LICENSING.docx

ranraju · ‎08-08-2011

LICENSING on 2900/3500/3700

========================

Contents:

========

License

2960/2960-S

3560/3750, 3560-G/3750-G, 3560-V2/3750-V2

3560-E / 3750-E

3560-X / 3750-X

Installing Software Licenses Using CLI

Removing Software Licenses Using CLI

List of Commands

=========================================

License:

The Cisco Catalyst 3K family of switches supports the following three feature sets depending on the specific model of switch:

LAN Base: Enterprise access Layer 2 switching features.
IP Base: Enterprise access Layer 3 switching features.
IP Services: Advanced Layer 3 switching (IPv4 and IPv6) features

The Cisco Catalyst 3560-E and 3750-E Series support the IP Base and IP Services feature sets, whereas the Cisco Catalyst 3560-X and 3750-X Series support the LAN Base, IP Base, and IP Services feature sets.

To enable a specific feature set, you must use the software activation feature to install the software license for that feature set. A software activation license (SAL) is preinstalled on the device, which activates the specific functionality that the user procures. Each software activation license is unique to a specific device and functions only with that device. In other words, licenses are locked to the switch's unique device identifier (UDI).

A unique device identifier is made up of two components: the product ID (PID) and serial number (SN). Serial number is an 11-digit number that uniquely identifies a device. The product ID identifies the type of device. This information can be found using the "show license udi" command on the switch CLI.

Switch# show license udi

Device# PID SN UDI

-----------------------------------------------------------------------------

*2 WS-C3750E-48PD-S CAT1033R1XU WS-C3750E-48PD-S:CAT1033R1XU

5 WS-C3750E-48PD-S CAT1033R1KF WS-C3750E-48PD-S:CAT1033R1KF

A temporary software license is limited to a usage period. After the usage period expires, the switch continues to use the temporary software license until it is restarted. Before it restarts, warning messages state the switch is running the feature set without a valid license. After the switch restarts, the switch uses a valid software license based on the previously described hierarchy. If the switch does not have a valid license, it uses the IP base software license.

Here is the link that you could use to request for a temporary license:

https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys=Y - on this link you should give the correct UID of the switch (use "show license uid")

Switch#show license

Index 1 Feature: ipservices

Period left: 8 weeks 4 days <<<<<<< Limited usage period

License Type: Evaluation

License State: Active, Not in Use, EULA not accepted

License Priority: None

License Count: Non-Counted

Index 2 Feature: ipbase

Period left: Life time

License Type: Permanent

License State: Active, In Use

License Priority: Medium

License Count: Non-Counted

The software licenses are not affected by Cisco IOS software upgrades. A software license applies only to a specific feature set. A switch can have more than one software license, but you can enable only one license at a time.

-------------------------------------------------------------------------------------------------------------------------

2960/2960-S

Catalyst 2960 and 2960S switches run one of these images:

1. The LAN base software image: It provides enterprise-class intelligent services such as access control lists (ACLs) and quality of service (QoS) features. On a Catalyst 2960-S switch, stacking is also supported.

2. The LAN Lite image: This image provides reduced functionality.

Catalyst 2960S image ships with universal image that includes cryptographic functionality. The software image on the switch is either the LAN base or LAN Lite image, depending on the switch model.

How to determine which image your switch is running on 2960?

i. Switches running the LAN Lite image do not support the FlexStack module. They do not have a FlexStack module slot on the rear of the switch.

ii. On the front of the switch, the label in the top right corner ends in –S if the switch model runs the LAN Lite image.

iii. Enter the show version privileged EXEC command. The line that shows the product ID also ends in either –L (if running the LAN base image) or –S (if running the LAN Lite image). For example, WS-C2960S-48PD-L is running LAN base; WS-C2960S-24TS-S is running LAN Lite image.

-----------------------------------------------------------------------------------------------------------------------

3560/3750, 3560G/3750G, 3560V2/3750V2

Catalyst 3750 and 3560 switches run feature-specific software releases and do not support software activation. The Catalyst 3560 switch is supported by either the IP base image or the IP services image. Hence the show license command doesn't work.

3560G#show license

^

% Invalid input detected at '^' marker.

3560G#show license ?

% Unrecognized command

----------------------------------------------------------------------------------------------------------------------

3560E / 3750E

Catalyst 3750-E and 3560-E switches run the universal software image that has the Cisco IOS code for multiple feature sets (ipbase & ipservices). To enable a specific feature set, you must use the software activation feature to install the software license for that feature set. Catalyst 3750-E and 3560-E switches support either the noncryptographic or the cryptographic(k9 image) universal software image.

Beginning with Cisco IOS Release 12.2(46)SE, the switches support these features:

- Temporary software licenses

- Rehosting a software license

- Cisco License Call Home

Note:

If the switch is running a software image earlier than Cisco IOS 12.2(46)SE, to run IP base feature - remove the IP services license from the switch, save the switch running configuration, and reload the switch. If the switch is running Cisco IOS Release 12.2(46)SE or later, enter the license boot level ipbase privileged EXEC command, save the switch running configuration, and reload the switch.

- If all the licenses are installed on the switch, the switch uses the highest license level, the IP services feature set.

In brief:

The Cisco Catalyst 3750-E Series with StackWise Plus is an enterprise-class line of stackable wiring closet switches. The Cisco Catalyst 3560-E Series is an enterprise-class line of standalone access and aggregation switches. They combine 10/100/1000 and Power over Ethernet (PoE) configurations with upgradable Gigabit Ethernet to 10 Gigabit Ethernet uplinks to enable applications such as IP telephony, wireless, and video. They support two software feature sets: IP Base and IP Services.

-----------------------------------------------------------------------------------------------------------------------

3560X / 3750X

Catalyst 3750-X/3560-X system is also loaded with a universal Cisco IOS Software image. Universal Cisco IOS Software images contain all Cisco IOS Software features. The level of Cisco IOS Software functionality available is determined by the combination of one (or more) licenses installed on the device.

The Cisco Catalyst 3750-X Series with StackWise Plus and the standalone Cisco Catalyst 3560-X Series are two new enterprise-class lines of access switches that support advanced capabilities such as Stack Power, field-replaceable hot-swappable uplink modules, full 802.3at PoE+ support, dual redundant power supplies and fans, and IEEE 802.1AE (MACsec) hardware-based encryption. They support three software feature sets: LAN Base, IP Base, and IP Services.

For the Cisco Catalyst 3750-X/3560-X Series, in addition to the aforementioned universalk9 images, there are also images with the universalk9-npe designation in the image name. The reason for this alternate image type is that some countries have import regulations that require that the device does not support any strong data-plane crypto functionality, such as IEEE 802.1AE, in any form. To satisfy the import requirements of those countries, this universal image does not support any strong payload encryption (that is, it is of the nonpayload encryption type).

------------------------------------------------------------------------------------------------------------------------

Installing Software Licenses Using CLI

Step1: Log in to the switch by using the console port, the Ethernet management port, or a Telnet session.

Step2: copy license file onto the flash: device from the tftp server.

Step3: Install the license on the switch with the following command in the privilege mode:

license install file-sys:file-sys//lic-location

Once the license gets installed a log message similar to this should be seen: "%IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Next reboot level = ipservices and License = ipservices"

Example:

Switch#license install flash:FDO1229V28R_20100704203238635.lic

Installing licenses from "flash:FDO1229V28R_20100704203238635.lic"

Extension licenses are being installed in the device with

UDI "WS-C3560E-48PD-S:FDO1229V28R" for the following features:

Feature Name: ipservices

PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR

LICENSE KEY PROVIDED FOR ANY CISCO PRODUCT FEATURE OR USING SUCH

PRODUCT FEATURE CONSTITUTES YOUR FULL ACCEPTANCE OF THE FOLLOWING

TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO BE BOUND

BY ALL THE TERMS SET FORTH HEREIN.

You hereby acknowledge and agree that the product feature license

is terminable and that the product feature enabled by such license

may be shut down or terminated by Cisco after expiration of the

applicable term of the license (e.g., 30-day trial period). Cisco

reserves the right to terminate or shut down any such product feature

electronically or by any other means available. While alerts or such

messages may be provided, it is your sole responsibility to monitor

your terminable usage of any product feature enabled by the license

and to ensure that your systems and networks are prepared for the shut

down of the product feature. You acknowledge and agree that Cisco will

not have any liability whatsoever for any damages, including, but not

limited to, direct, indirect, special, or consequential damages related

to any product feature being shutdown or terminated. By clicking the

"accept" button or typing "yes" you are indicating you have read and

agree to be bound by all the terms provided herein.

