cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

121
Views
0
Helpful
3
Replies
VIP Advocate

Upgrading / Rebuilding an SNS-3595 and licensing

Hello

 

I am proposing to upgrade a customer's SNS-3595 from ISE 2.2 to ISE 2.4 via the rebuild process ;-)  These nodes have some corruption in them and I would feel more comfortable with a complete rebuild.  I don't have the luxury to reconfigure from scratch, therefore I will restore config onto the new ISE 2.4 PAN.  

 

I remember an older discussion (I cannot find it) where we debated mounting the .iso media over the network vs via a locally attached USB. I am proposing the USB route because my experience tells me it's WAY WAY faster.  Like 8 hours for a network based rebuild, vs 1 hour for USB attached.  I have not done this in a while - my number might be off ... if any has done this recently please remind me. 

 

Question 1:  Can I re-use the same Base license only the newly installed ISE 2.4 appliance? I don’t deal much with appliances but I suspect the config restore might be able to restore the licenses into a physical appliance??? If not:

  • Can I download the text file from the ISE 2.2 system and re-use it later in the ISE 2.4 server?
  • Or ... would the original .lic file be available via the customer's CCO profile?  

If the above is not possible, is the Plan B to re-home the license?  

 

Question 2: How long can I run on 100 endpoint eval in a production network without causing a denial of service?  I thought it was around 30 days of license violation that would cause a lockdown to the ISE Licensing Screen? 

I am buying myself some time to get the licenses re-homed/sorted but I don't want ISE to degrade the service because customer will be well over the 100 endpoint SUSTAINED usage.

 

thanks in advance

Everyone's tags (3)
3 REPLIES 3
Cisco Employee

Re: Upgrading / Rebuilding an SNS-3595 and licensing

On Q1, CFG restores do not provide valid licenses. So, please re-host the licenses at Cisco Licensing portal.

On Q2, see section 5.1.1 in http://cs.co/ise-licensing. See also How to Get ISE Evaluation Software & Licenses

 

VIP Advocate

Re: Upgrading / Rebuilding an SNS-3595 and licensing

Hello @hslai 

 

thanks for the links - I am struggling with the wording in bold (from the August 2019 Licensing document) :

 

"Compliance enforcement: The impact described below is experienced after a deployment is out of compliance for 45 out of 60 consecutive days." 

 

I understand it to mean that the compliance is counted over a period of 60 days. Within those 60 days I am allowed 45 days of "non-compliance" before I am jailed into the ISE Licensing Portal Page?

 

I am unlikely to run into this, but it may take some time to sort out licenses if the customer is busy doing other things.

Cisco Employee

Re: Upgrading / Rebuilding an SNS-3595 and licensing

You are correct regarding how the current enforcement works. Today ISE generates alarms if any licenses expiring in > 90 days. With that and the grace period, I hope the customers have enough to renew. Under some exceptional circumstances, the customers may escalate it through their Cisco account teams.