Contents

Introduction

Prerequisites

Requirements

Components Used

Purpose

Migrate Smart License Registration (SL) to Smart Licensing Using Policy

Show Commands on the Device with Registered Licenses before Upgrade to Smart Licensing Using Policy

Show Commands on the Device after Boot with the Smart Licensing Using Policy Supported Image

Downgrade from Smart Licensing Using Policy to Smart License Registration Image

Migrate SLR to Smart Licensing Using Policy

Show Commands on the Device with an Older Smart License Supported Image

Show Commands on the Device after Booting with the Smart Licensing Using Policy Supported Image

Reporting Usage at a Later Date when Required Based on Policy

Downgrade from Smart Licensing Using Policy to Specific License Reservation Supported Image

Migrate Eval or Eval Expired to Smart Licensing Using Policy

Show Commands for Smart Licenses in Eval/Eval Expired Mode

Show Commands for Smart License Smart Licensing Using Policy after the Upgrade but Usage Not Reported Yet

Show Commands for Smart Licensing Using Policy after Connecting to CSLU and Reporting Usage

Downgrade from Smart Licensing Using Policy Image to Image Supporting Eval or Eval Licenses

Migrate RTU License to Smart Licensing Using Policy

Show Commands on the Device with RTU Licensing

Show Commands on the Device after Upgrading from RTU to Smart Licensing Using Policy Supported Image

Downgrade from Smart Licensing Using Policy Image to Image Supporting RTU Licenses

Downgrade fromSmart Licensing Using Policy Image to Image Supporting Smart License

Smart Licensing Using Policy Custom Policies

Related Information

Introduction

This document describes what to expect after migration from an older license mechanism to the new 'Smart Licensing Using Policy' mechanism in Cisco IOS® XE 17.3.2 and future releases.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on these hardware versions:

- Cisco Catalyst 9500

- Cisco Catalyst 9300

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Note: The methodology and commands can be applied to other Catalyst 9000 series switches. Consult the appropriate configuration guide for the commands and configurations referred to in this document.

Purpose

With the releases of Cisco IOS XE 17.3.2 and 17.4.1, the smart licensing feature has been changed. There is no longer a need to register the licenses of the device with the Cisco Smart Software Manager (CSSM) nor to reserve specific licenses (SLR) from CSSM if the devices are offline. Eval licenses have also been removed. With the Smart Licensing Using Policy, all configured licenses are in use from day zero (the day the Cisco IOS XE 17.3.2 or later image is installed). After that, it is all about reporting license usage to CSSM.

In Smart Licensing Using Policy, no licenses have changed, for Catalyst 9K platforms all licenses are unenforced, and the previous configurations/topologies for registering licenses are still available. Suppose the devices have already been registered or reserved using a previous Smart License release image. In that case, the licenses automatically get converted to Smart Licensing Using Policy licenses with zero-touch once the image is upgraded to a Smart Licensing Using Policy supported image. If the devices are still using the right-to-use licenses or have Eval or Eval Expired images because smart licensing registration/reservation was not completed, there is a new topology utilizing the Cisco Smart License Utility (CSLU) application for Windows 10 (expect future availability with On-Prem satellite or other controllers such as Cisco DNAC). The CSLU sits between the devices and CSSM. It collects the usage data for all devices and provides a single point of contact to CSSM either offline or online.

Migrate Smart License Registration (SL) to Smart Licensing Using Policy

With previous smart licensing images (starting 16.9.1 for all Cat9K switches until 17.3.1), callhome was enabled by default for connection to CSSM in the cloud. This required the device (single switch, stack, or StackWise Virtual (SVL) to be connected to the CSSM through the management port or a front panel downlink/uplink port.

If the devices have already been registered, with the 'smart license transport callhome' or 'smart license transport smart', the conversion to Smart Licensing Using Policy is Zero-Touch. When the device software is upgraded to an image supporting Smart Licensing Using Policy, no configuration change is required in order to support backward compatibility. When the device boots up with the Smart Licensing Using Policy supported image, the idtoken previously used to register the licenses for the Product Instance (PI) is converted to a Trust Code in order to allow communication between the device and CSSM. All licenses are shown as in use instead of Registered and Authorized, and if any Custom Policy is available in the Smart Account, that policy also gets installed. From this point, the license usage for the device gets reported based on the reporting schedule in the policy.

After the conversion to Smart Licensing Using Policy on CSSM, the previous PI is changed from using the hostname to the UDI (PID and serial number) of each of the switches in the PI. For an HA system, the licenses used are all reported in the active switch CSSM PI. The standby and member switches (if available) also have a PI in CSSM but do not report any license usage. If the active switch in an HA system has changed during a reporting period, the license usage is now seen under the new active PI.

