06-07-2018 02:30 AM - edited 02-21-2020 10:57 AM
Hello
I'm having issues understanding the use of this SKU : R-ISE-VM-K9= (descripted as virtual image)
When those exists : (descripted as virtual machines)
R-ISE-VMS-K9=
R-ISE-VMM-K9=
R-ISE-VML-K9=
"R-ISE-VM-K9=" is also EOL since February 2018.
For example, if I'm asked to size a VM ISE solution for 4K endpoints with PLUS licences - should I go for this?
R-ISE-VMM-K9= x 1 or/and R-ISE-VM-K9= x 1
L-ISE-BSE-5K= x 1
L-ISE-TACACS= x 1
Also, is there a difference between what they call "virtual machine" and "vitual image" ? (in the ordering guide)
Another thing, why would a client purchase multiple VMs as well as multiple TACACS+ licences for the same environment?
Thank you very much for you help !
XLG
Solved! Go to Solution.
06-07-2018 05:57 AM
Hi
The new SKUs are:
R-ISE-VMS-K9
R-ISE-VMM-K9
R-ISE-VML-K9
This is more in terms of how large is your deployment and pick the right VM.
You can check on ISE ordering guide: https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf
Price is different as well between them. Before you had 1 VM licence and no matter how large it was, it was same price for all. Now, with ISE 2.4, all licensing changed and you can get the small VM cheaper than before (I believe it's 1k less) but also it will be cheaper than the large VM.
It becomes more important in terms of design to define which one will fit you requirements. You can use several links to help you designing it:
- https://communities.cisco.com/thread/76628?start=0&tstart=0
If you have 4k devices to handle, small VM should be enough.
For Tacacs, before it was 1 licence for the complete cluster no matter if you activated Tacacs feature on 1 or more PSNs. Now, it's 1 licence per node activated. Usually you would have at least 2 licences for redundancy purposes.
You gave SKUs for tacacs and base but not for plus licences. You said you would need plus for 4k. Take a look on ordering guide (link dropped before) to see which SKU to use.
06-07-2018 05:57 AM
Hi
The new SKUs are:
R-ISE-VMS-K9
R-ISE-VMM-K9
R-ISE-VML-K9
This is more in terms of how large is your deployment and pick the right VM.
You can check on ISE ordering guide: https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf
Price is different as well between them. Before you had 1 VM licence and no matter how large it was, it was same price for all. Now, with ISE 2.4, all licensing changed and you can get the small VM cheaper than before (I believe it's 1k less) but also it will be cheaper than the large VM.
It becomes more important in terms of design to define which one will fit you requirements. You can use several links to help you designing it:
- https://communities.cisco.com/thread/76628?start=0&tstart=0
If you have 4k devices to handle, small VM should be enough.
For Tacacs, before it was 1 licence for the complete cluster no matter if you activated Tacacs feature on 1 or more PSNs. Now, it's 1 licence per node activated. Usually you would have at least 2 licences for redundancy purposes.
You gave SKUs for tacacs and base but not for plus licences. You said you would need plus for 4k. Take a look on ordering guide (link dropped before) to see which SKU to use.
06-07-2018 06:00 AM
06-07-2018 06:27 AM
08-29-2018 03:09 AM
What about of the deployment of the virtual machines.. if you have 1 big site (200 users) and if we have 10 small sites (100 users) that is required to have Policy node in each small sites. How many VM small license is required to have?
08-29-2018 10:01 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide