ISE Failover Device Licensing

[gocarroll]

I am working on getting ISE licensing requirements put together for the upcoming budget. 

I am confused on licensing for a failover appliance. Do we need to get another set of licenses for the failover appliance, or will the licenses for the primary device cover the failover?

[Anas Naqvi · Accepted solution]

Hi,

Prior to ISE Release 1.2, customers could only specify ISE licenses to be registered to a single ISE Administration Node (i.e., the Primary Administration Node). Now, ISE Release 1.2 delivers the capability to register ISE licenses to two Administration Nodes (i.e., Primary and Secondary Administration Nodes). The registration of an ISE license to the Primary Administration Node remains mandatory, but the option to register a Secondary Administrative Node is available.

Reference link,

http://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/sales_tool_c96-729045.html

[gocarroll]

Excellent!

Thank you for your swift response.

[r.westman]

So an ISE license including both primary and secondary UDI is always necessary OR only necessary when the secondary admin node needs to be promoted a primary admin node?

[EvaldasOu]

Could You tell me please:

If I have two ISE physical appliances (3395 and 3495) . One of them is licensed, will HA and failover work ? Is there a difference if You use same appliance models or not?

[Charlie Moreton]

The appliance models will not matter.  Be sure to have both appliances licensed, though.  Here is how to do that:

https://supportforums.cisco.com/discussion/12381521/adding-license-ise-secondary-admin-node

Charles Moreton

[EvaldasOu]

Thanks Charles, that's great!

Also, is it possible to do HA if You have one physical and one virtual (VM) ISE appliance?

Thanks!

[Charlie Moreton]

Yes, you can mix Virtual and Physical Appliances.

[r.westman]

.