on 08-05-2020 03:56 PM - edited on 08-14-2020 09:58 AM by Hilda Arteaga
This event had place on Thursday 30th, July 2020 at 10hrs PDT
In this session, the Cisco expert covered single image orchestration changes with
This event provides an introduction to smart licensing on Cisco Catalyst switches, including 9000 (9200, 9300, 9400, 9500, 9500H, and 9600 Series) and 3000 (3650 and 3850 Series) switches. Cisco experts review the benefits, basic concepts, considerations, different types of registrations, and general FAQs. In addition, a live demonstration on how to register a license with a Cisco server is provided.
You can download the slides of the presentation in PDF format here.
A: Yes they can do it, they will have to use the Right to Use again, but It is suggested to go to SL since the IOS versions that support RTU will not be supported eventually.
A: NX-OS and Nexus switches also support Smart Licensing. However, this session focuses on Catalyst 9K platforms.
A: The Network advantage license is the perpetual License that will allow the switch to use advance L2 and L3 features such as VXLAN,LISP,SGT,MPLS, MACSEC, etc. While the DNA advantage add-on is the license needed in case that the switch is required to be part of SDA solution.
A: You can have multiple virtual accounts associated with your Smart Account in CSSM so you can assign licenses accordingly based on departments in your organizations or other criteria. You can move licenses between virtual accounts. There's also a default virtual account. Licenses can be unregistered from the device so those can return to the pool in CSSM.
A: Find the answer to this question in the Ask Me Anything for this session
A: They will have to go back to RTU again, SL starts from 16.9.1 onward, no hybrid version.
A: In that case, you need to get in touch with the Smart Account Support Team so they can provide that license to a different account. Cisco TAC can assist in contacting the Smart Account Support Team.
A: IP routing can be enabled on an L2 3850 switch, the features available depends on the license that the switch is running.
A:T he DNA license is the add-on needed in case that the switch is required to be part of SDA solution, if that is not the case, there is no need for an add-on license in the switch.
A: Find the answer to this question in the Ask Me Anything for this session
A: For switches that will not connect to the internet, we have the Specific License Reservation.
A: Yes, the device will communicate with CSSM every 30 days. So, that connectivity is required. There is another option for devices that will work in closed networks.
A: Switch # license smart register id token.
A:We need to make sure that the switch is able to reach the internet since every 30 days the switch will communicate with the Cisco servers again.
A: It's a one-time thing unless the switch is RMA's so you will have to transfer that license to the new one.
A: Smart Licensing scheme is mandatory, starting with IOS-XE 16.9.1 and above.
A: You need to open a case with the Smart Account Support team. They will help you to provision your switch licenses to the software manager under your virtual account. Once the license is visible, we will be able to register the switch.
A: Find the answer to this question in the Ask Me Anything for this session
A: That's the main method in which the switch communicates with the Cisco CSSM server through HTTPS via tools.cisco.com. CSSM having the pool of licenses.
A: There's a way in which you can manually provision the licenses on the Satellite server without the need for that one to have Internet access.
A: That method is called disconnected mode:
1.Navigate to https://sofware.cisco.com/download/
2. In the Select, a Product field, enter Smart software Manager Satellite.
A:Smart licensing would be needed when you upgrade the iOS to any higher version than 16.8.x. If c3650 is still using RTU schema on releases (16.6.x, 16.8.x, 16.3). Smart licensing is not available and, therefore, not needed.
A: Yes, that is correct.
A: In that case you could go with the Smart License Reservation (SLR) option. Also, at the moment there's no enforcement and the features will continue to work even if the device reaches the Authorization expired state.
A: No, you will need to register the replacement device. It will not happen automatically.If an already registered device is RMAed, the new device needs to be registered into the CSSM, from the CSSM part, the license needs to be released to be available from the new device.If you do not want to wait, and you can manually remove that license in the software center.
A: Steps are based on Catalyst 3k/9k switches, for routers and VGW steps can vary due to device iOS architecture.
A: If devices are always offline, the best approach would be SLR procedure, but that would depend on which is the offline registration.
A: When Export-Controlled Functionality is shown as Not Allowed, it means that Communication transport is not available, it could be related to all-home is not enabled with "service call-home or profile is not enabled on config switch.
A: No additional costs are added when you move to smart license.
A: For the equipment question, you can review more details and the answer in these videos: https://youtu.be/4kd8y3oH-8U and https://youtu.be/HK3klxgUJvk
A: Find the answer to this question in the Ask Me Anything for this session
A: The answer would be that if that firewall can reach the Internet, and that target will need to be able to reach the Cisco server. So we are going to just let the direct the traffic to the firewall like the destination. The only to be told that cisco.com, because that's the final destination. But for the traffic itself, like, if you are creating a route or things like that, you can use the route for firewall. I mean that the firewall would be your gateway to reach that destination.
A: Regarding registration, the only possible method that we could be having is that when the offline process.There's a particular requirement if you're authorized for that. You can also request that when you receive the switch because it's going to be completely offline, it could include all already the license file, so you would just need to install it to enable it, but regarding the other types of registration, because you need to configure how to reach the server or the satellite, or if you have a proxy, and also associated with your smart account and things like that. Summary, it is not possible if it's an online method, we cannot have it already because also every 30 days the switch will communicate back to the server. So we need to do that proper configuration on the switch.
A: Regarding catalyst switches on catalyst which is 38 50 etc, or demand kit. We don't use a PAK file for a license. So, there's no way that we can convert a file that we don't use those PAK are used more on firewalls and on other devices Nexus also, but paddle switches, we don't have that PAK file. If you have a PAK file, that means it is for a different device, so you can go ahead and just convert that PAK to a smart.
A: Normally when you buy a switch, you buy it with a license. So sales order includes the fact the device the switch, and the license. You just need to contact Cisco, and they do the proper they checked that sales order and updated and assign it to your account. So you would see that license available on your account and you can just do the registration of.
A: If you're migrating to smart licensing, that doesn't generate any extra costs. It's just doing the registration part, but you don't need to buy something extra. Why would you would need to pay like extra to upgrade or not upgrade would be for example if you're going from the basic to a more complete one so for example if you're going from network essential to network advantage that would require an extra payment.
A: Regarding Smart licensing, it's mandatory in 16.9.1 and above. So, any software version that you would be running after that is mandatory. This solution is not going away from the question I understand that he had heard does is going away. No, it's not going away.
A: Find the answer to this question in the Ask Me Anything for this session
A: For Cisco Firewall, Smart Licensing will work pretty similarly. https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/intro-license-smart.html.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: