SNS-3495

[peteryouhannafawzy]

i have SNS-3495-K9 with version 2.3.0.187 , can i install Device Administration License ?

[Mohammed al Baqari · Accepted solution]

If you purchased device admin license then you can install it and use ISE
for TACACs as well

[peteryouhannafawzy]

Can i install it on SNS-3495-K9 with version 2.3.0.187 ?

[Marvin Rhoads]

Yes, you can install it on any version of ISE that supports the Device Administration feature (i.e., 2.0 or greater).

Whether it is hardware or VM-based is not relevant (except for sizing in larger deployments).

[peteryouhannafawzy]

Thanks a lot Marvin

[peteryouhannafawzy]

Do I need an ISE Device Administration license for every ISE appliance or every ISE deployment?

[Mohammed al Baqari]

Depending on your deployment model. If you are having standalone
deployment, then each node needs license. If you are using distributed
model (PAN+PSN) then you need one license installed on PAN node as its
managing the licensing.

[peteryouhannafawzy]

i have a cluster model ?

[Mohammed al Baqari]

In cluster deployment you need license on PAN node only

[Marvin Rhoads]

ISE licenses are always installed once for the entire deployment.

The PAN persona (Primary PAN in a distributed deployment) is always the one that manages the licenses for a given deployment.

[ajc · Accepted solution]

Let me add my 2 cents to this post. Relatively recent, Cisco introduced a new option on the license registration process that allows you to assign a SECONDARY serial number to the same license. That is important because in the past the license was linked to the primary pan only so if that node had to be replaced then you had problems with the licenses on a Secondary PAN promoted as Primary

So my point is, when you are registering the license using the Primary PAN Serial number, INCLUDE the entry of the Secondary PAN as well (redundancy option).

thanks