Questions about the license of ISE

[linchuanyang]

Good morning. We are looking for the product to replace our freeradius servers, and we have the following questions for Cisco ISE:

1. We want to use one SSID for all clients, and use ISE to separate the different roles (student, employee, faculty, guest, eduroam, alumni, etc.) by reading the attributes from AD. Which kind of licenses are good for our situation (base, plus, advanced, or wireless). Please briefly explain the difference of these licenses.

2. Is the ISE base license a simultaneous license (for example, can 10,000 base license support 10,000 simultaneous wireless clients?). As we know the Aruba clearpass license is based on the number of unique authenticating endpoints (devices) per day (not simultaneous license). Does Cisco ISE license work the same way?

3. We also want to use the role based access control for wired connection later, shall we buy different license than the base or wireless license?

Thank you, and have a nice day.

Antony

[Koh Chin Han]

Answer to 1 :

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_license.html#pgfId-1053140

Answer to 2 :
Same link, it does state which licenses are non stackable.

For 3,
You probably may want to obtain a wireless service but do note of your requirements.

[linchuanyang]

Thank you, Koh Chin

That is very helpful.

Antony