ISR 4300 - Trigger policy enforcement for Smart Licensing

[DamienTokyo]

Hi everyone,

I am sorry if my question is not clear, I struggle a little bit to understand the workflow of Smart licensing, Smart account, etc... everything seems too smart to me...  I will do my best to explain it.

I have now a brand new ISR4321 where I want to apply a Performance Boost license.

I have beforehand registered this license into "Product License Registration" related to my Smart account.

In order to apply this Boost license I have chosen to establish a direct connection to CSSM. My router is directly connected to the Internet through my guest network (no proxy, etc...)

I have then followed these docs to set up the connection

Setting Up a Connection to CSSM

At this point I have been able to ping IP addresses on the Internet.

And then followed this

Workflow for Topology: Connected Directly to CSSM

(With the token generation part done inside Smart Software Licensing\Inventory)

Generating a New Token for a Trust Code from CSSM 

(And then applied the token inside the router)

Installing a Trust Code 

After these steps I have seen few traffic going to tools.cisco.com 72.163.4.38 (in SSL)

And from now on, nothing happens. 

Is there a way to trigger the enforcement of the policy from my router to this target URL ?
Type: Smart
URL: https://smartreceiver.cisco.com/licservice/license

I am kind of stuck with this now, don't know how to force the activation of this Performance boost license, Cisco instructions are a bit unclear to me after Smart Account/direct CSSM connection setup

Thanks for your help,

Just in case here is show license status and show license summary

Spoiler

Router#sh license status
Utility:
Status: DISABLED

Smart Licensing Using Policy:
Status: ENABLED

Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED

Transport:
Type: Smart
URL: https://smartreceiver.cisco.com/licservice/license
Proxy:
Not Configured

Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)

Miscellaneous:
Custom Id: <empty>

Usage Reporting:
Last ACK received: <none>
Next ACK deadline: <none>
Reporting push interval: 0 (no reporting)
Next ACK push check: <none>
Next report push: <none>
Last report push: <none>
Last report file write: <none>

Trust Code Installed: <none>

Spoiler

Router#show license summary
License Usage:
License Entitlement Tag Count Status
-----------------------------------------------------------------------------
No licenses in use

[Georg Pauwen]

Hello,

not sure what you missed...did you register the device using the generated token ?

Registering Device using the id Token
SUMMARY STEPS
Now that you have the token from the CSSM, using the token, execute the <device>#license smart register idtoken < token from CSSM portal > command to complete the smart license configuration.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/smart-licensing/qsg/b_Smart_Licensing_QuickStart/b_Smart_Licensing_QuickStart_chapter_01.html

[DamienTokyo · Accepted solution]

Hi,

Indeed I have followed all steps, it turned out that I wrote the token before connecting the router to the Internet.

So what I have done was to push it again once more and voila it started to work !

>	enable
#	conf t
#	license smart trust idtoken Yk1YTctOWUxOTU5OTI3NTc5LTE2NUN4U2ZMWEE3TUtuMlh6di9xOGF1QW5A all force
	*Dec 20 02:03:25.555: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named SLA-KeyPair has been generated or imported by crypto-engine *Dec 20 02:03:25.635: %PKI-4-NOCONFIGAUTOSAVE: Configuration was modified.  Issue "write memory" to save new IOS PKI configuration
#	write mem

By the way after that registration was done, I had to push this command:

platform hardware throughput level boost

And a reload later, the license was registered on my device !

Thanks for your help, I am sorry that my question was not clear. I got lost in Cisco procedures

[Georg Pauwen]

Hello,

good stuff, glad that you got it working. The platform hardware throughput command is needed indeed...