SNS-3595 Migrate to SNS-3655

[shaunlss]

Hi, A customer have current 2 units of SNS-3595 running in HA with 1x 100 Endpoint Base License & 1x Device Admin License. My question is: When migrating to SNS-3655 as the replacement, how does the Device Admin needs to be licensed since the new licensing is based on per PSN that operate Devise Admin transactions. The previous licensing for the device admin was perpetual for entire deployment. As for the Endpoint Base License, it should be a straight forward license migration since the licensing still remains as perpetual for entire deployment. Thank you in advance.

[xxkozxx]

You might get with your Account Rep on this. However, I believe that there are license blocks for this. Just went through purchasing process with device admin and I think the lowest "block" was 50. As I understand it, that will cover up to 50 PSN's handling device auth. 

[Damien Miller]

The easiest way going forward would be if you still have access to the person who fulfilled the PAK via the Cisco licensing portal. It is possible to self service and rehost ISE licensing if you were the person who fulfilled them in the first place.

An alternative is to open up a licensing case with TAC and they will be able to help migrate the licensing. If going this route, it could be beneficial to switch ISE to smart licensing since it would reduce steps in the future. Having the Cisco sales order number that the licensing was ordered on is important and your VAR should be able to help provide this if you no longer have it.

The original device admin license gets expanded to a 50 node license in 2.4, this will be honored during a license migration case, grandfathered as an early adopter bonus. This happens automatically if you upgrade from 2.3 to 2.4+, it also happens if you apply a legacy TACACS license to a 2.4+ deployment.

In short, you will not lose your perpetual licensing and it will result in 50 node licenses.

[Nidhi · Accepted solution]

You will have to get in touch with your account team. the licensing team will migrate existing valid device admin license to 50 node tacacs license. 

Thanks,

Nidhi