Show Commands on the Device with Registered Licenses before Upgrade to Smart Licensing Using Policy

In the show license commands output, notice that the licenses are Registered and Authorized as part of Smart Licensing.

Switch#show license summary

Smart Licensing is ENABLED

Registration:

Status: REGISTERED

Smart Account: BU Production Test

Virtual Account: Cat9K-FranklinDT

Export-Controlled Functionality: ALLOWED

Last Renewal Attempt: None

Next Renewal Attempt: Mar 21 11:08:58 2021 PST

License Authorization:

Status: AUTHORIZED

Last Communication Attempt: SUCCEEDED

Next Communication Attempt: Oct 22 11:09:07 2020 PST

License Usage:

License Entitlement tag Count Status

-----------------------------------------------------------------------------

C9500 Network Advantage (C9500 Network Advantage) 2 AUTHORIZED

C9500-DNA-16X-A (C9500-16X DNA Advantage) 2 AUTHORIZED

Switch#show license usage

License Authorization:

Status: AUTHORIZEDon Sep 22 11:09:07 2020 PST

C9500 Network Advantage (C9500 Network Advantage):

Description: C9500 Network Advantage

Count: 2

Version: 1.0

Status: AUTHORIZED

Export status: NOT RESTRICTED

C9500-DNA-16X-A (C9500-16X DNA Advantage):

Description: C9500-DNA-16X-A

Count: 2

Version: 1.0

Status: AUTHORIZED

Export status: NOT RESTRICTED

Switch#show license status

Smart Licensing is ENABLED

Utility:

Status: DISABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Callhome

Registration:

Status: REGISTERED

Smart Account: BU Production Test

Virtual Account: Cat9K-FranklinDT

Export-Controlled Functionality: ALLOWED

Initial Registration: SUCCEEDED on Sep 22 11:08:58 2020 PST

Last Renewal Attempt: None

Next Renewal Attempt: Mar 21 11:08:57 2021 PST

Registration Expires: Sep 22 11:04:23 2021 PST

License Authorization:

Status: AUTHORIZED on Sep 22 11:09:07 2020 PST

Last Communication Attempt: SUCCEEDED on Sep 22 11:09:07 2020 PST

Next Communication Attempt: Oct 22 11:09:06 2020 PST

Communication Deadline: Dec 21 11:04:34 2020 PST

Export Authorization Key:

Features Authorized:

<none>

Miscellaneus:

Custom Id: <empty>

Show Commands on the Device after Boot with the Smart Licensing Using Policy Supported Image

In the show license outputs, notice that the licenses are now in use instead of Registered and Authorized. Also, the registration idtoken has been automatically used as a trusted code in order to allow communication between CSSM and the device. Also, the Cisco Default policy is installed on the device.

Switch#show license summary

License Usage:

License Entitlement tag Count Status

-----------------------------------------------------------------------------

network-advantage (C9500 Network Advantage) 2 IN USE

dna-advantage (C9500-16X DNA Advantage) 2 IN USE

Switch#show license usage

License Authorization:

Status: Not Applicable

network-advantage (C9500 Network Advantage):

Description: network-advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: network-advantage

Feature Description: network-advantage

Enforcement type: NOT ENFORCED

License type: Perpetual

dna-advantage (C9500-16X DNA Advantage):

Description: C9500-16X DNA Advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: dna-advantage

Feature Description: C9500-16X DNA Advantage

Enforcement type: NOT ENFORCED

License type: Subscription

Switch#show license status

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Callhome

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:*

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:*

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneous:

Custom Id: <empty>

Usage Reporting:**

Last ACK received: Nov 10 08:56:48 2020 PST

Next ACK deadline: Feb 08 08:56:48 2021 PST

Reporting push interval: 30  days

Next ACK push check: <none>

Next report push: Dec 10 08:55:29 2020 PST

Last report push: Nov 10 08:55:29 2020 PST

Last report file write: <none>

Trust Code Installed:

Active: PID:C9500-16X,SN:FCW2233A5ZV

INSTALLED on Nov 10 08:54:48 2020 PST

Standby: PID:C9500-16X,SN:FCW2233A5ZY

INSTALLED on Nov 10 08:54:48 2020 PST

Note: In the command output the Enforced and Export sections of the policy do not apply to C9K switches as all licenses for switches are Unenforced.

Note: The table describes each line in the Usage Reporting section.

Switch#show license udi

UDI: PID:C9500-16X,SN:FCW2233A5ZV

HA UDI List:

Active:PID:C9500-16X,SN:FCW2233A5ZV

Standby:PID:C9500-16X,SN:FCW2233A5ZY

In CSSM both Active and Standby UDIs are displayed instead of the PI hostname under the Product Instances tab.

Click the active PID in order to display the license usage. Click the High Availability tab in order to display all PIDs included in the HA system.

Click the Standby switch UDI, under the Product Instance tab, in order to display information for the Standby switch. The standby switch does not display any license usage since license usage for the device is displayed under the Active switch only.

Once this conversion has occurred, license usage continues to be reported based on the installed policy.

Downgrade from Smart Licensing Using Policy to Smart License Registration Image

If for some reason, the device must be downgraded to a previous image that does not support the Smart Licensing Using Policy, do not change the configuration and install the image to downgrade too. Depending on the image the device is downgraded to, re-registration can be required on the device. Images that were released prior to the 17.3.2 or 17.4.1 development effort have no understanding of Smart Licensing Using Policy or trust code, therefore, after downgrade a re-registration is required. It is a simple matter of getting the idtoken from CSSM and with the use of the command license smart register idtoken <idtoken> all on the device.

The 16.9.6 and later, 16.12.4 and later, and 17.3.1 images have code added in order to recognize the trust code and convert it back to the registration idtoken upon image downgrade. The licenses are automatically placed back in the REGISTERED state and AUTHORIZED.

Migrate SLR to Smart Licensing Using Policy

Customers do not always want to connect the CSSM or the outside due to various reasons. For this, an offline Specific License Reservation (SLR) feature was added in order to allow the switches to be in compliance. The article  describes this and the document Specific License Reservation can be used in order to learn more about it. SLR is available from the 16.9.1 release until the 17.3.1 release.

When a device that has specific license reservations installed is upgraded to a Smart Licensing Using Policy supported image, the license conversion is automatic, and nothing more needs to happen at this time. The licenses are now in use and indicate they were authorized previously with SLR. However, at a later date as indicated by the installed policy, the license usage can need to be reported as shown later in this section.

Show Commands on the Device with an Older Smart License Supported Image

Switch#show license summary

Smart Licensing is ENABLED

License Reservation is ENABLED

Registration:

Status: REGISTERED - SPECIFIC LICENSE RESERVATION

Export-Controlled Functionality: ALLOWED

License Authorization:

Status: AUTHORIZED - RESERVED

License Usage:

License                 Entitlement tag               Count Status

-----------------------------------------------------------------------------

C9500 Network Advantage (C9500 Network Advantage)         2 AUTHORIZED

C9500-DNA-16X-A         (C9500-16X DNA Advantage)         2 AUTHORIZED

Switch#show license reservation

License reservation: ENABLED

Overall status:

Active: PID:C9500-16X,SN:FCW2233A5ZV

Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

Export-Controlled Functionality: ALLOWED

Last Confirmation code: 4bfbea7f

Standby: PID:C9500-16X,SN:FCW2233A5ZY

Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

Export-Controlled Functionality: ALLOWED

Last Confirmation code: 9394f196

Specified license reservations:

C9500 Network Advantage (C9500 Network Advantage):

Description: C9500 Network Advantage

Total reserved count: 2

Term information:

Active: PID:C9500-16X,SN:FCW2233A5ZV

License type: PERPETUAL

Term Count: 1

Standby: PID:C9500-16X,SN:FCW2233A5ZY

License type: PERPETUAL

Term Count: 1

C9500-DNA-16X-A (C9500-16X DNA Advantage):

Description: C9500-DNA-16X-A

Total reserved count: 2

Term information:

Active: PID:C9500-16X,SN:FCW2233A5ZV

License type: TERM

Start Date: 2020-MAR-17 UTC

End Date: 2021-MAR-17 UTC

Term Count: 1

Standby: PID:C9500-16X,SN:FCW2233A5ZY

License type: TERM

Start Date: 2020-MAR-17 UTC

End Date: 2021-MAR-17 UTC

Term Count: 1

Switch#show license status

Smart Licensing is ENABLED

Utility:

Status: DISABLED

License Reservation is ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Callhome

Registration:

Status: REGISTERED - SPECIFIC LICENSE RESERVATION

Export-Controlled Functionality: ALLOWED

Initial Registration: SUCCEEDED on Aug 31 11:07:39 2020 PDT

License Authorization:

Status: AUTHORIZED - RESERVED on Aug 31 10:15:01 2020 PDT

Export Authorization Key:

Features Authorized:

<none>

Show Commands on the Device after Booting with the Smart Licensing Using Policy Supported Image

The show commands display the licenses as in use and indicate they were previously authorized by Specific License Reservation. The Cisco Default policy is in use.

Switch#show license summary

License Reservation is ENABLED

License Usage:

License                 Entitlement tag               Count Status

-----------------------------------------------------------------------------

network-advantage       (C9500 Network Advantage)         2 IN USE

dna-advantage           (C9500-16X DNA Advantage)         2 IN USE

Switch#show license all

Smart Licensing Status

======================

Smart Licensing is ENABLED

License Reservation is ENABLED

Export Authorization Key

Features Authorized:

<none>

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Transport Off

Miscellaneous:

Custom Id: <empty>

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Usage Reporting:

Last ACK received: <none>

Next ACK deadline: Nov 29 10:50:05 2020 PDT

Reporting Interval: 30

Next ACK push check: <none>

Next report push: Aug 31 10:52:05 2020 PDT

Last report push: <none>

Last report file write: <none>

Trust Code Installed: <none>

License Usage

=============

network-advantage (C9500 Network Advantage):

Description: network-advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: network-advantage

Feature Description: network-advantage

Enforcement type: NOT ENFORCED

License type: Perpetual

Reservation:

Reservation status: SPECIFIC INSTALLED

Total reserved count: 2

dna-advantage (C9500-16X DNA Advantage):

Description: C9500-16X DNA Advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: dna-advantage

Feature Description: C9500-16X DNA Advantage

Enforcement type: NOT ENFORCED

License type: Subscription

Reservation:

Reservation status: SPECIFIC INSTALLED

Total reserved count: 2

Product Information

===================

UDI: PID:C9500-16X,SN:FCW2233A5ZV

HA UDI List:

Active:PID:C9500-16X,SN:FCW2233A5ZV

Standby:PID:C9500-16X,SN:FCW2233A5ZY

Agent Version

=============

Smart Agent for Licensing: 5.0.5_rel/42

License Authorizations

======================

Overall status:

Active: PID:C9500-16X,SN:FCW2233A5ZV

Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

Last Confirmation code: 4bfbea7f

Standby: PID:C9500-16X,SN:FCW2233A5ZY

Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

Last Confirmation code: 9394f196

Specified license reservations:

C9500 Network Advantage (C9500 Network Advantage):

Description: C9500 Network Advantage

Total reserved count: 2

Enforcement type: NOT ENFORCED

Term information:

Active: PID:C9500-16X,SN:FCW2233A5ZV

Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

License type: PERPETUAL

Term Count: 1

Standby: PID:C9500-16X,SN:FCW2233A5ZY

Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

License type: PERPETUAL

Term Count: 1

C9500-DNA-16X-A (C9500-16X DNA Advantage):

Description: C9500-DNA-16X-A

Total reserved count: 2

Enforcement type: NOT ENFORCED

Term information:

Active: PID:C9500-16X,SN:FCW2233A5ZV

Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

License type: PERPETUAL

Term Count: 1

Standby: PID:C9500-16X,SN:FCW2233A5ZY

Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT

License type: PERPETUAL

Term Count: 1

Purchased Licenses:

No Purchase Information Available

Derived Licenses:

Entitlement Tag: regid.2017-03.com.cisco.advantagek9-Nyquist-C9500,1.0_f1563759-2e03-4a4c-bec5-5feec525a12c

Entitlement Tag: regid.2017-07.com.cisco.C9500-DNA-16X-A,1.0_ef3574d1-156b-486a-864f-9f779ff3ee49

Switch#show license status

Utility:

Status: DISABLED

License Reservation is ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Transport Off

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneus:

Custom Id: <empty>

Usage Reporting:

Last ACK received: <none>

Next ACK deadline: Nov 29 10:50:05 2020 PDT

Reporting Interval: 30

Next ACK push check: <none>

Next report push: Aug 31 10:52:05 2020 PDT

Last report push: <none>

Last report file write: <none>

Trust Code Installed: <none>

In CSSM, the PIs have not changed and indicate Reserved Licenses since there has been no usage reported to this point. Usage reporting is not required until the policy indicates or Syslog messages are received.

Reporting Usage at a Later Date when Required Based on Policy

At a later date, the device can be required to report usage if Cisco DNA licenses are in use. This can still be done in offline mode as well. However, for an HA system, only one report file is required for the full device. Use the command license smart save usage CLI in order to create the report file to be used in CSSM. Then copy the file to a place accessible by CSSM.

Switch#license smart save usage unreported file flash:RUM-usage-20200925.txt

Switch#copy flash:RUM-usage-20200925.txt tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/

Address or name of remote host [172.27.18.5]?

