Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISE base vs advanced license

Dear,

Initial I was looking to use VMPS (dynamic VLAN assignment to ports based on MAC).But after some reading I understand 802.1X with Radius is a better solution, and finally I came to ISE.  My question: Is the BASE license for ISE sufficient to use the dynamic VLAN assignment (I.e. After authentication and authorization, a port will be set to a VLAN) or do I need to install the ADVANCED license ?

Regards

Jan

Everyone's tags (2)
7 REPLIES

Re: ISE base vs advanced license

Short : No, base is enough.

Long : Base license for the number of simultaneous device needing to authenticate with ISE, will enable support for 802.1x and mac authentication (mab) for wired/wireless with Cisco switches and controllers, and also has the Guest Portal services. However 802.1x is as you might have found, somewhat more complex to setup, than basic mac authentication, so just be careful and plan you roll-out carefully.

ISE base vs advanced license

Hello,

for 802.1X authentication and dynamic Vlan based authorization Base License is sufficient, No need to buy the advance License.

New Member

ISE base vs advanced license

Hello,

In this scenario, you will be able to fulfill your requirement through base license.

New Member

Re: ISE base vs advanced license

Hi Jan,

You may use the BASE license for this.

BTW, it looks like you are from The Netherlands like me. Only Cisco certified ISE ATP partners are entitled to sell the base and adavanced license. If your current partner is not a Cisco ISE ATP partner, we from AXIANS are and are willing to help you.

Best Regards,

Jan-Willem Molenaar
Technical Consultant
AXIANS
+31302485200

Cisco Employee

Re: ISE base vs advanced license

Advance License is used for Profiling and Posturing. 80.2.1x doesn’t need advance license. Base license is sufficient for the same. Please see the attached PDF for more information.

New Member

I'm pretty sure I have both

I'm pretty sure I have both Profiling and Posturing disabled, yet I get this alert 2-3 times a day.

 

I purchased a 100 endpoint Advanced license to play with, but I do not believe I need to use it as we're just doing 802.1X.

Cisco Employee

Re: ISE base vs advanced license

The Base License is consumed whenever an authentication notification is  received by Cisco ISE. A single Advanced License is consumed when any  one or more of the following services or conditions are applied to the  endpoint session:

Posture

Security Group Tag assignment

Authorization using profile information

Endpoint is registered in the MyDevices Portal

5495
Views
0
Helpful
7
Replies