Replacing ACS with ISE

[DAVID THORNTON]

What is required to replace ACS with ISE in simple terms?

I am looking to basically authenticate wired and wireless access against the local/AD) user database via Cisco kit

I am thinking all I need is the BASE (perpetual) license rather than the advanced/wireless licenses

Is there a limit to how many devices or users the base can deal with in its simplest form.

I would also like to be able to push out a splash screen for wireless users during authentication. Can this be done just with the ISE Base License alone for a wireless solution (via WLC with LWAPS or Autonomous APs)

thanks 

dave

[Saurav Lodh]

you can achieve the same this way

[kaaftab]

yes you can authenticate the user using the ISE and but you need a advance license if you want to use both wire and wireless here is small table to help you understand the license requirements also the max. devices support depends on the type of deployment and with advance feature you have the abilitity of profiling and posturing which provide very good control for admins in the network

Software Packages	Options
Base	Capabilities: Basic network access and guest access Network deployment support: Wired, wireless, and VPN License prerequisite: None Perpetual license Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Advanced	Capabilities: Profiler and feed service, posture, MDM integration, automated endpoint onboarding, and Security Group Access (SGA) Network deployment support: Wired, wireless, and VPN License prerequisite: Base license Term license: 1, 3- and 5-year terms Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Wireless	Capabilities: Basic network access, guest access, profiler, posture, and SGA Network deployment support: Wireless License prerequisite: None Term license: 1, 3- and 5-year terms Licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints
Wireless Upgrade	Capabilities: Basic network access, guest access, profiler, posture, and SGA Network deployment support: Wired, wireless, and VPN License prerequisite: Wireless license Term license: 1, 3- and 5-year terms Upgrade licenses are available for 100, 250, 500, 1000, 1500, 2500, 3500, 5000, 10,000, 25,000, 50,000, and 100,000 endpoints

***Do rate Hekofuls posts***

[Venkatesh Attuluri]

check

http://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/ACS-Migration-AAG.pdf

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/migration_guide/ise_migration_guide/ise_mig_overview.html