Destination filename [/auto/tftp-sjc-users2/byodis/RUM-usage-20200925.txt]?

!!

15128 bytes copied in 0.161 secs (93963 bytes/sec)

Now open CSSM, and click the Report tab in the Reports window. Now, click the Usage Data Files tab and then click the Upload Usage Data button in order to upload the usage report file. It asks for the Virtual Account to install, so ensure to choose the correct one. Wait for the report to finish processing (click the Usage Data Files tab in order to refresh the screen and see if it has been completed). If the reporting is successful, the status indicates No errors and a Download ACK file is available to download and install on the device indicating that the usage was received and reported successfully.

Copy this download file to the device or someplace accessible by the device and use the command license smart import in order to import the ACK file to the device.

Switch#license smart import tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/ACK_RUM-usage-20200925.txt

Import Data Successfull

The output of show license status indicates that the ACK was recorded at the correct time.

Switch#show license status

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

License Reservation is ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Off

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneus:

Custom Id: <empty>

Usage Reporting:

Last ACK received: Sep 25 10:12:15 2020 PST

Next ACK deadline: Dec 24 10:12:15 2020 PST

Reporting push interval: 30 days

Next ACK push check: Sep 25 07:55:35 2020 PST

Next report push: Sep 25 10:12:46 2020 PST

Last report push: Sep 25 07:54:33 2020 PST

Last report file write: <none>

Trust Code Installed: <none>

In CSSM, the PIs no longer show Reserved Licenses and license usage is only seen in the Active PI.

Downgrade from Smart Licensing Using Policy to Specific License Reservation Supported Image

If an image is downgraded to a version that does not support Smart Licensing Using Policy but does support SLR, all that is needed is to perform the downgrade on the image. The licenses stay as reserved and authorized - nothing else is required.

Migrate Eval or Eval Expired to Smart Licensing Using Policy

Starting with the 16.9.1 release until the 17.3.1 release, if the licenses were not registered or released, they are by default Eval licenses. After 90 days they become Eval Expired licenses. Both indicate the licenses were OUT OF COMPLIANCE. Since all licenses are unenforced, no feature functionality is lost on the device.

Smart Licensing Using Policy no longer has evaluation states for licenses. Therefore, if any devices have Eval or Eval Expired licenses when the devices are upgraded to a Smart Licensing Using Policy supported image, all those licenses are seen as in use and the Cisco default policy is applied. The licenses are no longer displayed as UNAUTHORIZED or OUT OF COMPLIANCE.

Show Commands for Smart Licenses in Eval/Eval Expired Mode

Switch#show license summary

Smart Licensing is ENABLED

Registration:

Status: UNREGISTERED

Export-Controlled Functionality: NOT ALLOWED

License Authorization:

Status: EVAL MODE

Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 30 seconds

License Usage:

License Entitlement tag Count Status

-----------------------------------------------------------------------------

(C9500 Network Advantage) 2 EVAL MODE

(C9500-16X DNA Advantage) 2 EVAL MODE

Switch#show license usage

License Authorization:

Status: EVAL MODE

Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 21 seconds

(C9500 Network Advantage):

Description:

Count: 2

Version: 1.0

Status: EVAL MODE

Export status: NOT RESTRICTED

(C9500-16X DNA Advantage):

Description:

Count: 2

Version: 1.0

Status: EVAL MODE

Export status: NOT RESTRICTED

Switch#show license status

Smart Licensing is ENABLED

Utility:

Status: DISABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Callhome

Registration:

Status: UNREGISTERED

Export-Controlled Functionality: NOT ALLOWED

License Authorization:

Status: EVAL MODE

Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 15 seconds

Export Authorization Key:

Features Authorized:

<none>

Miscellaneus:

Custom Id: <empty>

Show Commands for Smart License Smart Licensing Using Policy after the Upgrade but Usage Not Reported Yet

Switch#show license summary

License Usage:

License Entitlement tag Count Status

-----------------------------------------------------------------------------

network-advantage (C9500 Network Advantage) 2 IN USE

dna-advantage (C9500-16X DNA Advantage) 2 IN USE

Switch#show license usage

License Authorization:

Status: Not Applicable

network-advantage (C9500 Network Advantage):

Description: network-advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: network-advantage

Feature Description: network-advantage

Enforcement type: NOT ENFORCED

License type: Perpetual

dna-advantage (C9500-16X DNA Advantage):

Description: C9500-16X DNA Advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: dna-advantage

Feature Description: C9500-16X DNA Advantage

Enforcement type: NOT ENFORCED

License type: Subscription

Switch#show license status

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Transport Off

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneous:

Custom Id: <empty>

Usage Reporting:

