11-20-2018 06:28 AM
How is device administrator license consumed ?
Let's say I want to administer 200 device using TACACS , how many license will I need ?
Solved! Go to Solution.
11-20-2018 07:07 AM
From the license ordering guide:
For Cisco ISE 2.3 and earlier versions, only one Device Administration license is required per deployment, regardless of the number of device administration nodes in the deployment. Starting from Cisco ISE 2.4, the number of Device Administration licenses must be equal to the number of device administration nodes in a deployment.
If you are currently using a Device Administration license and plan to upgrade to Release 2.4, TACACS+ features will be supported for 50 Device Administration nodes in Release 2.4.
Regards,
-Tim
04-08-2019 08:01 AM
11-20-2018 07:07 AM
From the license ordering guide:
For Cisco ISE 2.3 and earlier versions, only one Device Administration license is required per deployment, regardless of the number of device administration nodes in the deployment. Starting from Cisco ISE 2.4, the number of Device Administration licenses must be equal to the number of device administration nodes in a deployment.
If you are currently using a Device Administration license and plan to upgrade to Release 2.4, TACACS+ features will be supported for 50 Device Administration nodes in Release 2.4.
Regards,
-Tim
11-20-2018 11:25 AM
Hi Timothy,
Thank you for reply.
We are having two nodes. First Node : PAN (Pri) , Mnt (bac) , Second Node : PAN( bac) & MnT(Pri).
We have 100 device administration licenses. So as per your update we'll be able to administer 100 devices.
Is there any way I can check consumed licenses ?
11-20-2018 12:49 PM - edited 11-20-2018 12:55 PM
Hi,
Assuming you're running ISE 2.4 and above, 100 DA licenses is overkill. It's one DA license per policy node, and the most you can have in a deployment is 50 policy nodes.
Each DA license can be associated with a single policy node and authenticate + authorize via TACACS+ as much as the sizing guidelines permits.
Maybe you're confusing DA licenses with Base/Plus/Apex licenses?
Keep in mind that DA and the others are separate licenses. Also keep in mind that each TACACS+ session doesn't take up a Base license, as opposed to RADIUS authentication/802.1x which does.
As per your usage question, just check out the Licensing option under Administration menu.
04-07-2019 11:26 PM
Hi,
My query is against Cisco ISE device admin node license.
We have procured the 2 VM license for two nodes, along with Base, Apex, Plus and TACACS license.
But I am bit confusing about TACACS device admin license
Below is the TACACS license details from Cisco.
Product Name : L-ISE-TACACS-ND=
Product Description : Cisco ISE Device Admin Node
LicenseProduct Qty : 1
Please let me know. if these license quantity can help us to add 50 devices for TACACS device administration or how many devices we can add with ISE for TACACS device administration..?
We have 50+ network device to Integrate with ISE
ISE running version: 2.4
Implementation type: New with 2.4
Thanks in Advance.!
04-08-2019 08:01 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide