cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

383
Views
10
Helpful
5
Replies
Highlighted
Beginner

Cisco ISE Device Admin Licensing

Do I need a Cisco ISE device admin license for every PSN I enable the service on?

 For example: If I enabled the device admin service on 5 of my policy nodes. Does this mean I would need 5 device admin licenses installed on the primary admin node?

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
VIP Advisor

Re: Cisco ISE Device Admin Licensing

Yes, as of ISE v2.4+ you need one L-ISE-TACACS-ND= license per PSN you enable the device admin role on. So enabling device admin on five PSNs would require ordering 5x L-ISE-TACACS-ND=. You then have the option of either putting them in to a smart account ISE can be pointed at, or fulfilling them as a traditional license file and installing it on the admin node.

View solution in original post

Highlighted
Beginner

Re: Cisco ISE Device Admin Licensing

Ok, great. I just wanted to make sure I understood it correctly. Thanks so much for the clarification.

View solution in original post

5 REPLIES 5
Highlighted
VIP Advisor

Re: Cisco ISE Device Admin Licensing

Yes, as of ISE v2.4+ you need one L-ISE-TACACS-ND= license per PSN you enable the device admin role on. So enabling device admin on five PSNs would require ordering 5x L-ISE-TACACS-ND=. You then have the option of either putting them in to a smart account ISE can be pointed at, or fulfilling them as a traditional license file and installing it on the admin node.

View solution in original post

Highlighted
Beginner

Re: Cisco ISE Device Admin Licensing

Ok, great. I just wanted to make sure I understood it correctly. Thanks so much for the clarification.

View solution in original post

Highlighted
VIP Advisor

Re: Cisco ISE Device Admin Licensing

Hi,

Your device admin license are counted by the number of devices not by the
number of PSN nodes. You PSN nodes consume VM license only. But feature
license can be shared between them.


**** please remember to rate useful posts
Highlighted
VIP Advisor

Re: Cisco ISE Device Admin Licensing

Not with ISE.

That was the case with ACS, 500 vs large deployments. ISE 2.4+ licenses both virtual ISE nodes, and tacacs/device admin nodes by the number deployed. 

Highlighted
VIP Advisor

Re: Cisco ISE Device Admin Licensing

Thanks for correcting me Damien.