topic Re: Active/standby Deployment licensing query for version 3.0 in Network Access Control

Active/standby Deployment licensing query for version 3.0

abdulmoiz2006 — Thu, 18 Feb 2021 19:07:09 GMT

I have a new project 17 locations office around 1000 nodes, we are installing ISE on Vmware one Active and one Standby device, for premier subscription do we need one set of license or 2 set of licenses one for each device?
- Device administration license is to be purchased seperate 1 for each device?

- Do we require any other license if installing on Vmware?

Re: Active/standby Deployment licensing query for version 3.0

Marcelo Morais — Thu, 18 Feb 2021 19:51:05 GMT

Hi @abdulmoiz2006 ,

please take a look at: ISE Ordering Guide, search for 3.3 Virtual Machine and Device Administration License behavior.

Hope this helps !!!

Re: Active/standby Deployment licensing query for version 3.0

Damien Miller — Thu, 18 Feb 2021 22:05:25 GMT

All ISE nodes in a deployment share a single pool of licensing.

You will need two virtual ISE node licenses (small/medium/large), two tacacs node licenses, and then enough licensing to cover your endpoint authentication requirements (essential/advantage/premier) depending on the feature set.

The endpoint licensing is measured based on the active endpoints on the network. The number of Switches and WLCs is not important, it's how many things are connecting to these network access devices and authenticated by ISE at any moment in time.

If you're 1000 nodes you mention is referring to 1000 endpoints, then an example BOM may look like this. There is a strong case for ordering only advantage licensing vs a mix of base + advantage, but quite a few desirable features exist in the advantage/premier endpoint license.
2x R-ISE-VMS-K9=
2x L-ISE-TACACS-ND=
Top Level endpoint SKU: ISE-SEC-SUB
500x ISE-E-LIC
500x ISE-A-LIC

Re: Active/standby Deployment licensing query for version 3.0

abdulmoiz2006 — Fri, 19 Feb 2021 09:14:28 GMT

Thanks for the replies, what I have understood is 2 VM license, 2 Device Admin license, 500 Essentials +500 Advantage as not all devices would require full features, do I need to buy premier licensing if we do Posturing of devices?

Re: Active/standby Deployment licensing query for version 3.0

Marcelo Morais — Fri, 19 Feb 2021 10:39:11 GMT

Hi @abdulmoiz2006

for Posture you need an Apex Licensing (Old Model) or Premier Licensing (New Model).

PS. please take a look at ISE Ordering Guide (search for 3. What's New).

Note: for Posture, if you are going to use Cisco AnyConnect as an Agent of Posture, then take a look at Cisco AnyConnect Ordering Guide (search for 3. Licenses) ... AnyConnect Apex license.

Hope this helps !!!