06-22-2017 04:18 AM - edited 03-11-2019 12:48 AM
I have some Licensing issues with Cisco ISE (Base license).
With Base License I will be able to provide Guest/TrustSec/AAA/Radius dot1x.
1.) On my Cisco ISE I need to purge Endpoints immediately.
But unfortunately I get an error:
"HTTP Status 401 - One or more licenses are Out of Compliance for more than XX days, corresponding service configuration will be disabled"
2.) Edit or Change the Purge Policy is also not working. Maybe due to License Problem.
Is there really more than a Base License needed for such simple things ?
Solved! Go to Solution.
06-22-2017 09:17 AM
Marvin is correct. Bug details:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd01079/?referring_site=bugquickviewclick
06-22-2017 09:24 AM
Thanks Rahul.
They haven't updated the BugID but the 2.2 Release notes confirm it is fixed in Patch 1:
http://www.cisco.com/c/en/us/td/docs/security/ise/2-2/release_notes/ise22_rn.html#pgfId-746713
06-22-2017 09:09 AM
What version of ISE are you using?
2.2 had a bug with this feature that incorrectly looked for a license beyond base (e..g Plus or Apex). I believe 2.2 patch 1 fixed it.
06-22-2017 09:17 AM
Marvin is correct. Bug details:
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd01079/?referring_site=bugquickviewclick
06-22-2017 09:24 AM
Thanks Rahul.
They haven't updated the BugID but the 2.2 Release notes confirm it is fixed in Patch 1:
http://www.cisco.com/c/en/us/td/docs/security/ise/2-2/release_notes/ise22_rn.html#pgfId-746713
06-23-2017 02:01 AM
Thanks Marvin, Thanks Rahul,
Bug describes exactly my problem.
Unfortunately I do have Version 2.2.0.470 Patch1(until now the newest). Problem still exists.
There are more Problems with base license. e.g.
- I also use the myDevice Portal to register Mac-Adresses. This Portal can't be changed anymore.
- Disable Device Profiling. Same Problem.
06-23-2017 05:25 AM
Since you have the patch documented to fix the bug and yet are still seeing the symptoms, please open a TAC case.
They can work with you to best ascertain if it is a new bug or if the fix for old one wasn't properly regression tested (or if it's something else altogether).
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: