IntroductionDeploy toludenim.com ISE NodesSetup toludenim.com ISE Management AccessManage Users và End-User PortalsEnable and Configure toludenim.com ISE ServicesMonitoring và Troubleshooting toludenim.com ISEReference Quý khách hàng đã xem: Ise là gì Book Title

toludenim.com Identity Services Engine Administrator Guide, Release 1.3

Chapter Title

toludenim.com ISE Licenses

This chapter describes the licensing mechanism and schemes that are available for toludenim.com ISE and how khổng lồ add and upgrade licenses.

toludenim.com ISE Licenses

toludenim.com ISE licensing provides the ability khổng lồ manage the application features và access, such as the number of concurrent endpoints that can use toludenim.com ISE network resources.

To maximize economy for customers, licensing in toludenim.com ISE is supplied in different packages as Base, Plus, Apex, & Mobility Upgrade.

All toludenim.com ISE appliances are supplied with a 90-day Evaluation license. To continue lớn use toludenim.com ISE services after the 90-day Evaluation license expires, & to lớn support more than 100 concurrent endpoints on the network, you must obtain and register Base licenses for the number of concurrent users on your system. If you require additional functionality, you will need Plus and/or Apex licences to lớn enable that functionality.

Licenses are uploaded to the Primary PAN & propagated lớn the other toludenim.com ISE nodes in the cluster. Licenses are centrally managed by the PAN. If you have sầu two PANs deployed in a high-availability pair, obtain a license based on the hardware IDs (UIDs) of both the Primary & Secondary PANs. After you obtain the license, add it only to the Primary PAN. The license gets replicated khổng lồ the Secondary PAN.

After you install the toludenim.com ISE software and initially configure the appliance as the Primary PAN, you must obtain a license for toludenim.com ISE and then register that license. You register all licenses to lớn the toludenim.com ISE Primary PAN via the Primary and Secondary PAN hardware UID. The Primary PAN then centrally manages all the licenses that are registered for your deployment.

toludenim.com recommends installing both Base & Plus or Apex licenses at the same time.

Using a Plus or Apex license requires also using a Base license. However, you vị not need a Plus license in order to have an Apex license or vice versa, since there is no overlap in their functionality.

When you install a Base or Mobility Upgrade license, toludenim.com ISE continues lớn use the default Evaluation license as a separate license for the remainder of its duration.

You cannot nâng cấp the Evaluation license khổng lồ an Plus and/or Apex license without first installing the Base license.

toludenim.com ISE allows you to lớn use more Plus and/or Apex licenses on the system than Base licenses. For example, you can have 100 Base licenses & Plus licenses.

When you install a Mobility Upgrade license, toludenim.com ISE enables all Wired, Wireless, và VPN services.

Table 1. toludenim.com ISE License Packages

ISE License Packages

Perpetual/Subscription (Terms Available)

ISE Functionality Covered

Notes

Base

Perpetual

Basic network access: AAA, IEEE-802.1X

Guest management

Link encryption (MACSec)

TrustSec

ISE Application Programming Interfaces

Plus

Subscription (1, 3, or 5 years)

Bring Your Own Device (BYOD).

Profiling and Feed Services

Endpoint Protection Service (EPS)

toludenim.com pxGrid

MSE integration for location services

Does not include Base services; a Base license is required lớn install the Plus license.

Apex

Subscription (1, 3, or 5 years)

Third Party Mobile Device Management (MDM)

Posture Compliance

Does not include Base services; a Base license is required to install the Apex license.

Mobility

Subscription (1, 3, or 5 years)

Combination of Base, Plus, and Apex for wireless và VPN endpoints

Cannot coexist on a toludenim.com PAN with Base, Plus, or Apex Licenses.

Mobility Upgrade

Subscription (1, 3, or 5 years)

Provides wired tư vấn lớn Mobility license

You can only install a Mobility Upgrade License on top of an existing Mobility license.

Evaluation

Temporary (90 days)

Full toludenim.com ISE functionality is provided for 100 endpoints.

All toludenim.com ISE appliances are supplied with an Evaluation license.

License Consumption

You purchase licenses for the number of concurrent users on the system . A toludenim.com ISE user consumes a license during an active sầu session (always a Base; & a Plus and an Apex license, if you use the functionality covered by these licenses). Once the session ends, the license is released for reuse by other users.


Bạn đang xem: Ise là gì

*

Restriction
toludenim.com ISE license architecture consumption súc tích relies on authorization policy constructs. toludenim.com ISE uses the dictionaries & attributes within authorization rules lớn determine the license to lớn use.

