ISE License Type Consumption

[Karthik_V]

Hello, Having an OT environment of around 300 endpoints, where as 250 are entitled only for MAC based auth and rest 50 are Dot1x supported. In this usecase which type of license needs to be purchased (Ess / Adv / Prem) and what is the count ???

Thanks in advance

[ammahend · Accepted solution]

you just need 300 Essential licenses.

for more details on features supported per license tier see table 1

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/m_Licensing30.html

[Karthik_V]

If I may proceed with Device Admin License, even then also I must purchase 300 essentials ?? Kindly clarify the same

[Aref Alsouqi · Accepted solution]

TACACS licenses are per nodes basis, so if you have 2x PSNs then you would need two TACAS licenses, if you have 4x PSNs then you need four and so on.

[Aref Alsouqi · Accepted solution]

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-guide-og.html

[ammahend · Accepted solution]

no you don’t.

If you need tacacs feature only, then you just need device admin license. license should be equal to number to psn you plan to use for  tacacs. for e.g in a 2 node deployment if both nodes are used for tacacs then you need 2 device admin licenses. 

essential license are shared in deployment, device administration licenses are per psn.