topic Re: ISE 2.4 licensing for Split-deployment in Network Access Control

ISE 2.4 licensing for Split-deployment

phi.aarde — Mon, 17 Sep 2018 13:13:30 GMT

Hi,

I need your help for the following migration:
- Current situatie: Cisco ACS with max 100 Radius devices and max 300 Tacacs devices. No end-users authentication using 802.1x, only managing access to devices via Radius and Tacacs. The ACS are running on 2 appliances in a Split-deployment.

- New situation: Cisco ISE 2.4 running on 2 VMs in de Split-deplyment. Managing access to max 100 Radius devices and max 300 Tacacs devices (no end-users authentication using 802.1x).

Question:
- What licenses do I need ?

Re: ISE 2.4 licensing for Split-deployment

Arne Bier — Mon, 17 Sep 2018 22:48:22 GMT

You need Base and Device Admin licenses, and VM licenses

The 2.4 licensing is all new - but by my estimations you need this (chuck it into the Cisco Configuration tool and see what it thinks about that - it can perform validation for you)

2 x R-ISE-VMS-K9=

2 x L-ISE-TACACS-ND=

1 x L-ISE-BSE-PLIC=

1 x L-ISE-BSE-P2

Check out the ISE Ordering Guide (July 2018)

Re: ISE 2.4 licensing for Split-deployment

phi.aarde — Sat, 16 Feb 2019 16:19:21 GMT

Thanks !