topic ISE RADIUS IPSEC to NAD License in Network Access Control

ISE RADIUS IPSEC to NAD License

Dan Davis — Mon, 17 Sep 2018 15:00:09 GMT

Hello All,

If I enable IPSec with RADIUS can I still use a base licences for this on ISE? Assume ISE 2.2 but would be interested if it's different on ISE releases.

Re: ISE RADIUS IPSEC to NAD License

Jason Kunst — Mon, 17 Sep 2018 18:26:34 GMT

Yes BASE covers RADIUS and TACACs plus guest AAA etc

See the licensing guide for more details
https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf

Re: ISE RADIUS IPSEC to NAD License

Dan Davis — Tue, 18 Sep 2018 00:49:13 GMT

L-ISE-IPSEC Cisco Identity Services Engine IPsec License

The Cisco ISE IPsec licenses support VPN communication between Cisco ISE Policy Services Nodes (PSNs) and Cisco Network Access Devices (NADs). One Cisco ISE IPsec license is required for every Policy Services Node used for IPsec VPN communication to the NADs. There is a maximum of 150 IPsec tunnels per Policy Services Node.

Thanks!