The toludenim.com ISE license is counted as follows:

A Base license is consumed for every active session. The same endpoint also consumes Plus và Apex licenses depending on the features that it is using.

The endpoint consumes the Base license before it consumes a Plus & Apex license.

The endpoint consumes the Plus license before it consumes an Apex license.

One Plus license is consumed per endpoint for any assortment of the license"s features. Likewise, one Apex license is consumed per endpoint for any assortment of its features.

Licenses are counted against concurrent, active sầu sessions.

Licenses are released for all features when the endpoint"s session ends.

One AnyConnect Apex user license is consumed by each user who uses AnyConnect regardless of the number of devices that the user owns & whether or not the user has an active sầu connection to lớn the network.

To avoid service disruption, toludenim.com ISE continues to lớn provide services to lớn endpoints that exceed license entitlement. toludenim.com ISE instead relies on RADIUS accounting functions to track concurrent endpoints on the network và generates an alarm when the endpoint count of the previous day exceeded the amount of licenses.

View License Consumption

You can view your system"s current license consumption from the Licensing dashboard at: Administration > System > Licensing. Consumption is portrayed as in the following image: Figure 1. Traditional License Consumption
*

Xem thêm: Định Nghĩa Của Prospecting Là Gì, Nghĩa Của Từ Prospecting, Prospecting Là Gì

The License Consumption graph, in the License Usage area, is updated every 30 minutes. This window also displays the type of licenses purchased, the total number of concurrent users permitted on the system, & the expiry date of subscription services.

If you want to see your system"s license consumption over multiple weeks, cliông xã Usage Over Time. Each bar in the graph shows the maximum number of licenses used during a period of one week.

Unregistered License Consumption

Problem

License consumption relies on the attributes used in the authorization policy with which the endpoint is matched.

Consider you only have a Base license registered on your system (you deleted the 90-day Evaluation license). You will be able khổng lồ see and configure the corresponding Base thực đơn items and features.

If you configure (mis-configure) an authorization policy to use a feature (for example: Session:PostureStatus) that requires an Apex license, & if an endpoint matches this authorization policy then:

The endpoint will consume an Apex license, despite the fact that an Apex license has not been registered on the system.

Notifications to lớn this effect will appear whenever you log in.

toludenim.com ISE displays notifications và alarms "Exceeded license usage than allowed" (technically, this is to lớn be expected as there are no registered Apex licenses on the system, but an endpoint is consuming one).

Possible Causes

Due khổng lồ authorization policy mis-configuration, the Licensing table can show that toludenim.com ISE is consuming a license you have sầu not purchased & registered. Before you purchase Plus or an Apex license, the toludenim.com ISE GUI does not display the functionality covered by that license. However, once you have sầu purchased a license, the user interface continues khổng lồ display their functionality even after the license has expired or exceeded its endpoint consumption. Thus, you are able lớn configure them even if you bởi vì not have a valid license for them.

Solution

In the toludenim.com ISE GUI, click the Menu ibé (

*

) and choose Policy > Authorization, identify the authorization rule that is using the feature(s) for which you bởi vì not have a registered license, and reconfigure that rule.

Manage License Files

This section explains how to lớn register, re-host, renew, migrate, tăng cấp, & remove ISE licenses:

Register Licenses

Before you begin

Consult your toludenim.com partner/tài khoản team about the types of licenses and number of concurrent users you require for your installation, together with the various packages you can purchase to maximize economy.

Procedure Step1

From the ordering system (toludenim.com Commerce Workspace - CCW) on toludenim.com"s trang web www.toludenim.com, order the required licenses.

After about an hour, an gmail confirmation containing the Product Authorization Key (PAK) is sent.

Step2

From the toludenim.com ISE Administration portal, choose AdministrationSystemLicensing. Make a note of the node information in the Licensing Details section: Product Identifier (PID), Version Identifier (VID), & Serial Number (SN).

Step3

Go to www.toludenim.com/go/licensing, and where prompted, enter the PAK of the license you received, the node information, & some details about your company.

The PAK number can be obtained from the sticker located on the software"s CD sleeve sầu or on a License Clalặng Certificate that was physically mailed khổng lồ you. Post license registration, the permanent license will be sent to your provided gmail address. Licenses are sent from licensingChuyên mục: Hỏi Đáp
Bài viết liên quan

Trả lời

Email của bạn sẽ không được hiển thị công khai. Các trường bắt buộc được đánh dấu *