topic Re: Smart Licensing in Wireless

Smart Licensing

Kevynjr37 — Fri, 28 Apr 2023 13:05:13 GMT

Hi Everyone,
I really appreciate some assistance in licensing a vWLC9800-Cloud. It is my first time working with smart licensing using policy. I have 120 APs, 50 of the APs have joined the controller, and the other 70 could not. I then went through a Cisco document that said a certain number of APs would join the controller, but you have to register for the rest of the other APs to join the controller.
I can't get my head around the smart licensing thing - I went through the Cisco docs and watched videos, but it is still not helping.
I would appreciate it if anybody shared the commands I need in WLC to register the license.

I've already created the virtual account and generated the token, which I find simple.

Best Regards,

Kevin

Re: Smart Licensing

Flavio Miranda — Fri, 28 Apr 2023 13:52:45 GMT

Hello,

This video is for Physical WLC but I believe the process is the same.

https://www.labminutes.com/wl0043_9800_wlc_license_certificate_install

Re: Smart Licensing

Kevynjr37 — Fri, 28 Apr 2023 15:14:11 GMT

Hi Flavio,

Let me watch it; thank you.

Re: Smart Licensing

Kevynjr37 — Fri, 28 Apr 2023 17:23:20 GMT

Hi Flavio,

I just watched the video; it is very helpful, but his setup is a bit different from mine. He used vrf, and he had to specify the source interface. I am not using a vrf. Let me keep searching, but thanks for the link it has a whole lot of info that is very helpful.

Best Regards,

Kevin

Re: Smart Licensing

Kevynjr37 — Sat, 29 Apr 2023 11:39:59 GMT

Good everyone,

Does anybody have any other suggestions?

Best Regards,

Re: Smart Licensing

Rich R — Sat, 29 Apr 2023 21:48:37 GMT

This is my config fragment for activating SLUP:

conf t
no service call-home
license smart enable
license smart url default
license smart transport smart
ip http client source-interface <mgmt interface>
ip name-server <a.b.c.d> <e.f.g.h>
ip domain lookup
ip domain lookup source-interface <mgmt interface>
end
wr

license smart trust idtoken <token> all force
wr

Use these commands to check status:
show lic status
show lic summ
show lic all
show platform software license dlc

Note that it can take a few minutes for license trust to be set up (device connects to Cisco license server).
Then you'll see this in the logs - use sh log | inc LIC
%SMART_LIC-5-COMM_RESTORED: Communications with Cisco Smart Software Manager (CSSM) restored
%SMART_LIC-6-TRUST_INSTALL_SUCCESS: A new licensing trust code was successfully installed on <device UDI>.
The device submits a report (PUSH) and then polls for a reply (ACK) 5 to 30 minutes later.
If it's been upgraded from non smart license then dlc (device lead conversion of old license to smart license) can take up to a day after smart licensing is activated.

DLC won't apply to your 9800-CL WLC obviously.
Note that we disable call-home - you might still want to use that and it is also a transport option for smart licensing.

Re: Smart Licensing

Kevynjr37 — Sun, 30 Apr 2023 18:41:30 GMT

Hi Rich,

Much appreciated with the config provided above; I am in the right direction - the issue that I have now is I am getting an error "failed to resolve the domain name" I believe the domain name I am using is wrong. I will speak to the customer again to get the correct info.

I will post the command output later.

Once again, thank you so much.

Best Regards,

Kevin

Re: Smart Licensing

Rich R — Mon, 01 May 2023 00:51:55 GMT

What is the EXACT error you are getting and at which point?

That sounds like a DNS error in which case the problem is with the DNS lookup of the smart licensing server. If you use the config I provided then the default domain it uses is "smartreceiver.cisco.com" so it must be able to resolve that and reach it on https.
Check the DNS first by pinging that (remember to use the same source you specified in the config) and then check that firewalls and ACLs are not blocking access to it. Use smart licensing debugs and packet captures (which will also show if the DNS lookup fails).

Re: Smart Licensing

Allan001 — Mon, 01 May 2023 13:32:03 GMT

Hi Rich,

Kindly see attached the error I am getting when registering the controller.

Thanks

Kevin

Re: Smart Licensing

Scott Fella — Mon, 01 May 2023 13:48:10 GMT

What access points? If these are brand new 91xx access points, you would buy the license when you purchase these ap's. I they are existing that were working with AireOS you need to purchase license. Have you looked at the FAQ?

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215635-licensing-on-9800-wireless-lan-controlle.html#anc4

Keep in mind that ap's will still join even without registered license, so you probably have a different issue. Are the ap's supported on the code you are running on the controller? Have you verified that the ap's are getting DHCP and are able to reach the controller?

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215635-licensing-on-9800-wireless-lan-controlle.html#anc22

Re: Smart Licensing

Kevynjr37 — Mon, 01 May 2023 14:13:27 GMT

Hi Scott,

Yes, these are new APs 9115AX. I have about 50 or so that joined the controller. When I shut the ports of the APs, I am seeing other APs joining the controller; hence I assume it is the licensing that I need.

Thanks

Re: Smart Licensing

Scott Fella — Mon, 01 May 2023 15:00:19 GMT

I understand, but the last link I posted states, "Even if the controller is not properly licensed, it is fully functional. You occasionally see notifications and syslog messages that remind you to license your controller."

This is a new setup, so open a TAC case and have them help you. If you have purchased licenses with the access points, then the vendor whom you bought the ap's should add them to your smart account. Then you follow the instructions to add the controller to your smart licensing.

Re: Smart Licensing

Rich R — Mon, 01 May 2023 17:16:18 GMT

@Scott Fella remember that smart license enforcement was introduced on 9800-CL. It will allow up to 50 APs to join without license activation. Any more than that only allowed after activating the license so Kevin is right.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-7/release-notes/rn-17-7-9800.html#Cisco_Concept.dita_36dcc319-36c4-4368-b1db-da5660b72211

Note

Starting from Cisco IOS XE Cupertino 17.7.1, the Cisco Catalyst 9800-CL Wireless Controller will not accept more than 50 APs if the smart licensing is not connected and up.

Re: Smart Licensing

Rich R — Mon, 01 May 2023 17:19:43 GMT

Yes that clearly says "Unable to resolve server hostname/domain name" so your problem is DNS. So nothing to do with smart licensing itself but smart licensing depends on DNS and http client so get the DNS working first as I said above.

Re: Smart Licensing

Kevynjr37 — Mon, 01 May 2023 20:53:16 GMT

Hi Rich,

Sure, thank you so much. I will sort the DNS working and try again.

Thank you for your valuable input.

Re: Smart Licensing

Kevynjr37 — Thu, 15 Jun 2023 07:57:38 GMT

Hi @Rich R,

Thank you so much for the above configs; it worked in one shot. Sorry for not updating you on time.

@Flavio Miranda Thank you again for the video link much appreciated.

@Scott Fella Thank you for your contributions.

Kevynjr37