topic Re: SNS-3495 in Network Access Control

SNS-3495

peteryouhannafawzy — Fri, 21 Feb 2020 18:38:45 GMT

i have SNS-3495-K9 with version 2.3.0.187 , can i install Device Administration License ?

Re: SNS-3495

Mohammed al Baqari — Sun, 12 Nov 2017 11:04:58 GMT

If you purchased device admin license then you can install it and use ISE
for TACACs as well

Re: SNS-3495

peteryouhannafawzy — Sun, 12 Nov 2017 11:08:08 GMT

Can i install it on SNS-3495-K9 with version 2.3.0.187 ?

Re: SNS-3495

Marvin Rhoads — Sun, 12 Nov 2017 13:48:26 GMT

Yes, you can install it on any version of ISE that supports the Device Administration feature (i.e., 2.0 or greater).

Whether it is hardware or VM-based is not relevant (except for sizing in larger deployments).

Re: SNS-3495

peteryouhannafawzy — Sun, 12 Nov 2017 14:49:24 GMT

Thanks a lot Marvin

Re: SNS-3495

peteryouhannafawzy — Mon, 13 Nov 2017 09:42:23 GMT

Do I need an ISE Device Administration license for every ISE appliance or every ISE deployment?

Re: SNS-3495

Mohammed al Baqari — Mon, 13 Nov 2017 10:02:58 GMT

Depending on your deployment model. If you are having standalone
deployment, then each node needs license. If you are using distributed
model (PAN+PSN) then you need one license installed on PAN node as its
managing the licensing.

Re: SNS-3495

peteryouhannafawzy — Mon, 13 Nov 2017 10:08:48 GMT

i have a cluster model ?

Re: SNS-3495

Mohammed al Baqari — Mon, 13 Nov 2017 11:01:00 GMT

In cluster deployment you need license on PAN node only

Re: SNS-3495

Marvin Rhoads — Mon, 13 Nov 2017 11:01:07 GMT

ISE licenses are always installed once for the entire deployment.

The PAN persona (Primary PAN in a distributed deployment) is always the one that manages the licenses for a given deployment.

Re: SNS-3495

ajc — Tue, 14 Nov 2017 21:18:05 GMT

Let me add my 2 cents to this post. Relatively recent, Cisco introduced a new option on the license registration process that allows you to assign a SECONDARY serial number to the same license. That is important because in the past the license was linked to the primary pan only so if that node had to be replaced then you had problems with the licenses on a Secondary PAN promoted as Primary

So my point is, when you are registering the license using the Primary PAN Serial number, INCLUDE the entry of the Secondary PAN as well (redundancy option).

thanks