topic Smart licensing issue in Network Access Control

Smart licensing issue

sujanyakj — Wed, 24 Aug 2022 14:16:48 GMT

We upgrade the ise box from 2.4 to 2.7 version, and we found one error like "secondary admin node is added to the deployment, please register smart licensing"

We tried update, but it didnt fixed. As a lat step we have de-registered the smart license and tried to register it with new token. But we are failing here. Tried multipls time but same issue.kindly suggest on this

Re: Smart licensing issue

Arne Bier — Thu, 25 Aug 2022 23:41:58 GMT

I sometimes have to de-register Smart from the ISE UI, wait 5 minutes. Then I log into the Smart Licensing account, search for the ISE node and then I delete it. Then I re-register from ISE again. Of course, you must have the Secondary Admin Node in full sync with the Primary Admin node before doing all this.

Is ISE talking directly to Smart Licensing (on the internet) or do you go via a CSSM satellite appliance.

Re: Smart licensing issue

sujanyakj — Fri, 26 Aug 2022 05:37:15 GMT

Hi Arne,

When I tried with new token i was able to register to smart licensing and both my VM and TACACs license is showing in compliance except base license which is showing release entitlement (multiple devices which uses radius protocol we have authenticated against ISE and accounting is enabled) and last authorization column ia blank.please suggest here

Re: Smart licensing issue

Arne Bier — Fri, 26 Aug 2022 06:15:45 GMT

As you already hinted, your NAD devices must send RADIUS Accounting (Start/Stop at least) to ISE to make the licensing more real-time.

The Last AuthZ column in Smart Licensing means that ISE has not communicated with the Cisco backend.

IS your ISE configured to talk https directly with the internet?

Have you tried to refresh the Authorization on the ISE Licensing page?

If things don't look normal then best to get Cisco TAC involved

Re: Smart licensing issue

sujanyakj — Mon, 29 Aug 2022 13:36:33 GMT

Hi Arne,

Yes, because the count was varying before upgrade. And ISE contact internet via direct https.

Only last authorization column for base license is not refreshing.

Re: Smart licensing issue

MaErre21325 — Mon, 26 Feb 2024 14:54:46 GMT

Hello @arny

i've the same issue although Ise is correctly able to contact Smart Licensing via internet

Re: Smart licensing issue

Arne Bier — Mon, 26 Feb 2024 21:57:18 GMT

Hi @MaErre21325

What exactly is the problem here? Release Entitlement is not an issue. It means that ISE is not using that license. If you want, you can disable it (e.g. if you don't have any Advantage or Premier)

Re: Smart licensing issue

MaErre21325 — Tue, 27 Feb 2024 08:52:59 GMT

Hi @Arne Bier ,

licenses are ok, i have the "secondary admin node is added to the deployment, please register smart licensing" warning although is correctly registered via smart account

Re: Smart licensing issue

Arne Bier — Tue, 27 Feb 2024 22:50:01 GMT

oh ok - if the Secondary Admin was registered AFTER you already had Smart Licensing working (on a single PAN) then I think ISE gets confused ... and sadly, I recommend you de-register and re-register again. I always leave the Smart Registration at the end of the ISE build - I wait until both PANs are in the same deployment before I register Smart.

The name is "Smart" licensing but I often wonder why they call it that. It leaves much to be desired.

Re: Smart licensing issue

MaErre21325 — Wed, 28 Feb 2024 09:02:22 GMT

yeah, smart license is an euphemism.
de-register and re-register again will impact the service?

Re: Smart licensing issue

Arne Bier — Wed, 28 Feb 2024 09:39:32 GMT

Nope. You can deregister without impact. It will put you back in eval mode.