topic Re: ISE - Licenceing in Network Access Control

ISE - Licenceing

craiglebutt — Wed, 08 Jul 2020 18:18:44 GMT

Just reset setup my lab again to start looking a NAC for edge switches in monitor mode.

I noticed no licences are showing up as being used, is this correct?

I've reinstalled a 90day trial again, have 3 devices on, not showing any licence usage for base.

Just wanted to double check this is correct.

A base licence should have been used, or is this when stop using monitor mode?

cheers

Re: ISE - Licenceing

pavagupt — Thu, 09 Jul 2020 05:42:03 GMT

that's not an expected behavior. it should have consumed license. ISE consumes base license for an active session. and advanced licenses for the services and policies that you configure.

Re: ISE - Licenceing

craiglebutt — Thu, 09 Jul 2020 09:51:22 GMT

Thanks for reply. I'll look in to why nothing is showing.

Just clarify, using a IP Phone and PC plugged in the back using the config below.

The IPT would use 2 licences, 1 Base and 1 Plus licence (as changing vlan) and a PC should just use 1 Base Licence?

cheers

switchport access vlan 2082
switchport mode access
switchport voice vlan 3045
no logging event link-status
authentication event fail action next-method
authentication event server dead action authorize vlan 2082
authentication event server dead action authorize voice
authentication event server alive action reinitialize
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 3
no mdix auto
spanning-tree portfast

Re: ISE - Licenceing

pavagupt — Thu, 09 Jul 2020 15:12:58 GMT

nope.

1. For the device connected back to phone, consumes a base license -- as long as it doesn't uses any advanced services like posture/profiling/etc.

2. Phone consumes two licenses - 1 base and 1 plus license - base license for an active AAA session and plus license based on the profiling service.

so, 2 base licenses and 1 plus license would be used.