Last ACK received: <none>

Next ACK deadline: Feb 08 08:27:59 2021 PST

Reporting push interval: 30  days

Next ACK push check: <none>

Next report push: Nov 10 08:29:59 2020 PST

Last report push: <none>

Last report file write: <none>

Trust Code Installed: <none>

Show Commands for Smart Licensing Using Policy after Connecting to CSLU and Reporting Usage

As the Policy in the show license status output indicates, subscription licenses (dna-advantage and dna-essentials) are required to report in 90 days. Any of the various supported usage reporting topologies can be used. See the Smart Licensing Using Policy configuration guide. Also, some links are provided at the end of this article for helpful videos and documentation. The example here is using the CSLU PUSH model with explicit configuration to the CSLU server that is installed on a Windows 10 machine (laptop, server, VM). The CSLU download, installation guide, and user guide can be found at https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2.

Switch#show running-config all | include cslu

license smart transport cslu

Switch#

Switch#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)#license smart url cslu http://10.24.74.180:8182/cslu/v1/pi_

Switch(config)#^Z

Switch#

Switch#write memory

Building configuration...

[OK]

Switch#show running-config all | include cslu

license smart url cslu http://10.24.74.180:8182/cslu/v1/pi

license smart transport cslu

Switch#

To force the license usage to be reported use the "license smart sync" command.

Switch#license smart sync all

Switch#

*Sep 22 10:48:36.050 PST: %SMART_LIC-5-COMM_RESTORED: Communications with Cisco Smart License Utility (CSLU) restored

Note: Use the "all" option for HA device. Use "local" option for standalone switch

Switch#show license summary

License Usage:

License Entitlement tag Count Status

-----------------------------------------------------------------------------

network-advantage (C9500 Network Advantage) 2 IN USE

dna-advantage (C9500-16X DNA Advantage) 2 IN USE

Switch#show license usage

License Authorization:

Status: Not Applicable

network-advantage (C9500 Network Advantage):

Description: network-advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: network-advantage

Feature Description: network-advantage

Enforcement type: NOT ENFORCED

License type: Perpetual

dna-advantage (C9500-16X DNA Advantage):

Description: C9500-16X DNA Advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: dna-advantage

Feature Description: C9500-16X DNA Advantage

Enforcement type: NOT ENFORCED

License type: Subscription

Switch#show license status

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: cslu

Cslu address: http://10.24.74.180:8182/cslu/v1/pi

Proxy:

Not Configured

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneous:

Custom Id: <empty>

Usage Reporting:

Last ACK received: Nov 10 08:56:48 2020 PST

Next ACK deadline: Feb 08 08:56:48 2021 PST

Reporting push interval: 30  days

Next ACK push check: <none>

Next report push: Dec 10 08:55:29 2020 PST

Last report push: Nov 10 08:55:29 2020 PST

Last report file write: <none>

Trust Code Installed: <none>

Downgrade from Smart Licensing Using Policy Image to Image Supporting Eval or Eval Licenses

If an image downgrade is required to an image that does not support SL Using Policy, the licenses revert back to Eval or Eval expired. The original Evaluation Period Remaining is maintained. Since all Cat9K licenses are unenforced, no functionality is lost.

Migrate RTU License to Smart Licensing Using Policy

Right-to-Use (RTU) Licensing was an initial licensing scheme for C9300, C9400, and C9500 up through release 16.8.1a. Smart licensing was not available until 16.9.1.

All licenses are still the same but use older license right-to-use commands for configuration and show commands. Once the image is upgraded to a Smart Licensing Using Policy-supported images, the licenses are in use, the same as is seen with Eval/Eval mode. If there are any Cisco DNA licenses in use, the Cisco Default policy requires usage reporting in 90 days. Any of the different topologies supported for reporting usage with Smart Licensing Using Policy image can be used.

Show Commands on the Device with RTU Licensing

Switch#show license right-to-use summary

License Name Type Period left

------------------------------------------------

network-essentials Permanent Lifetime

dna-essentials Subscription CSSM Managed

------------------------------------------------

License Level In Use: network-essentials+dna-essentials Subscription

License Level on Reboot: network-essentials+dna-essentials Subscription

Switch#show license right-to-use

Slot# License Name Type Period left

----------------------------------------------------

1 network-essentials Permanent Lifetime

1 dna-essentials Subscription CSSM Managed

----------------------------------------------------

License Level on Reboot: network-essentials+dna-essentials Subscription

Slot# License Name Type Period left

----------------------------------------------------

2 network-essentials Permanent Lifetime

2 dna-essentials Subscription CSSM Managed

----------------------------------------------------

License Level on Reboot: network-essentials+dna-essentials Subscription

Slot# License Name Type Period left

----------------------------------------------------

3 network-essentials Permanent Lifetime

3 dna-essentials Subscription CSSM Managed

----------------------------------------------------

License Level on Reboot: network-essentials+dna-essentials Subscription

Switch#show license right-to-use usage

Slot# License Name Type usage-duration(y:m:d) In-Use EULA

----------------------------------------------------------------------------

1 network-essentials Permanent 00:00:00 yes yes

1 network-essentials Evaluation 00:00:00 no no

1 network-essentials Subscription 00:00:00 no no

1 network-advantage Permanent 00:00:00 no no

1 network-advantage Evaluation 00:00:00 no no

1 network-advantage Subscription 00:00:00 no no

1 dna-essentials Evaluation 00:00:00 no no

1 dna-essentials Subscription 00:00:00 yes yes

1 dna-advantage Evaluation 00:00:00 no no

1 dna-advantage Subscription 00:00:00 no no

----------------------------------------------------------------------------

Slot# License Name Type usage-duration(y:m:d) In-Use EULA

----------------------------------------------------------------------------

2 network-essentials Permanent 00:00:00 yes yes

2 network-essentials Evaluation 00:00:00 no no

2 network-essentials Subscription 00:00:00 no no

2 network-advantage Permanent 00:00:00 no no

2 network-advantage Evaluation 00:00:00 no no

2 network-advantage Subscription 00:00:00 no no

2 dna-essentials Evaluation 00:00:00 no no

2 dna-essentials Subscription 00:00:00 yes yes

2 dna-advantage Evaluation 00:00:00 no no

2 dna-advantage Subscription 00:00:00 no no

----------------------------------------------------------------------------

Slot# License Name Type usage-duration(y:m:d) In-Use EULA

----------------------------------------------------------------------------

3 network-essentials Permanent 00:00:00 yes yes

3 network-essentials Evaluation 00:00:00 no no

3 network-essentials Subscription 00:00:00 no no

3 network-advantage Permanent 00:00:00 no no

3 network-advantage Evaluation 00:00:00 no no

3 network-advantage Subscription 00:00:00 no no

3 dna-essentials Evaluation 00:00:00 no no

3 dna-essentials Subscription 00:00:00 yes yes

3 dna-advantage Evaluation 00:00:00 no no

3 dna-advantage Subscription 00:00:00 no no

Show Commands on the Device after Upgrading from RTU to Smart Licensing Using Policy Supported Image

Switch#show license summary

License Usage:

License                 Entitlement Tag               Count Status

-----------------------------------------------------------------------------

network-advantage       (C9300-24 Network Advan...)       2 IN USE

dna-advantage           (C9300-24 DNA Advantage)          2 IN USE

network-advantage       (C9300-48 Network Advan...)       1 IN USE

dna-advantage           (C9300-48 DNA Advantage)          1 IN USE

Switch#show license usage

License Authorization:

Status: Not Applicable

network-advantage (C9300-24 Network Advantage):

Description: C9300-24 Network Advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: network-advantage

Feature Description: C9300-24 Network Advantage

Enforcement type: NOT ENFORCED

License type: Perpetual

dna-advantage (C9300-24 DNA Advantage):

Description: C9300-24 DNA Advantage

Count: 2

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: dna-advantage

Feature Description: C9300-24 DNA Advantage

Enforcement type: NOT ENFORCED

License type: Subscription

network-advantage (C9300-48 Network Advantage):

Description: C9300-48 Network Advantage

Count: 1

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: network-advantage

Feature Description: C9300-48 Network Advantage

Enforcement type: NOT ENFORCED

License type: Perpetual

dna-advantage (C9300-48 DNA Advantage):

Description: C9300-48 DNA Advantage

Count: 1

Version: 1.0

Status: IN USE

Export status: NOT RESTRICTED

Feature Name: dna-advantage

Feature Description: C9300-48 DNA Advantage

Enforcement type: NOT ENFORCED

License type: Subscription

Switch#show license status

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Transport Off

Policy:

Policy in use: Merged from multiple sources.

Reporting ACK required: yes (CISCO default)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 365 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 90 (CISCO default)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 90 (CISCO default)

Reporting frequency (days): 90 (CISCO default)

Report on change (days): 90 (CISCO default)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneous:

Custom Id: <empty>

Usage Reporting:

Last ACK received: <none>

Next ACK deadline: Feb 08 08:27:59 2021 PST

Reporting push interval: 20  days

Next ACK push check: <none>

Next report push: Nov 10 08:29:59 2020 PST

Last report push: <none>

Last report file write: <none>

Trust Code Installed: <none>

These show commands were performed after an upgrade to a Smart Licensing Using Policy-supported image but have not reported usage to CSSM yet. Licenses are all converted to Smart Licensing Using Policy showing IN USE and using the Cisco default policy. If using a subscription license, usage reporting is required in 90 days. After that, Syslog messages are sent from CSSM. However, no feature functionality is lost since all C9K licenses are unenforced.

