topic ISE 2.4 to 3.0 Smart licence question in Network Access Control

ISE 2.4 to 3.0 Smart licence question

cooperd5 — Wed, 16 Jun 2021 13:40:30 GMT

Hi,

I have a standalone ISE in test and a 4-node (PAN, Sec PAN and 2 PSN) in the live environment, all on 2.4, all for device admin only. I need to upgrade owing to EOL of 2.4 and plan to go to 3.0 but I have a Smart Licencing question. In test I have 100 base, 1 VM and 1 device admin, in live I have 100 base, 4 VM and 2 device admin licences, upon completion of the upgrade I see I have to convert to Smart Licences but will the deployment keep working to allow me to do this? ie 30 day grace period or similar?

Or, would I be better going to 2.7?

Thanks!
Darren

Re: ISE 2.4 to 3.0 Smart licence question

imanv — Wed, 16 Jun 2021 17:57:33 GMT

Hello,

Cisco ISE 3.0 is working with SMART Licensing only and there is no way to use traditional licenses.

I suggest to upgrade to 2.7 and then, after reading the following documents carefully, plan to migrate to ISE 3.0

You will absolutely find your questions on below documents :

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/migration-guide-c07-744240.html

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/qa-c67-744190.html

Re: ISE 2.4 to 3.0 Smart licence question

cooperd5 — Thu, 17 Jun 2021 14:09:43 GMT

Thanks but not quite my question. So I have enabled SL in the test and it gives 90 days grace on all licences so I can upgrade to 3.0 and have time to convert my 2.4 licences to Smart.

Re: ISE 2.4 to 3.0 Smart licence question

Marcelo Morais — Thu, 17 Jun 2021 17:07:43 GMT

Hi @cooperd5 ,

yes, that's correct.

"...You can test ISE 3.0 prior to upgrading your entire network, ensure Smart Licensing is working as planned, and then upgrade your production deployment..."

Note: please check: Cisco Smart Licensing Guide.

Hope this helps !!!