topic Re: Cisco ISE v3.x Basic TACACS+ Setup in Network Access Control

Cisco ISE v3.x Basic TACACS+ Setup

Jay233 — Thu, 12 Aug 2021 09:58:06 GMT

Hope you are well.

Hi Guys,

Whats the minimum requirement for Cisco ISE V3.X to run TACACS+ only? 50 users and approx. 500 devices.

Needs to be resilient so 2 x ISE (Small VM) running all required personas

Device Admin license x 2 on each VM, what is the limit I.E. Is it based on device or users?

Confused on the ISE Admin license, would the essentials LIC be enough (100 sessions) or do I need premier?

Cheers,

Jay

Re: Cisco ISE v3.x Basic TACACS Setup

Mohammed al Baqari — Thu, 12 Aug 2021 10:32:43 GMT

Hi Jay,

If you are doing TACACS+ only for device administration, then no need for
essentials or premiere licenses. Only Device Administration license is
needed. For Radius device administration, you will need essentials license.

See below link which has a table mapping features to licenses.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-656177.html

***** please remember to rate useful posts

Re: Cisco ISE v3.x Basic TACACS+ Setup

balaji.bandi — Thu, 12 Aug 2021 10:37:02 GMT

Hope this information help you : ( DEvice admin only need you)

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/install_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_2.html

Re: Cisco ISE v3.x Basic TACACS Setup

Jay233 — Thu, 12 Aug 2021 11:11:56 GMT

Thanks Mohammed,

So that I understand, with the device admin license only that the DA persona will be allowed.

To administer ISE as I assumed the essentials license was mandatory, is this included in the device admin license?

Steps > Download ISE > Install > Configure/join the PAN/SPAN etc > License with DA > Policy config > Config NADs >Done?

Assume you can integrate into an external AD/RSA source etc.

Cheers Jay

Re: Cisco ISE v3.x Basic TACACS Setup

Mohammed al Baqari — Thu, 12 Aug 2021 15:17:43 GMT

Hi,

The administration license is part of the VM license (small, medium,
large).

What you said about steps to build is correct.

Note: This is for TACACS only. For Radius you need essential license.

***** please remember to rate useful posts