Cisco ISE licensing

[lionsplace]

Hi Guys,

I am deploying two ISE Nodes in separate Data centers as standalone which would be playing all personas(PAN,PSN and Mnt), how many base and device admin licenses do I need to procure. single base and single device admin or i will have to procure couple.

[Damien Miller]

Ideally you will be joining the two nodes in to a single deployment. With that, the licenses will be shared across the two nodes.

You will need two device admin node licenses.

You require a minimum of 100 base licenses to install device admin licenses. This is a minimum and base licenses are used for RADIUS sessions. How many you order depends on how many active RADIUS sessions you plan on having at any one time.

If your two nodes are VM's, you will need two small, medium, or large VM node licenses. The VM node license size is dependant on the hardware template you are deploying (memory and cpu). You do not need VM node licenses if you are buying physical ISE SNS servers.

[lionsplace]

Thanks, Damien, So I would require a single base license and 2 device admin licenses?

Would I get the VM licenses pre-installed with the iso files? 

[Damien Miller · Accepted solution]

No licenses are included other than the 90 day evaluation, everything is enabled during the first 90 days.  Here is the bare minimum that you would need to order to deploy this for TACACS/device admin. 

Here is a sample BOM you would need. 

Part Number	Description	Qty
L-ISE-BSE-PLIC	Cisco ISE Base License	1
L-ISE-BSE-P1	Cisco ISE Base License - Sessions 100 to 249	100
R-ISE-VMS-K9=	Cisco ISE Virtual Machine Small	2
L-ISE-TACACS-ND=	Cisco ISE Device Admin Node License	2

This is all covered within the ISE ordering guide. 
https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf

[lionsplace]

Hi Damien,

I would be using Cisco ISE only for tacacs and the no of devices would be around 2500, My question is If i am using both cisco ise nodes in HA why would i need 2 device admin licenses ??