Base License consumption with RADIUS for Device Login

[sdfads]

Hi Team

For testing, I configured an integration between Firepower Management Center and ISE for RADIUS user authentication, using the following guide as a reference: https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118541-configure-firesight-00.html

Checking on ISE, apparently a Base license is consumed:

But in licensing consumption, appears that 0 Base licenses are consumed. Is this behavior correct?

This verification is for a customer that is migrating from ACS to ISE, and they are using RADIUS for login into some devices that do not support TACACS+, and we want to recommend the correct Base licensing.

Thank you.

Regards,

Annya

[ognyan.totev]

Hello,every radius session consume 1 license until this radius session is active. After user logout this radius session is stoped and license is free.

[hslai · Accepted solution]

ISE RADIUS sessions are keying off Endpoint ID or Calling-Station-ID. Since the FireSIGHT not tracking users by calling station id as shown in the guide, then there is no license usage. Customers would still need the minimal license counts for entitlements.