cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1041
Views
1
Helpful
2
Replies

Multi Vendor Environment

yohh
Cisco Employee
Cisco Employee

Hello,


I have a customer with the following question.

Please let me know if there is a resource with the information.


Thank you!


"We have a mixed environment and only need device administration. Will we be able to utilize ISE for tacacs/radius AAA for avaya network equipment, juniper and Cisco. Would this program work for AAA administration for the systems listed above?"

1 Accepted Solution

Accepted Solutions

bravojared
Level 4
Level 4

Yes.

ISE Base license will handle Device Administration over RADIUS.

ISE Device Administration license will handle Device Administration over TACACS+.

All of those vendors support TACACS+, so if you want to see all device administration in one place and manage it the same way use TACACS+ unless a device does not support TACACS+

If you are not using ISE for network access or other features besides Device Administration, your can get the smallest base license possible (L-ISE-BSE-100=), or if your customer has C1 licensing on their devices they may already own Base licenses.

The Device Admin license is also perpetual license (L-ISE-TACACS=)

Once they see ISE, they will probably be interested in looking at more network access functionality, but this will get you started.

View solution in original post

2 Replies 2

bravojared
Level 4
Level 4

Yes.

ISE Base license will handle Device Administration over RADIUS.

ISE Device Administration license will handle Device Administration over TACACS+.

All of those vendors support TACACS+, so if you want to see all device administration in one place and manage it the same way use TACACS+ unless a device does not support TACACS+

If you are not using ISE for network access or other features besides Device Administration, your can get the smallest base license possible (L-ISE-BSE-100=), or if your customer has C1 licensing on their devices they may already own Base licenses.

The Device Admin license is also perpetual license (L-ISE-TACACS=)

Once they see ISE, they will probably be interested in looking at more network access functionality, but this will get you started.

Much appreciated.

Thank you!