cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1976
Views
10
Helpful
2
Replies

ISE Licensing

Hussain29730
Beginner
Beginner

i have got a 3595 box with 2.4 software. The Base License has been expired.

As shown below, its been consumed 535 and has only 200 for license, now can i reset the Base to zero some how and add a new license for 100 users? or the new license has to be above 535 for my to have access to base functions??

license1.PNG

1 Accepted Solution

Accepted Solutions

Without a complete reinstall / fresh start, there is no way to reset the consumed licenses. These do however adjust dynamically based on the usage of the network. ISE licensing is based around the number of active sessions using a particular feature sets. In the case of base licenses, every endpoint that performs authentication and we see a RADIUS session for will consume a licenses.

In some environments, RADIUS accounting can be missing or not set up correctly leading to ISE not receiving RADIUS accounting stop messages. This can lead to higher than expected licensing usage since active RADIUS sessions are not cleaned up until they time out after five days. A RADIUS stop message ends an active session on receipt rather than pending for the timeout period.

It's expected that if you are running ISE you will be licensed to handle the active sessions the deployment sees. If left too long in an out of compliance state like this, ISE will essentially lock you out of the admin portal and present only the licensing page for remediation.

View solution in original post

2 Replies 2

marce1000
VIP
VIP

 

 - Post moved to Network Access Control.

 M.



-- ' 'Good body every evening' ' this sentence was once spotted on a logo at the entrance of a Weight Watchers Club !

Without a complete reinstall / fresh start, there is no way to reset the consumed licenses. These do however adjust dynamically based on the usage of the network. ISE licensing is based around the number of active sessions using a particular feature sets. In the case of base licenses, every endpoint that performs authentication and we see a RADIUS session for will consume a licenses.

In some environments, RADIUS accounting can be missing or not set up correctly leading to ISE not receiving RADIUS accounting stop messages. This can lead to higher than expected licensing usage since active RADIUS sessions are not cleaned up until they time out after five days. A RADIUS stop message ends an active session on receipt rather than pending for the timeout period.

It's expected that if you are running ISE you will be licensed to handle the active sessions the deployment sees. If left too long in an out of compliance state like this, ISE will essentially lock you out of the admin portal and present only the licensing page for remediation.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: