使用策略將Catalyst許可證遷移到智慧許可

簡介

本文檔介紹從較舊的許可證機制遷移到Cisco IOS^® XE 17.3.2及未來版本中的新「使用策略的智慧許可」機制後的情況。

必要條件

需求

本文件沒有特定需求。

採用元件

本檔案中的資訊是根據以下硬體版本：

• Cisco Catalyst 9500
• Cisco Catalyst 9300

本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除（預設）的組態來啟動。如果您的網路運作中，請確保您瞭解任何指令可能造成的影響。

注意：這些方法和命令可應用於其他Catalyst 9000系列交換機。有關本文檔中提到的命令和配置，請參閱相應的配置指南。

目的

隨著Cisco IOS XE 17.3.2和17.4.1的發佈，智慧許可功能已發生變化。如果裝置離線，則不再需要使用思科智慧軟體管理員(CSSM)註冊裝置的授權，也不需要從CSSM保留特定授權(SLR)。評估許可證也已刪除。使用智慧許可策略，所有配置的許可證從零日（安裝Cisco IOS XE 17.3.2或更高版本的映像的那一天）開始使用。之後，只需向CSSM報告許可證使用情況。

在使用策略的智慧許可中，沒有更改任何許可證，對於Catalyst 9K平台，所有許可證均未實施，並且用於註冊許可證的先前配置/拓撲仍然可用。假設裝置已使用以前的智慧許可證版本映像註冊或保留。在這種情況下，一旦將映像升級到使用策略支援的智慧許可映像，許可證將自動轉換為使用策略許可證的零接觸智慧許可。如果裝置仍在使用使用使用權許可證，或者由於智慧許可註冊/預留尚未完成，而具有評估或評估過期映像，則存在使用用於Windows 10的思科智慧許可證實用程式(CSLU)應用程式的新拓撲（預計未來將可用於內部衛星或其他控制器，例如思科DNAC）。CSLU位於裝置和CSSM之間。它收集所有裝置的使用情況資料，並為CSSM提供離線或線上的單一聯絡點。

使用策略將智慧許可證註冊(SL)遷移到智慧許可

使用以前的智慧許可映像（從所有Cat9K交換機的16.9.1到17.3.1），預設情況下會啟用Callhome以連線到雲中的CSSM。這要求裝置(單交換機、堆疊或StackWise虛擬(SVL))透過管理埠或前面板下行/上行鏈路埠連線到CSSM。

如果裝置已經透過「智慧許可證傳輸Callhome」或「智慧許可證傳輸Smart」註冊，則轉換為使用策略的智慧許可為Zero-Touch。當裝置軟體升級到支援使用策略的智慧許可的映像時，無需更改配置即可支援向後相容性。當裝置啟動時使用策略支援的智慧許可映像時，以前用於註冊產品例項(PI)許可證的標識將轉換為信任代碼，以允許裝置與CSSM之間的通訊。所有許可證顯示為使用中，而不是註冊和授權，如果智慧帳戶中有任何可用的自定義策略，則還會安裝該策略。從此時起，系統將根據策略中的報告計畫報告裝置的許可證使用情況。

在CSSM上轉換為Smart Licensing Using Policy後，以前的PI將從PI中使用主機名更改為PI中每台交換機的UDI（PID和序列號）。對於HA系統，活動交換機CSSM PI中會報告所有使用的許可證。備用交換機和成員交換機（如果可用）在CSSM中也有一個PI，但不報告任何許可證使用情況。如果HA系統中的活動交換機在報告期內已發生更改，則現在會在新的活動PI下看到許可證使用情況。

使用策略升級到智慧許可之前，在已註冊許可證的裝置上顯示Show命令

在show license命令輸出中，注意許可證是作為智慧許可的一部分進行註冊和授權的。

Switch#show license summary

Smart Licensing is ENABLED

Registration:
  Status: REGISTERED

  Smart Account: BU Production Test
  Virtual Account: Cat9K-FranklinDT

Export-Controlled Functionality: ALLOWED
Last Renewal Attempt: None
Next Renewal Attempt: Mar 21 11:08:58 2021 PST

License Authorization: 
  Status: AUTHORIZED
  Last Communication Attempt: SUCCEEDED
  Next Communication Attempt: Oct 22 11:09:07 2020 PST

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
C9500 Network Advantage (C9500 Network Advantage) 2 AUTHORIZED
C9500-DNA-16X-A (C9500-16X DNA Advantage) 2 AUTHORIZED

Switch#show license usage

License Authorization: 
  Status: AUTHORIZEDon Sep 22 11:09:07 2020 PST


C9500 Network Advantage (C9500 Network Advantage):
  Description: C9500 Network Advantage
  Count: 2
  Version: 1.0
  Status: AUTHORIZED
  Export status: NOT RESTRICTED


C9500-DNA-16X-A (C9500-16X DNA Advantage):
  Description: C9500-DNA-16X-A
  Count: 2
  Version: 1.0
  Status: AUTHORIZED
  Export status: NOT RESTRICTED


Switch#show license status

Smart Licensing is ENABLED

Utility:
  Status: DISABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
    Version privacy: DISABLED


Transport:
  Type: Callhome

Registration:
  Status: REGISTERED

  Smart Account: BU Production Test
  Virtual Account: Cat9K-FranklinDT
  Export-Controlled Functionality: ALLOWED
  Initial Registration: SUCCEEDED on Sep 22 11:08:58 2020 PST
  Last Renewal Attempt: None
  Next Renewal Attempt: Mar 21 11:08:57 2021 PST
  Registration Expires: Sep 22 11:04:23 2021 PST


License Authorization: 
  Status: AUTHORIZED on Sep 22 11:09:07 2020 PST
  Last Communication Attempt: SUCCEEDED on Sep 22 11:09:07 2020 PST
  Next Communication Attempt: Oct 22 11:09:06 2020 PST
  Communication Deadline: Dec 21 11:04:34 2020 PST


Export Authorization Key:
  Features Authorized:
    <none>


Miscellaneus:
  Custom Id: <empty>

使用策略支援的映像使用智慧許可引導後顯示裝置上的命令

在show license輸出中，注意許可證現在使用中，而不是註冊和授權。此外，註冊idtoken已自動用作受信任代碼，以便允許CSSM與裝置之間的通訊。此外，裝置上已安裝Cisco預設策略。

Switch#show license summary

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE

Switch#show license usage
License Authorization:
  Status: Not Applicable

network-advantage (C9500 Network Advantage):
  Description: network-advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: network-advantage
  Feature Description: network-advantage
  Enforcement type: NOT ENFORCED
  License type: Perpetual

dna-advantage (C9500-16X DNA Advantage):
  Description: C9500-16X DNA Advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: dna-advantage
  Feature Description: C9500-16X DNA Advantage
  Enforcement type: NOT ENFORCED
  License type: Subscription

Switch#show license status

Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: Callhome

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:*
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:*
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneous:
  Custom Id: <empty>

Usage Reporting:**
  Last ACK received: Nov 10 08:56:48 2020 PST
  Next ACK deadline: Feb 08 08:56:48 2021 PST
  Reporting push interval: 30  days
  Next ACK push check: <none>
  Next report push: Dec 10 08:55:29 2020 PST
  Last report push: Nov 10 08:55:29 2020 PST
  Last report file write: <none>

Trust Code Installed:
  Active: PID:C9500-16X,SN:FCW2233A5ZV
    INSTALLED on Nov 10 08:54:48 2020 PST
  Standby: PID:C9500-16X,SN:FCW2233A5ZY
    INSTALLED on Nov 10 08:54:48 2020 PST

注意：在命令輸出中，策略的「已實施」和「導出」部分不適用於C9K交換機，因為所有交換機的許可證都處於未實施狀態。

備註：此表格說明「使用報告」段落中的每一行。

Switch#show license udi
UDI: PID:C9500-16X,SN:FCW2233A5ZV

HA UDI List:
    Active:PID:C9500-16X,SN:FCW2233A5ZV
    Standby:PID:C9500-16X,SN:FCW2233A5ZY

在CSSM中，將同時顯示活動和備用UDI，而不是Product Instances頁籤下的PI主機名。

點選活動PID以顯示許可證使用情況。按一下High Availability頁籤以顯示HA系統中包含的所有PID。

按一下Product Instance 頁籤下的Standby switch UDI，以顯示備用交換機的資訊。備用交換機不顯示任何許可證使用情況，因為裝置的許可證使用情況僅在活動交換機下顯示。

一旦發生此轉換，許可證的使用量就會繼續根據已安裝的策略進行報告。

從使用策略的智慧許可降級為智慧許可證註冊映像

如果出於某種原因，必須將該裝置降級為不支援使用智慧許可策略的舊映像，請勿更改配置並安裝要降級的映像。根據裝置降級到的影象，可能需要在裝置上重新定位。在17.3.2或17.4.1開發工作之前發佈的映像不瞭解使用策略或信任代碼的智慧許可，因此，降級後需要重新註冊。只需使用license smart register idtoken <idtoken> all命令在裝置上從CSSM獲取idtoken。

16.9.6及更高版本、16.12.4及更高版本以及17.3.1映像已增加代碼，以便辨識信任代碼，並在映像降級時將其轉換為註冊標識。許可證將自動重新置於「已註冊」狀態和「已授權」狀態。

使用策略將SLR遷移到智慧許可

由於各種原因，客戶並不總是希望連線CSSM或外部。為此，增加了離線特定許可證保留(SLR)功能，以使交換機符合要求。本文對此進行了說明，可使用特定許可證保留文檔來瞭解詳細資訊。SLR從16.9.1版本一直到17.3.1版本都可用。

當安裝了特定許可證預留的裝置升級為使用策略支援的智慧許可映像時，許可證轉換是自動的，此時不需要執行更多操作。這些許可證現在正在使用中，並且表示它們之前已透過SLR授權。但是，在安裝的策略所指示的較晚日期，可能需要報告許可證使用情況，如本節稍後部分所示。

使用支援舊智慧許可證的映像在裝置上顯示命令

Switch#show license summary
Smart Licensing is ENABLED
License Reservation is ENABLED
Registration:
  Status: REGISTERED - SPECIFIC LICENSE RESERVATION
  Export-Controlled Functionality: ALLOWED
License Authorization:
  Status: AUTHORIZED - RESERVED
License Usage:
  License                 Entitlement tag               Count Status
  -----------------------------------------------------------------------------
  C9500 Network Advantage (C9500 Network Advantage)         2 AUTHORIZED
  C9500-DNA-16X-A         (C9500-16X DNA Advantage)         2 AUTHORIZED


Switch#show license reservation
License reservation: ENABLED
Overall status:
  Active: PID:C9500-16X,SN:FCW2233A5ZV
      Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
      Export-Controlled Functionality: ALLOWED
      Last Confirmation code: 4bfbea7f
  Standby: PID:C9500-16X,SN:FCW2233A5ZY
      Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
      Export-Controlled Functionality: ALLOWED
      Last Confirmation code: 9394f196
Specified license reservations:
  C9500 Network Advantage (C9500 Network Advantage):
    Description: C9500 Network Advantage
    Total reserved count: 2
    Term information:
      Active: PID:C9500-16X,SN:FCW2233A5ZV
        License type: PERPETUAL
          Term Count: 1
      Standby: PID:C9500-16X,SN:FCW2233A5ZY
        License type: PERPETUAL
          Term Count: 1
  C9500-DNA-16X-A (C9500-16X DNA Advantage):
    Description: C9500-DNA-16X-A
    Total reserved count: 2
    Term information:
      Active: PID:C9500-16X,SN:FCW2233A5ZV
        License type: TERM
          Start Date: 2020-MAR-17 UTC
          End Date: 2021-MAR-17 UTC
          Term Count: 1
      Standby: PID:C9500-16X,SN:FCW2233A5ZY
        License type: TERM
          Start Date: 2020-MAR-17 UTC
          End Date: 2021-MAR-17 UTC
          Term Count: 1


Switch#show license status

Smart Licensing is ENABLED

Utility:
  Status: DISABLED

License Reservation is ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
   Version privacy: DISABLED

Transport:
  Type: Callhome

Registration:
  Status: REGISTERED - SPECIFIC LICENSE RESERVATION
  Export-Controlled Functionality: ALLOWED
  Initial Registration: SUCCEEDED on Aug 31 11:07:39 2020 PDT

License Authorization:
  Status: AUTHORIZED - RESERVED on Aug 31 10:15:01 2020 PDT

Export Authorization Key:
  Features Authorized:
    <none>

使用策略支援的映像使用智慧許可啟動後顯示裝置上的命令

show命令顯示正在使用的許可證，並指示它們以前已由特定許可證保留授權。思科預設策略正在使用中。

Switch#show license summary
License Reservation is ENABLED
License Usage:
  License                 Entitlement tag               Count Status
  -----------------------------------------------------------------------------
  network-advantage       (C9500 Network Advantage)         2 IN USE
  dna-advantage           (C9500-16X DNA Advantage)         2 IN USE

Switch#show license all

Smart Licensing Status
======================
Smart Licensing is ENABLED
License Reservation is ENABLED

Export Authorization Key
  Features Authorized:
    <none>


Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: Transport Off

Miscellaneous:
  Custom Id: <empty>

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
 Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Usage Reporting:
  Last ACK received: <none>
  Next ACK deadline: Nov 29 10:50:05 2020 PDT
  Reporting Interval: 30
  Next ACK push check: <none>
  Next report push: Aug 31 10:52:05 2020 PDT
  Last report push: <none>
  Last report file write: <none>

Trust Code Installed: <none>

License Usage
=============

network-advantage (C9500 Network Advantage):
  Description: network-advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: network-advantage
  Feature Description: network-advantage
  Enforcement type: NOT ENFORCED
  License type: Perpetual
  Reservation:
    Reservation status: SPECIFIC INSTALLED
    Total reserved count: 2

dna-advantage (C9500-16X DNA Advantage):
  Description: C9500-16X DNA Advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: dna-advantage
  Feature Description: C9500-16X DNA Advantage
  Enforcement type: NOT ENFORCED
  License type: Subscription
  Reservation:
    Reservation status: SPECIFIC INSTALLED
    Total reserved count: 2


Product Information
===================
UDI: PID:C9500-16X,SN:FCW2233A5ZV

HA UDI List:
    Active:PID:C9500-16X,SN:FCW2233A5ZV
    Standby:PID:C9500-16X,SN:FCW2233A5ZY

Agent Version
=============
Smart Agent for Licensing: 5.0.5_rel/42

License Authorizations
======================
Overall status:
  Active: PID:C9500-16X,SN:FCW2233A5ZV
      Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
      Last Confirmation code: 4bfbea7f
  Standby: PID:C9500-16X,SN:FCW2233A5ZY
      Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
      Last Confirmation code: 9394f196

Specified license reservations:
  C9500 Network Advantage (C9500 Network Advantage):
    Description: C9500 Network Advantage
    Total reserved count: 2
    Enforcement type: NOT ENFORCED
    Term information:
      Active: PID:C9500-16X,SN:FCW2233A5ZV
        Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
        License type: PERPETUAL
          Term Count: 1
      Standby: PID:C9500-16X,SN:FCW2233A5ZY
        Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
        License type: PERPETUAL
          Term Count: 1
  C9500-DNA-16X-A (C9500-16X DNA Advantage):
    Description: C9500-DNA-16X-A
    Total reserved count: 2
    Enforcement type: NOT ENFORCED
    Term information:
      Active: PID:C9500-16X,SN:FCW2233A5ZV
        Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
        License type: PERPETUAL
          Term Count: 1
      Standby: PID:C9500-16X,SN:FCW2233A5ZY
        Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
        License type: PERPETUAL
          Term Count: 1

Purchased Licenses:

  No Purchase Information Available


Derived Licenses:
  Entitlement Tag: regid.2017-03.com.cisco.advantagek9-Nyquist-C9500,1.0_f1563759-2e03-4a4c-bec5-5feec525a12c
  Entitlement Tag: regid.2017-07.com.cisco.C9500-DNA-16X-A,1.0_ef3574d1-156b-486a-864f-9f779ff3ee49


Switch#show license status

Utility:
  Status: DISABLED

License Reservation is ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
   Version privacy: DISABLED

Transport:
  Type: Transport Off

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)


Miscellaneus:
  Custom Id: <empty>

Usage Reporting:
  Last ACK received: <none>
  Next ACK deadline: Nov 29 10:50:05 2020 PDT
  Reporting Interval: 30
  Next ACK push check: <none>
  Next report push: Aug 31 10:52:05 2020 PDT
  Last report push: <none>
  Last report file write: <none>

Trust Code Installed: <none>

在CSSM中，PI沒有更改並指示保留的許可證，因為此時沒有報告使用量。在收到策略指示或系統日誌消息之前，不需要使用報告。

根據策略在日後需要時報告使用情況

如果正在使用Cisco DNA許可證，則以後可能會要求裝置報告使用情況。這仍可以在離線模式下完成。但是，對於HA系統，完整裝置只需要一個報告檔案。使用命令license smart save usage CLI建立要在CSSM中使用的報告檔案。然後將檔案複製到CSSM可存取的位置。

Switch#license smart save usage unreported file flash:RUM-usage-20200925.txt
Switch#copy flash:RUM-usage-20200925.txt tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/
Address or name of remote host [172.27.18.5]? 
Destination filename [/auto/tftp-sjc-users2/byodis/RUM-usage-20200925.txt]? 
!!
15128 bytes copied in 0.161 secs (93963 bytes/sec)

現在打開CSSM，然後在Reports窗口中按一下Report頁籤。現在，按一下Usage Data Files頁籤，然後按一下Upload Usage Data按鈕以上傳使用情況報告檔案。它要求安裝虛擬帳戶，因此請確保選擇正確的虛擬帳戶。等待報告完成處理(按一下Usage Data Files頁籤以刷新螢幕並檢視報告是否已完成)。如果報告成功，則狀態指示無錯誤，並且Download ACK檔案可供下載和安裝到裝置上，指示已順利接收和報告使用情況。

將此下載檔案複製到裝置或裝置可訪問的某個位置，然後使用命令license smart import將ACK檔案導入到裝置。

Switch#license smart import tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/ACK_RUM-usage-20200925.txt
Import Data Successfull

show license status的輸出表明ACK是在正確時間錄製的。

Switch#show license status
Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

License Reservation is ENABLED

Data Privacy:
  Sending Hostname: yes
  Callhome hostname privacy: DISABLED
  Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED


Transport:
  Type: Off

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneus:
  Custom Id: <empty>


Usage Reporting:
  Last ACK received: Sep 25 10:12:15 2020 PST
  Next ACK deadline: Dec 24 10:12:15 2020 PST
  Reporting push interval: 30 days
  Next ACK push check: Sep 25 07:55:35 2020 PST
  Next report push: Sep 25 10:12:46 2020 PST
  Last report push: Sep 25 07:54:33 2020 PST
  Last report file write: <none>


Trust Code Installed: <none>

在CSSM中，PI不再顯示保留的許可證，並且許可證的使用僅在活動PI中可見。

從使用策略的智慧許可降級到支援特定許可證預留的映像

如果映像降級為不支援使用策略的智慧許可但支援SLR的版本，則只需對映像執行降級即可。許可證保留為保留和授權-不需要其他任何內容。

使用策略將評估或評估過期遷移至智慧許可

從16.9.1版開始到17.3.1版，如果許可證未註冊或發佈，則預設情況下它們是評估許可證。90天後，它們成為評估過期許可證。兩者都表示許可證不合規。 由於所有許可證均未執行，因此裝置上不會丟失任何功能性。

使用策略的智慧許可不再具有許可證評估狀態。因此，當使用策略支援的智慧許可映像將裝置升級到智慧許可時，如果任何裝置具有「評估」或「評估過期」許可證，則所有這些許可證都被視為在使用中，並應用思科預設策略。許可證不再顯示為UNAUTHORIZED或OUT OF COMPLIANCE。

評估/評估過期模式下智慧許可證的Show命令

Switch#show license summary

Smart Licensing is ENABLED

Registration:
  Status: UNREGISTERED
  Export-Controlled Functionality: NOT ALLOWED

License Authorization: 
  Status: EVAL MODE
  Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 30 seconds

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
(C9500 Network Advantage) 2 EVAL MODE
(C9500-16X DNA Advantage) 2 EVAL MODE


Switch#show license usage

License Authorization: 
  Status: EVAL MODE
  Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 21 seconds


(C9500 Network Advantage):
  Description: 
  Count: 2
  Version: 1.0
  Status: EVAL MODE
  Export status: NOT RESTRICTED


(C9500-16X DNA Advantage):
  Description: 
  Count: 2
  Version: 1.0
  Status: EVAL MODE
  Export status: NOT RESTRICTED


Switch#show license status

Smart Licensing is ENABLED

Utility:
  Status: DISABLED

  Data Privacy:
    Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
    Version privacy: DISABLED

Transport:
  Type: Callhome

Registration:
  Status: UNREGISTERED
  Export-Controlled Functionality: NOT ALLOWED

License Authorization: 
  Status: EVAL MODE
  Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 15 seconds

Export Authorization Key:
  Features Authorized:
    <none>

Miscellaneus:
  Custom Id: <empty>

升級後使用策略顯示智慧許可證智慧許可的命令，但尚未報告使用情況

Switch#show license summary

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE


Switch#show license usage
License Authorization:
  Status: Not Applicable

network-advantage (C9500 Network Advantage):
  Description: network-advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: network-advantage
  Feature Description: network-advantage
  Enforcement type: NOT ENFORCED
  License type: Perpetual

dna-advantage (C9500-16X DNA Advantage):
  Description: C9500-16X DNA Advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: dna-advantage
  Feature Description: C9500-16X DNA Advantage
  Enforcement type: NOT ENFORCED
  License type: Subscription


Switch#show license status

Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: Transport Off

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneous:
  Custom Id: <empty>

Usage Reporting:
  Last ACK received: <none>
  Next ACK deadline: Feb 08 08:27:59 2021 PST
  Reporting push interval: 30  days
  Next ACK push check: <none>
  Next report push: Nov 10 08:29:59 2020 PST
  Last report push: <none>
  Last report file write: <none>

Trust Code Installed: <none>

在連線到CSLU和報告使用情況後顯示使用策略的智慧許可命令

如show license status輸出中的策略所示，訂用許可證（dna-advantage和dna-essentials）必須在90天內報告。 可以使用任何受支援的使用報告拓撲。請參閱使用策略的智慧許可配置指南。此外，本文結尾部分提供了一些連結，用於提供有用的影片和文檔。此處的範例是使用CSLU PUSH模型，對Windows 10機器（膝上型電腦、伺服器、VM）上安裝的CSLU伺服器進行明確配置。CSLU下載、安裝指南和使用手冊位於https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2。

Switch#show running-config all | include cslu
license smart transport cslu
Switch#
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#license smart url cslu http://10.24.74.180:8182/cslu/v1/pi_
Switch(config)#^Z
Switch#
Switch#write memory
Building configuration...
[OK]
Switch#show running-config all | include cslu
license smart url cslu http://10.24.74.180:8182/cslu/v1/pi
license smart transport cslu
Switch#


To force the license usage to be reported use the "license smart sync" command.

Switch#license smart sync all
Switch#
*Sep 22 10:48:36.050 PST: %SMART_LIC-5-COMM_RESTORED: Communications with Cisco Smart License Utility (CSLU) restored

Note: Use the "all" option for HA device. Use "local" option for standalone switch

Switch#show license summary

License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE


Switch#show license usage
License Authorization:
  Status: Not Applicable


network-advantage (C9500 Network Advantage):
  Description: network-advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: network-advantage
  Feature Description: network-advantage
  Enforcement type: NOT ENFORCED
  License type: Perpetual

dna-advantage (C9500-16X DNA Advantage):
  Description: C9500-16X DNA Advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: dna-advantage
  Feature Description: C9500-16X DNA Advantage
  Enforcement type: NOT ENFORCED
  License type: Subscription

Switch#show license status

Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: cslu
  Cslu address: http://10.24.74.180:8182/cslu/v1/pi

  Proxy:
    Not Configured

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneous:
  Custom Id: <empty>

Usage Reporting:
  Last ACK received: Nov 10 08:56:48 2020 PST
  Next ACK deadline: Feb 08 08:56:48 2021 PST
  Reporting push interval: 30  days
  Next ACK push check: <none>
  Next report push: Dec 10 08:55:29 2020 PST
  Last report push: Nov 10 08:55:29 2020 PST
  Last report file write: <none>

Trust Code Installed: <none>

從使用策略映像的智慧許可降級到支援評估或評估許可證的映像

如果需要將映像降級到不支援SL Using Policy的映像，則許可證將恢復為Eval或Eval expired。保留原始的剩餘評估期。由於所有Cat9K許可證都未執行，因此不會丟失任何功能。

使用策略將RTU許可證遷移到智慧許可

使用權(RTU)許可是C9300、C9400和C9500的初始許可方案，一直到版本16.8.1a。智慧許可在16.9.1之前不可用。

所有許可證仍然相同，但對配置和show命令使用更舊的license right-to-use命令。使用策略支援的映像將映像升級到智慧許可後，許可證即處於使用狀態，這與評估/評估模式中的情況相同。如果有任何使用中的思科DNA許可證，思科預設策略要求在90天內報告使用情況。可以使用使用策略映像的智慧許可報告使用情況所支援的任何不同拓撲。

使用RTU許可的裝置上的Show命令

Switch#show license right-to-use summary

License Name Type Period left
------------------------------------------------
network-essentials Permanent Lifetime
dna-essentials Subscription CSSM Managed
------------------------------------------------


License Level In Use: network-essentials+dna-essentials Subscription
License Level on Reboot: network-essentials+dna-essentials Subscription

Switch#show license right-to-use 
Slot# License Name Type Period left
----------------------------------------------------
1 network-essentials Permanent Lifetime
1 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription


Slot# License Name Type Period left
----------------------------------------------------
2 network-essentials Permanent Lifetime
2 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription


Slot# License Name Type Period left
----------------------------------------------------
3 network-essentials Permanent Lifetime
3 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription


Switch#show license right-to-use usage
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
1 network-essentials Permanent 00:00:00 yes yes
1 network-essentials Evaluation 00:00:00 no no
1 network-essentials Subscription 00:00:00 no no
1 network-advantage Permanent 00:00:00 no no
1 network-advantage Evaluation 00:00:00 no no
1 network-advantage Subscription 00:00:00 no no
1 dna-essentials Evaluation 00:00:00 no no
1 dna-essentials Subscription 00:00:00 yes yes
1 dna-advantage Evaluation 00:00:00 no no
1 dna-advantage Subscription 00:00:00 no no
----------------------------------------------------------------------------

Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
2 network-essentials Permanent 00:00:00 yes yes
2 network-essentials Evaluation 00:00:00 no no
2 network-essentials Subscription 00:00:00 no no
2 network-advantage Permanent 00:00:00 no no
2 network-advantage Evaluation 00:00:00 no no
2 network-advantage Subscription 00:00:00 no no
2 dna-essentials Evaluation 00:00:00 no no
2 dna-essentials Subscription 00:00:00 yes yes
2 dna-advantage Evaluation 00:00:00 no no
2 dna-advantage Subscription 00:00:00 no no
----------------------------------------------------------------------------

Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
3 network-essentials Permanent 00:00:00 yes yes
3 network-essentials Evaluation 00:00:00 no no
3 network-essentials Subscription 00:00:00 no no
3 network-advantage Permanent 00:00:00 no no
3 network-advantage Evaluation 00:00:00 no no
3 network-advantage Subscription 00:00:00 no no
3 dna-essentials Evaluation 00:00:00 no no
3 dna-essentials Subscription 00:00:00 yes yes
3 dna-advantage Evaluation 00:00:00 no no
3 dna-advantage Subscription 00:00:00 no no

使用策略支援的映像從RTU升級到智慧許可後，顯示裝置上的命令

Switch#show license summary

License Usage:
  License                 Entitlement Tag               Count Status
  -----------------------------------------------------------------------------
  network-advantage       (C9300-24 Network Advan...)       2 IN USE
  dna-advantage           (C9300-24 DNA Advantage)          2 IN USE
  network-advantage       (C9300-48 Network Advan...)       1 IN USE
  dna-advantage           (C9300-48 DNA Advantage)          1 IN USE


Switch#show license usage

License Authorization:
  Status: Not Applicable

network-advantage (C9300-24 Network Advantage):
  Description: C9300-24 Network Advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: network-advantage
  Feature Description: C9300-24 Network Advantage
  Enforcement type: NOT ENFORCED
  License type: Perpetual

dna-advantage (C9300-24 DNA Advantage):
  Description: C9300-24 DNA Advantage
  Count: 2
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: dna-advantage
  Feature Description: C9300-24 DNA Advantage
  Enforcement type: NOT ENFORCED
  License type: Subscription

network-advantage (C9300-48 Network Advantage):
  Description: C9300-48 Network Advantage
  Count: 1
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: network-advantage
  Feature Description: C9300-48 Network Advantage
  Enforcement type: NOT ENFORCED
  License type: Perpetual

dna-advantage (C9300-48 DNA Advantage):
  Description: C9300-48 DNA Advantage
  Count: 1
  Version: 1.0
  Status: IN USE
  Export status: NOT RESTRICTED
  Feature Name: dna-advantage
  Feature Description: C9300-48 DNA Advantage
  Enforcement type: NOT ENFORCED
  License type: Subscription

