DNAC And SSM

[NETAD]

Hello, can someone give me the procedure to point devices in DNAC to Cisco Smart Software Manager on prem smart licensing server?

Thanks

[Mohamed Alhenawy]

Hello @NETAD 

Hopefully, you are doing well!

Please Find this Procedure as per DNA guide

Set Up License Manager

You must set up access to your Cisco Smart Account before you can use the Cisco DNA Center License Manager tools.

Before you begin

• Ensure that you have SUPER-ADMIN-ROLE permissions and the appropriate RBAC scope to perform this procedure.

• Collect the Cisco user ID and password for your Smart Account.

• If you have one or more Smart Accounts: Select the Smart Account that you want to use with Cisco DNA Center, and collect that account's user ID and password.

• To enable a Smart Account, Cisco DNA Center must have reachability to tools.cisco.com.

• To apply licenses to a device in Cisco DNA Center, the device must be present in Inventory, must have a site assigned to it, and must have reachability to tools.cisco.com.

---

Step 1	Log in using a Cisco DNA Center system administrator username and password.
Step 2	Choose  > System Settings > Settings > Cisco Credentials.
Step 3	Under Cisco.com Credentials, enter the username and password for your Smart Account.
Step 4	To access your Smart Account using a virtual or subordinate Smart Account name and password, under Link Your Smart Account, choose: Use Cisco.com user ID if your cisco.com and Smart Account credentials are the same. Use different credentials if your cisco.com and Smart Account credentials are different, and then enter your Smart Account credentials.
Step 5	Click View all virtual accounts to view all virtual Smart License Accounts.
Step 6	Click Apply.

[NETAD]

Hi Mohamed, is this procedure for if you have an on prem satellite server? Do we still need to configure the switches via a template? 

for instance: 

on prem ssm configuration:
!
enable
configure terminal
call-home
profile name <>
destination transport-method http
destination address http url <>
active
exit
!
end
!

load license
!
enable
configure terminal
license boot level license_level
write memory
end
show version
configure terminal
reload
end
!
show version
!

and what about the token piece? Do we generate one and apply it somewhere in DNAC? 

[Andrew Woolman]

Hope you worked this out. You need to go into the API module on the On-Prem licencing server and Create Client Credentials which generates the ClientID and Client Secret that you need to enter into DNA Under SSM Connection Mode, On Prem-CSSM .

This doesn't seem to be documented anywhere.

[Arne Bier]

Thanks @Andrew Woolman 

I don't understand why every Cisco product has such a widely differing approach to how Smart Licensing is configured. It's utterly astounding. DNAC is just the most (unnecessarily) complicated piece of equipment I have had to deal with. Makes something simple like registering licenses with SSM very hard. Why can't DNAC just talk to the SSM and have some trusted comms channel to exchange data (perhaps using Cisco signed CA) to talk Cisco-Cisco ? The only creds we should provide is perhaps a username and a login. But asking the user to setup the API stuff is one step too far.