Cisco ISE v3.x Basic TACACS+ Setup

[Jay233]

Hope you are well.

Hi Guys,

Whats the minimum requirement for Cisco ISE V3.X to run TACACS+ only? 50 users and approx. 500 devices. 

Needs to be resilient so 2 x ISE (Small VM) running all required personas 

Device Admin license x 2 on each VM, what is the limit I.E. Is it based on device or users? 

Confused on the ISE Admin license, would the essentials LIC be enough (100 sessions) or do I need premier?

Cheers,

Jay

[Mohammed al Baqari]

Hi Jay,

If you are doing TACACS+ only for device administration, then no need for
essentials or premiere licenses. Only Device Administration license is
needed. For Radius device administration, you will need essentials license.

See below link which has a table mapping features to licenses.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/guide-c07-656177.html

***** please remember to rate useful posts

[Jay233]

Thanks Mohammed,

So that I understand, with the device admin license only that the DA persona will be allowed.

To administer ISE as I assumed the essentials license was mandatory, is this included in the device admin license?  

Steps > Download ISE > Install > Configure/join the PAN/SPAN etc > License with DA > Policy config > Config NADs >Done?

Assume you can integrate into an external AD/RSA source etc.

Cheers Jay

[Mohammed al Baqari · Accepted solution]

Hi,

The administration license is part of the VM license (small, medium,
large).

What you said about steps to build is correct.

Note: This is for TACACS only. For Radius you need essential license.

***** please remember to rate useful posts

[balaji.bandi]

Hope this information help you : ( DEvice admin only need you)

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/install_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_2.html