Licensing issue in ISE

[wahid]

Hi,

As below shows, there are only 100 licenses within ISE but it consumes 3765, is there any answer for it ?

How come ISE only allows 100 but still devices exceeded to over the limit ?

[Arne Bier · Accepted solution]

If you hammer the PSN's with enough access requests, then ISE will report these.  Your numbers can be reproduced by a simple lab re-create (shell script that creates 3800 unique sessions.)

The real question is whether you are actually processing this many authentications in your setup?  Have you run an Authentication report to see what/who is authenticating?

Failing that, you're hitting a licensing consumption bug - that is not uncommon.

[Jason Kunst]

Also ISE relies heavily on radius accounting per consumption information in the ordering guide - https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/guide_c07-656177.pdf

and also
https://www.google.com/search?q=ise+radius+accounting+license+consumption&oq=ise+radius+accounting+license+consumption&aqs=chrome..69i57j69i64.9401j0j7&sourceid=chrome&ie=UTF-8

Please also look at http://cs.co/ise-guides for proper configurations for your use case