08-24-2022 07:16 AM
We upgrade the ise box from 2.4 to 2.7 version, and we found one error like "secondary admin node is added to the deployment, please register smart licensing"
We tried update, but it didnt fixed. As a lat step we have de-registered the smart license and tried to register it with new token. But we are failing here. Tried multipls time but same issue.kindly suggest on this
08-25-2022 04:41 PM
I sometimes have to de-register Smart from the ISE UI, wait 5 minutes. Then I log into the Smart Licensing account, search for the ISE node and then I delete it. Then I re-register from ISE again. Of course, you must have the Secondary Admin Node in full sync with the Primary Admin node before doing all this.
Is ISE talking directly to Smart Licensing (on the internet) or do you go via a CSSM satellite appliance.
08-25-2022 10:37 PM
Hi Arne,
When I tried with new token i was able to register to smart licensing and both my VM and TACACs license is showing in compliance except base license which is showing release entitlement (multiple devices which uses radius protocol we have authenticated against ISE and accounting is enabled) and last authorization column ia blank.please suggest here
08-25-2022 11:15 PM
As you already hinted, your NAD devices must send RADIUS Accounting (Start/Stop at least) to ISE to make the licensing more real-time.
The Last AuthZ column in Smart Licensing means that ISE has not communicated with the Cisco backend.
IS your ISE configured to talk https directly with the internet?
Have you tried to refresh the Authorization on the ISE Licensing page?
If things don't look normal then best to get Cisco TAC involved
08-29-2022 06:36 AM
Hi Arne,
Yes, because the count was varying before upgrade. And ISE contact internet via direct https.
Only last authorization column for base license is not refreshing.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: