New small ISE 3.x Deployment

[stuartblackwood1]

I'm looking to deploy a small ISE 3.x essentials environment for 100 wired devices with Device Admin for TACACS+. What licenses do I need to purchase?

[balaji.bandi · Accepted solution]

Base License is good enough for only 802.1x and device administration.

Look at below guide if you need more advanced features :

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#3CiscoISELicenses

Are you looking to deploy using appliance or VM (if VM check the resources), also make sure switch has right IOS code for 802.1x deployment.

[stuartblackwood1]

Thanks for this BB, will be looking to deploy it in a VMWare environment that has plenty of resource available. Would this just be two 

ISE-VM-K9

to take care of it?

[stuartblackwood1]

I'm ok with the client licenses BTW

[Rob Ingram · Accepted solution]

@stuartblackwood1 as you are running 3.0 you will need the essentials license at a minimum for 802.1x and for TACACS+ you need the Device Administration license.

You would need the VM license - R-ISE-VMC-K9= x 2

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html#36CiscoISEVirtualMachineLicenses