Smart license DLC through a web proxy

[Mark07412]

I’m investigating doing a DLC smart licence upgrade on an old ASR1006 and am essentially following this guide.

My problem boils down to the smart license proxy commands not being supported / present in 16.10.1a.

license smart url default

license smart transport smart

license smart proxy address 10.x.x.x

license smart proxy port 3128

license smart privacy hostname

license smart privacy version

end

license smart trust idtoken xxxx local force

I’ve tried a few other commands, more call-home centric really, but to no avail.

ip http secure-trustpoint SLA-TrustPoint

ip http client source-interface GigabitEthernet0

ip http client proxy-server 10.x.x.x proxy-port 3128

Does anyone have any other suggestions rather than plumbing in full fat internet or installing an On-Prem SSM? (I’ve tested the latter on a similar device and it works)

[balaji.bandi]

its been long time we used 16.10 code sinde its not supported version, but the config you provided should work as expected.

couple of things to check.

1, make sure source interace can reach to proxy

2. proxy has bypass rules to connect to cisco license server 

3. what proxy server is this ? check the Logs in proxy that is the device try to connect cisco site using 443 port ?

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/smart-licensing/qsg/b_Smart_Licensing_QuickStart.html

[Mark07412]

If the commands are not present in 16.10 what alternatives can I use?

Router(config)#license smart ?
  custom_id Set a customer defined id
  privacy privacy related commands
  reservation Enable or disable the license reservation feature
  transport Select the type of message transport for Smart Agent
  url Set the Smart Transport Primary and the Utility URL
  utility Enable or disable usage reporting on the device

Use of 16.10 is just a stepping stone version to carry out DLC and then onwards upgrade to a supported version. If you know of an easier way to upgrade an old device into smart licensing mandated versions then please do share.