C3650 LAN base vs IP base (with 802.1x and ISE)

[mfernholm]

Do I really need an IP base license on my 3650 switches to run 802.1x/MAB with dACL:s and ISE?

If you look at datacheet, it lists 802.1x under LAN base, but under IP base “Identity Services Engine (ISE 1.2/1.3)” is listed.

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3650-series-switches/q-and-a-c67-729531.html

What exact ISE function is not working on LAN base? We are not using TrustSec.

I looked at the Cisco Feature Navigator and could not find any feature that we probably will miss.

Today we use:

ISE version 1.4 with base license (will be upgraded to newest version soon)

3750x switches with IP base and some with LAN base.

[ssimonss · Accepted solution]

The text in Table 3 is incorrectly formatted.

802.1x with ACL is supported in all feature sets.

ISE and Prime Infra are both interoperable across all feature sets.

I have raised a docbug through product management for the C3650 to have the Q&A corrected.

[kamlenegi]

Hello All,

Is this issue fixed, I am facing same issue for mab authentication. Wired guest is not authenticating & mab service show stopped. Is this licensing issue in Cisco 3650 for ISE , we are using ISE 2.3 ver. switch 16.3.6.

Thanks

Kamlesh