Switch#show license status

Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: Transport Off

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneous:
  Custom Id: <empty>

Usage Reporting:
  Last ACK received: <none>
  Next ACK deadline: Feb 08 08:27:59 2021 PST
  Reporting push interval: 20  days
  Next ACK push check: <none>
  Next report push: Nov 10 08:29:59 2020 PST
  Last report push: <none>
  Last report file write: <none>

Trust Code Installed: <none>

這些show命令是在使用策略支援的映像升級到智慧許可後執行的，但尚未向CSSM報告使用情況。使用顯示在使用中的策略和使用思科預設策略，許可證都轉換為智慧許可。如果使用訂用許可證，則需要在90天內報告使用情況。之後，系統日誌消息從CSSM傳送。但是，由於所有C9K許可證均未執行，因此不會丟失任何功能性。

需要報告時，可以使用智慧許可使用策略配置指南中描述的任何拓撲。許可證show命令輸出類似於本文檔中介紹的輸出。根據使用的拓撲，某些輸出可能有所不同。

從使用策略映像的智慧許可降級為支援RTU許可證的映像

如果需要將Cisco IOS XE映像降級回到16.9.1之前的映像，則保留許可證和功能功能。但是，任何智慧許可配置都是未知且未儲存的。

從使用策略映像的智慧許可降級為支援智慧許可證的映像

如果裝置從支援RTU的映像遷移到使用策略支援的智慧許可映像，並在以後降級為支援17.3.2和17.4.1之前的智慧許可的映像，則這些裝置上的許可證需要執行註冊或特定許可證保留操作。

使用策略自定義策略的智慧許可

公司可能已與思科協商自定義策略。如果是這種情況，思科會將該策略安裝到智慧帳戶中。每個智慧帳戶只能有一個自定義策略，該策略應用於該智慧帳戶中的所有虛擬帳戶。要告知CSSM中自定義策略是否有效，請打開Reports檢視並按一下Reporting Policy頁籤。可以有多個版本，但只能安裝最新版本。

如果智慧帳戶中安裝了自定義策略，則在執行許可證使用報告時安裝該策略。使用exec命令show license status可以檢視新的自定義策略。系統會顯示自定義策略而非Cisco預設值。根據自定義策略中定義的內容，可以看到自定義值和預設值的組合。自定義策略中未定義的任何欄位仍繼續使用Cisco預設值。

如果使用離線拓撲或使用CSSM拓撲的CSLU離線，則可以將自定義策略從CSSM下載到裝置可訪問的檔案/位置。然後可以使用exec命令license smart import <device:path/file>在裝置上安裝自定義策略。

Switch#show license status

Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:

  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
Type: Transport Off

Policy:
Policy in use: Installed On Nov 09 09:09:36 2020 PST
Policy name: Custom Policy
Reporting ACK required: yes (Customer Policy)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 60 (Customer Policy)
Reporting frequency (days): 60 (Customer Policy)
Report on change (days): 60 (Customer Policy)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 30 (Customer Policy)
Reporting frequency (days): 30 (Customer Policy)
Report on change (days): 30 (Customer Policy)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneous:

Custom Id: <empty>

Usage Reporting:
Last ACK received: Nov 09 09:09:36 2020 PST
Next ACK deadline: Dec 09 09:09:36 2020 PST
Reporting push interval: 30  days
Next ACK push check: Oct 29 14:39:50 2020 PST
Next report push: Nov 09 09:10:07 2020 PST
Last report push: Oct 29 14:35:51 2020 PST
Last report file write: <none>

Trust Code Installed:

Active: PID:C9300-24UX,SN:FCW2303D16Y
 INSTALLED on Oct 29 14:35:12 2020 PST
Standby: PID:C9300-24U,SN:FHH2043P09E
 INSTALLED on Oct 29 14:35:13 2020 PST
Member: PID:C9300-48T,SN:FCW2139L056
 INSTALLED on Oct 29 14:35:13 2020 PST

相關資訊

• 發行版本註釋：RN-9200、RN-9300、RN-9400、RN-9500、RN-9600
• 配置指南：Cat9200-CG、Cat9300-CG、Cat9400-CG、Cat9500-CG、Cat9600-CG
• 命令參考：Cat9200-CR、Cat9300-CR、Cat9400-CR、Cat9500-CR、Cat9600-CR
• 適用於Windows 10的CSLU下載（包含使用指南和安裝指南）：https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2
• 技術支援與文件 - Cisco Systems