Cisco 8200 Throughput

[emuman100]

The documentation states that unencrypted throughput is unthrottled and encrypted throughput is controlled by license. What does encrypted throughput mean in terms of the 8200 throughput license restriction? I've read the documentation and I'm still not sure.

The ISR4000 series throughput licenses were for both unencrypted and encrypted traffic in this context?

I'm not looking to use any sort of ipsec tunnels or links.

Thanks!

[MHM Cisco World]

S2S VPN and remote access VPN

This encrypt traffic effect by license 

MHM

[emuman100]

So then any other traffic is completely unthrottled? Is a network advantage
license still required?

Thanks.

[Torbjørn]

You must order the router with a networking license(network advantage/network essentials) and a DNA subscription. Refer to the following matrix for what each license includes: https://www.cisco.com/c/m/en_us/products/software/sd-wan-routing-matrix.html 

Any non-encrypted traffic will not be throttled. For encrypted traffic you will need HSEC and a bandwidth tier - throughput will be capped at 250Mbps without HSEC, with HSEC it will be capped at what your bandwidth tier allows. See the ordering guide for more details: https://www.cisco.com/c/en/us/products/collateral/routers/catalyst-8300-series-edge-platforms/cat-8300-8200-series-edge-plat-og.html 

[emuman100]

So then if I order a router without a network essentials or network advantage and no DNA subscription I wont be able to use any of the features including unthrottled non encrypted traffic?

And this is in comparison to the ISR4000 series where I could use the router with a throughput license, but both encrypted and non encrypted traffic are throttled unless I purchase the license for the appropriate throughput tier?

Lastly, I use the appxk9 RTU license on the ISR4000. Is it the same activation process as on the 8200?

Thanks!

[Torbjørn]

You won't be able to order the device without a DNA subscription and networking license. Once the 3 years of the DNA subscription has lapsed you can choose to not renew it and be left with only the perpetual networking license.

License activation on Cat8K would look like this for network advantage + HSEC:

conf t
license boot level network-advantage addon dna-advantage
license feature hseck9
end
platform hardware throughput level MB {throughput level}
wr
reload

[Jens Albrecht]

Hello @emuman100,

as already mentioned by @Torbjørn the DNA subscription is mandatory for the current Cisco 8000 Series Routers so you cannot buy the routers without such license.

However, Cisco just announced the new Cisco 8000 Series Secure Routers which have again a completely different licensing scheme. They can be ordered now and shipping should start around September.

The landing page with links to each new series (8100, 8200, etc.) can be found here: https://www.cisco.com/site/us/en/products/networking/sdwan-routers/8000-secure-routers/index.html

There is also a new Cisco 8000 Series Secure Routers FAQ which mentions some basics of the new licensing scheme.

Some of the key changes:

• No more mandatory DNA subscriptions but term-based functional Routing and SD-WAN licenses.
• No more bandwidth tiers and HSEC licenses. All routers have full throughput enabled by default.
• Only the IP Base features will be perpetual.
• All other features use term-based functional attach licenses that will be enforced.

The current Cisco 8000 Series Routers remain available and continue to use the current scheme, i.e. mandatory DNA licensing and bandwidth tiers etc.

So you need to carefully check and calculate which way to go to find the best option for you.

HTH!

[emuman100]

Hi All,

@Jens AlbrechtI really appreciate the explanation and how you broke down licensing in simple terms! Would ip sla be part of ip base? In previous generations, it required the appxk9 license with both ISR G2 and ISR4000. Also, do you foresee current 8000 models moving towards this new licensing scheme?

@TorbjørnThank you for the clarification on that!

I got my hands on an 8200 with a network advantage license. I can confirm that there is no throttle on unencrypted traffic and I was able to use ip sla. I'm not sure if ip sla wouldn't be available with the network essentials license. I was even able to bond Gigabit Ethernet ports (2x for LAN, and 2x for WAN using LACP) for bandwidth up to 2 Gigabit on both LAN and WAN.

Thanks again!

[Jens Albrecht]

So far I have not seen an official document that lists the features that will be part of the Routing Essentials (former IP Base) and which ones will require the Routing Advantage license. Looks like we still need a bit of patience until such details are published.

Regarding the 'old' 8000 Series routers Cisco said that they have currently no plans to change the licensing scheme. Hence for these routers the DNA licenses remain mandatory and encrypted traffic requires HSEC and bandwith tier licenses depending on throughput needs.