ISE Licensing

Hussain29730 — Wed, 19 Aug 2020 05:20:26 GMT

i have got a 3595 box with 2.4 software. The Base License has been expired.

As shown below, its been consumed 535 and has only 200 for license, now can i reset the Base to zero some how and add a new license for 100 users? or the new license has to be above 535 for my to have access to base functions??

Re: ISE Licensing

Mark Elsen — Wed, 19 Aug 2020 07:28:16 GMT

- Post moved to Network Access Control.

Re: ISE Licensing

Damien Miller — Wed, 19 Aug 2020 16:11:39 GMT

Without a complete reinstall / fresh start, there is no way to reset the consumed licenses. These do however adjust dynamically based on the usage of the network. ISE licensing is based around the number of active sessions using a particular feature sets. In the case of base licenses, every endpoint that performs authentication and we see a RADIUS session for will consume a licenses.

In some environments, RADIUS accounting can be missing or not set up correctly leading to ISE not receiving RADIUS accounting stop messages. This can lead to higher than expected licensing usage since active RADIUS sessions are not cleaned up until they time out after five days. A RADIUS stop message ends an active session on receipt rather than pending for the timeout period.

It's expected that if you are running ISE you will be licensed to handle the active sessions the deployment sees. If left too long in an out of compliance state like this, ISE will essentially lock you out of the admin portal and present only the licensing page for remediation.

topic Re: ISE Licensing in Network Access Control

ISE Licensing

Re: ISE Licensing

Re: ISE Licensing