ACCEPT? (yes/[no]): yes

Installing...Feature:ipservices...Successful:Supported

1/1 licenses were successfully installed

0/1 licenses were existing licenses

0/1 licenses were failed to install

Switch#

5w2d: %LICENSE-6-EULA_ACCEPTED: EULA for feature ipservices 1.0 has been accepted. UDI=WS-C3560E-48PD-S:FDO1229V28R; StoreIndex=-1:UNKNOWN License Store

5w2d: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c3560e Next reboot level = ipservices and License = ipservices

Step4: The license is installed once you have accepted the EULA, but to enable the feature set after installing the license, you need to reload the device. Before reloading the device, the next license boot level of the switch has to be changed, use the following command to do so:

(In config mode) - license boot level license-level [switch switch-num]

If the show license all command displays the license as "Active, Not in Use, EULA not accepted," you can use the license boot level command to enable the license and accept the end-user license agreement (EULA).

Step5: Verify if the new license was installed:

- show version | in License|license

Switch#show ver | in license|License

License Level: ipservices

License Type: Evaluation

Next reload license Level: ipservices

- show license detail (its very important to check if the EULA is accepted or not from the command).

Switch#show license det

Index: 1 Feature: ipservices Version: 1.0

License Type: Evaluation

License State: Active, In Use

Evaluation total period: 8 weeks 4 days

Evaluation period left: 8 weeks 3 days

Expiry date: Apr 30 1993 00:00:25

License Priority: Low

License Count: Non-Counted

Store Index: 0

Store Name: Evaluation License Storage

Index: 2 Feature: ipbase Version: 1.0

License Type: Permanent

License State: Active, Not in Use

License Priority: Medium

License Count: Non-Counted

Store Index: 0

Store Name: Primary License Storage

The above mentioned commands are sufficient for troubleshooting purposes, however there are other commands as well that might help under different circumstances:

- show license feature

Switch#show license feature

Feature name Enforcement Evaluation Clear Allowed Enabled

advipservices yes yes yes yes

ipservices yes yes yes no

ipbase no no yes no

- show license udi (this command displays the Unique Device Identifier for each switch - which can be used for license generation).

Switch#show license udi

Device# PID SN UDI

------------------------------------------------------------------------------------------------------------------------------------

*0 WS-C3560E-48PD-S FDO1229V28R WS-C3560E-48PD-S:FDO1229V28R

----------------------------------------------------------------------------------------------------------

Removing Software Licenses Using CLI

In software releases earlier than Cisco IOS Release 12.2(46)SE, you have the license clear license-level [switch switch-num] privileged EXEC command. Use the license-level parameter to specify the software license to remove. Use the switch switch-num parameter to specify the stack member. The switch switch-num option is supported only on Catalyst 3750-E switches.

In Cisco IOS Release 12.2(46)SE or later, if the software license is in use (active):

•a. Enter the “license boot level license-level” global configuration command to specify a license level different from the current one.
•b. Restart the switch to enable new software license.
•c. Enter the license clear license-level [switch switch-num] privileged EXEC command to remove previous software license.

Switch#license clear ipservices

Feature: ipservices

1 License Type: Evaluation

License State: Active, Not in Use, EULA accepted

Evaluation total period: 8 weeks 4 days

Evaluation period left: 0 minute 0 second

License Addition: Additive

License Count: Non-Counted

Comment:

Store Index: 1

Store Name: Primary License Storage

Are you sure you want to clear? (yes/[no]): yes

Switch#

5w2d: %LICENSE-6-REMOVE: Feature ipservices 1.0 was removed from this device. UDI=WS-C3560E-48PD-S:FDO1229V28R; StoreIndex=1:Primary License Storage

Backing up and saving software license information—Enter the license save {credential url | url} privileged EXEC command.

List of Commands

•- Show license [all/detail]
•- Show license udi
•- Show version | in license|License
•- Show license feature
•- License install flash:filename.lic
•- License boot level feature-set
•- License clear license-level (ex: license clear ipservices)

License Installation On Stack Switches:

https://supportforums.cisco.com/docs/DOC-16501

https://supportforums.cisco.com/thread/2080956