08-30-2018 12:37 PM
Hey guys,
I see some confusing documentation around Cisco ISE and the Cisco SSMS (satellite server for smart licensing). All install guides suggest "Cisco Smart Software Manager satellite is not supported." Yet, I've had other folks mention that if you enter the SSMS into Admin - System - Settings - Smart Call Home -Transport Gateway, that ISE will communicate with the SSMS as long you change the Smart License Connection Method to Transport Gateway. If this does work, is the documentation no longer correct? Thanks.
Neil
Solved! Go to Solution.
08-30-2018 03:52 PM
I can tell you from experience that ISE 2.4 and SSMS 5.0.1 do communicate with each other. The licenses are all displayed correctly and all is well. I think the documentation has been a bit neglected in that area.
But. I have not had much joy getting this configuration to work longer than 24 hours. After 24 hours the ISE PAN stops talking TCP to the SSMS. Even when you try and nudge it back into life (renew subscription) then a tcpdump shows not a single TCP connection attempt from ISE. I know that SSMS is not to blame, because the other clients (Cisco Prime Infrastructure) are working just fine.
I have given up on the SSMS<->ISE integration and gone straight to the https connection method. it's a pity. I think it's buggy
08-31-2018 04:18 PM
08-30-2018 03:52 PM
I can tell you from experience that ISE 2.4 and SSMS 5.0.1 do communicate with each other. The licenses are all displayed correctly and all is well. I think the documentation has been a bit neglected in that area.
But. I have not had much joy getting this configuration to work longer than 24 hours. After 24 hours the ISE PAN stops talking TCP to the SSMS. Even when you try and nudge it back into life (renew subscription) then a tcpdump shows not a single TCP connection attempt from ISE. I know that SSMS is not to blame, because the other clients (Cisco Prime Infrastructure) are working just fine.
I have given up on the SSMS<->ISE integration and gone straight to the https connection method. it's a pity. I think it's buggy
08-31-2018 04:18 PM
See CSCvk21296
So, no support yet in ISE.
09-01-2018 01:39 AM
@hslai What product should we be using then when ISE is set to transport mode?
09-01-2018 08:47 AM
Either direct connections or back to traditional licensing.
It involves at least three components (call home proxy, smart licensing, and infrastructure) in ISE, so the team is looking to address it for the next ISE release.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide