topic expired license, no access to admin->proxy to talk to Smart Account in Network Access Control

expired license, no access to admin->proxy to talk to Smart Account

laurathaqi — Fri, 03 Dec 2021 15:59:03 GMT

Hi community,

I have an ISE appliance, which has expired licenses.

it does not allow me to add a proxy on it to allow ISE to talk to Smart Account and get Licenses. Administration Gui is blocked.

How to add proxy, so it allows me to sync to the Smart Account?

Thank you,

Laura

Re: expired license, no access to admin->proxy to talk to Smart Acc

Arne Bier — Thu, 09 Dec 2021 04:47:18 GMT

Hi @laurathaqi

Is this ISE 3.x?

If not, then you could request an eval license from software.cisco.com to allow you some grace period to log back into the GUI.

If it's ISE 3.x and you have expired the eval license, then you could request Cisco TAC to grant you some eval licenses in the Smart Account. If the Smart Account however is only reachable via Proxy, then you may have to see some proxy bypass to allow ISE to talk directly to tools.cisco.com.

I have not been in this situation myself - sounds like a TAC case. If it's a lab, then you could run a config backup on the CLI, and then restore the config to factory defaults. Then you will be in 90 day eval again.

Re: expired license, no access to admin->proxy to talk to Smart Acc

thomas — Fri, 10 Dec 2021 04:35:40 GMT

Laura, you're saying with Base licenses expired ISE will only let you reach the Licensing page but not the Proxy Settings page to add a proxy to register and get your new Licenses in your Smart Account?

Re: expired license, no access to admin->proxy to talk to Smart Acc

laurathaqi — Tue, 14 Dec 2021 10:00:12 GMT

Hi @thomas

Exactly that use case. Needed to create an exception and allow ISE direct Internet Access to make it work to the Smart Account. Wasn't working differently.

Thank you,

Laura

Re: expired license, no access to admin->proxy to talk to Smart Acc

laurathaqi — Tue, 14 Dec 2021 10:01:44 GMT

Hi @Arne Bier

Made an Exception and let ISE to communicate to Internet temporary, and this is how I made it to get the Licenses I had in Smart Account.

However, I would suggest the Cisci ISE Engineers to think on allowing the Proxy tab also, as its needed in this use Case.

Thank you,

Laura

Re: expired license, no access to admin->proxy to talk to Smart Acc

Marcelo Morais — Tue, 14 Dec 2021 22:11:01 GMT

Hi @laurathaqi ,

an Idea for that was created at Cisco CCP: ISE: access to Proxy Settings when License expired.

"When ISE License expired, we only have access to Licensing page, but if License - Connection Method is HTTPS Proxy, then we also need access to the Proxy Settings.
Since the access to Proxy Settings is not allowed, this creates an issue to solve the expired license.
Any possibility to integrate such feature in roadmap ?"

Hope this helps !!!

Re: expired license, no access to admin->proxy to talk to Smart Acc

thomas — Wed, 15 Dec 2021 02:14:27 GMT

Thank you for that feedback - I will share this thread with the Licensing Product Manager to get it changed!

Re: expired license, no access to admin->proxy to talk to Smart Acc

hslai — Sun, 19 Dec 2021 02:50:25 GMT

CSCvw28365

has been addressed in ISE 3.0 Patch 2 and 3.1 FCS.