topic Re: ISE License Type Consumption in Network Access Control

ISE License Type Consumption

Karthik_V — Sat, 08 Jul 2023 20:27:13 GMT

Hello, Having an OT environment of around 300 endpoints, where as 250 are entitled only for MAC based auth and rest 50 are Dot1x supported. In this usecase which type of license needs to be purchased (Ess / Adv / Prem) and what is the count ???

Thanks in advance 🙂

Re: ISE License Type Consumption

Ambuj M — Sun, 09 Jul 2023 04:10:28 GMT

you just need 300 Essential licenses.

for more details on features supported per license tier see table 1

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/m_Licensing30.html

Re: ISE License Type Consumption

Karthik_V — Mon, 10 Jul 2023 10:28:28 GMT

If I may proceed with Device Admin License, even then also I must purchase 300 essentials ?? Kindly clarify the same

Re: ISE License Type Consumption

Aref Alsouqi — Mon, 10 Jul 2023 10:41:33 GMT

TACACS licenses are per nodes basis, so if you have 2x PSNs then you would need two TACAS licenses, if you have 4x PSNs then you need four and so on.

Re: ISE License Type Consumption

Aref Alsouqi — Mon, 10 Jul 2023 10:44:05 GMT

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html

Re: ISE License Type Consumption

Ambuj M — Mon, 10 Jul 2023 10:49:26 GMT

no you don’t.

If you need tacacs feature only, then you just need device admin license. license should be equal to number to psn you plan to use for tacacs. for e.g in a 2 node deployment if both nodes are used for tacacs then you need 2 device admin licenses.

essential license are shared in deployment, device administration licenses are per psn.