they can still fulfill it and deploy the lic file onto a brand new 2.4 deployment.

Re: Cisco ISE 2.4 with L-ISE-TACACS= SKU

Arne Bier — Thu, 01 Nov 2018 04:30:02 GMT

@Damien Miller - yes you can apply it directly to a 2.4 deployment. The PAK does not contain information about ISE version. It's ISE 2.4 that still accepts the "legacy license" that licensing portal has generated for you. I would bet that ISE 2.4 also accepts new format licenses, although I have never generated one of those. It's cheaper right now to purchase the older style licenses because one old license == 50 node entitlement. As long as this is still possible, I guess customers will continue buying the old licenses. You'd need to check the Cisco Ordering system to see what the end of sale date is.

Not sure what ISE 2.5 etc will do when you apply those licenses.

Keep the good times comin'!