ISE - Licenceing

[craiglebutt]

Hi

Just reset setup my lab again to start looking a NAC for edge switches in monitor mode.

I noticed no licences are showing up as being used, is this correct?

I've reinstalled a 90day trial again, have 3 devices on, not showing any licence usage for base.

Just wanted to double check this is correct.

A base licence should have been used, or is this when stop using monitor mode?

cheers

[pavagupt · Accepted solution]

that's not an expected behavior. it should have consumed license.  ISE consumes base license for an active session. and advanced licenses for the services and policies that you configure.

[craiglebutt]

Hi

Thanks for reply.  I'll look in to why nothing is showing.

Just clarify, using a IP Phone and PC plugged in the back using the config below.

The IPT would use 2 licences,  1 Base and 1 Plus licence (as changing vlan) and a PC should just use 1 Base Licence?

cheers

 switchport access vlan 2082
switchport mode access
switchport voice vlan 3045
no logging event link-status
authentication event fail action next-method
authentication event server dead action authorize vlan 2082
authentication event server dead action authorize voice
authentication event server alive action reinitialize
authentication host-mode multi-domain
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 3
no mdix auto
spanning-tree portfast

[pavagupt]

nope.

1. For the device connected back to phone, consumes a base license -- as long as it doesn't uses any advanced services like posture/profiling/etc.

2. Phone consumes two licenses - 1 base and 1 plus license - base license for an active AAA session and plus license based on the profiling service.

so, 2 base licenses and 1 plus license would be used.