topic Re: New small ISE 3.x Deployment in Network Access Control

New small ISE 3.x Deployment

stuartblackwood1 — Tue, 08 Nov 2022 11:24:02 GMT

I'm looking to deploy a small ISE 3.x essentials environment for 100 wired devices with Device Admin for TACACS+. What licenses do I need to purchase?

Re: New small ISE 3.x Deployment

balaji.bandi — Tue, 08 Nov 2022 11:59:58 GMT

Base License is good enough for only 802.1x and device administration.

Look at below guide if you need more advanced features :

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#3CiscoISELicenses

Are you looking to deploy using appliance or VM (if VM check the resources), also make sure switch has right IOS code for 802.1x deployment.

Re: New small ISE 3.x Deployment

stuartblackwood1 — Tue, 08 Nov 2022 12:05:53 GMT

Thanks for this BB, will be looking to deploy it in a VMWare environment that has plenty of resource available. Would this just be two

ISE-VM-K9

to take care of it?

Re: New small ISE 3.x Deployment

stuartblackwood1 — Tue, 08 Nov 2022 12:06:28 GMT

I'm ok with the client licenses BTW

Re: New small ISE 3.x Deployment

Rob Ingram — Tue, 08 Nov 2022 13:18:48 GMT

@stuartblackwood1 as you are running 3.0 you will need the essentials license at a minimum for 802.1x and for TACACS+ you need the Device Administration license.

You would need the VM license - R-ISE-VMC-K9= x 2

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#36CiscoISEVirtualMachineLicenses