When required to report, any of the topologies described in the Smart Licensing Using Policy configuration guide can be used. The license show command outputs are similar to those described in this document . Depending on the topology used, some output can differ.

Downgrade from Smart Licensing Using Policy Image to Image Supporting RTU Licenses

If the Cisco IOS XE image needs to be downgraded back to an image prior to 16.9.1, the licenses and feature functionality are preserved. However, any smart licensing configurations are not known and are not saved.

Downgrade from Smart Licensing Using Policy Image to Image Supporting Smart License

If a device is migrated from an image that supports RTU to a Smart Licensing Using Policy supported image and is later downgraded to an image that supports smart licensing prior to 17.3.2 and 17.4.1, the licenses on those devices require registration or specific license reservation operation to be performed.

Smart Licensing Using Policy Custom Policies

It is possible that the company can have negotiated a custom policy with Cisco. If that is the case, Cisco installs that policy into the Smart Account. There can be only one custom policy per Smart Account and it is applied to all Virtual Accounts within that Smart Account. In order to tell if a custom policy is in effect in CSSM, open the Reports view and click the Reporting Policy tab. There can be more than one version, however, only the latest version is available to install.

If there is a custom policy installed in the Smart Account, it is installed when the license usage report is performed. The new custom policy can be seen using the exec command show license status. Instead of Cisco Default, the custom policy is displayed. Depending on what was defined in the custom policy, a mix of custom and default values can be seen. Any fields not defined in the custom policy continue to have the Cisco default values.

If the offline topology or CSLU offline with CSSM topology is used, then the custom policy can be downloaded from CSSM to the file/location accessible by the device. The custom policy can then be installed on the device with the exec command license smart import <device:path/file>.

Switch#show license status

Utility:

Status: DISABLED

Smart Licensing Using Policy:

Status: ENABLED

Data Privacy:

Sending Hostname: yes

Callhome hostname privacy: DISABLED

Smart Licensing hostname privacy: DISABLED

Version privacy: DISABLED

Transport:

Type: Transport Off

Policy:

Policy in use: Installed On Nov 09 09:09:36 2020 PST

Policy name: Custom Policy

Reporting ACK required: yes (Customer Policy)

Unenforced/Non-Export Perpetual Attributes:

First report requirement (days): 60 (Customer Policy)

Reporting frequency (days): 60 (Customer Policy)

Report on change (days): 60 (Customer Policy)

Unenforced/Non-Export Subscription Attributes:

First report requirement (days): 30 (Customer Policy)

Reporting frequency (days): 30 (Customer Policy)

Report on change (days): 30 (Customer Policy)

Enforced (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Export (Perpetual/Subscription) License Attributes:

First report requirement (days): 0 (CISCO default)

Reporting frequency (days): 0 (CISCO default)

Report on change (days): 0 (CISCO default)

Miscellaneous:

Custom Id: <empty>

Usage Reporting:

Last ACK received: Nov 09 09:09:36 2020 PST

Next ACK deadline: Dec 09 09:09:36 2020 PST

Reporting push interval: 30  days

Next ACK push check: Oct 29 14:39:50 2020 PST

Next report push: Nov 09 09:10:07 2020 PST

Last report push: Oct 29 14:35:51 2020 PST

Last report file write: <none>

Trust Code Installed:

Active: PID:C9300-24UX,SN:FCW2303D16Y

INSTALLED on Oct 29 14:35:12 2020 PST

Standby: PID:C9300-24U,SN:FHH2043P09E

INSTALLED on Oct 29 14:35:13 2020 PST

Member: PID:C9300-48T,SN:FCW2139L056

INSTALLED on Oct 29 14:35:13 2020 PST

Related Information

- Release Notes: RN-9200, RN-9300, RN-9400, RN-9500, RN-9600

- Configuration Guides: Cat9200-CG, Cat9300-CG, Cat9400-CG, Cat9500-CG, Cat9600-CG

- Command References: Cat9200-CR, Cat9300-CR, Cat9400-CR, Cat9500-CR, Cat9600-CR

- CSLU for Windows 10 download (includes User Guide and Installer Guide): https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2

- Technical Support & Documentation - Cisco Systems