HA for TACACS on ISE 2.3 or >

[sheff]

On a ISE TACACS only deployment with two nodes for HA (both running Admin/PSN/MnT roles) do you need to buy one or two device admin license in addition to the 100 Base license min required?

Thanks

[Damien Miller]

You need two and the nodes will be active/active for TACACS requests.

[Arne Bier · Accepted solution]

@Damien Miller - in ISE 2.3 there is no per-PSN licensing requirement for TACACS.  So in this case there is only one TACACS SKU required which will apply to all 50 PSN's in the deployment.

In ISE 2.4 they would need two licenses (of the new SKU type).  But they can also purchase the old SKU and get the same benefit as in previous ISE releases.

At some stage the pre-ISE 2.4 TACACS SKU's will no longer be available for sale.

[Damien Miller]

Whoops, good catch, overlooked the 2.3 piece.

End of sale for the 2.3/older sku is Feb 18th 2019, same as the older vm skus. Get those orders in quickly ;)
https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/eos-eol-notice-c51-741255.html