Does SD-WAN need DNA License ?

[Jeongjun Park]

Hi, Team.

Good day.

I would like to know that why SD-WAN needs DNA license. (Example. Some function can be used when Its enabled.)

some customer is operating it without DNA. 

Anyone knows why ?

Thanks.

[Torbjørn]

DNA is really just the name of the license. You can see the DNA licensing matrix for SD-WAN here: https://www.cisco.com/c/m/en_us/products/software/sd-wan-routing-matrix.html

I assume you mean the DNA Center/Catalyst Center when refering to a customer operating without DNA. As you see from the licensing matrix you can see that the Catalyst Center isn't mentioned as an option for management of a DNA licensed SD-WAN device as these are meant to be managed by Catalyst SD-WAN Manager(vManage).

[Jeongjun Park]

Hi. Thank you for your reply.

What I understand from that site is we have to buy/enable DNA license to use those funcitons.

-> Can't we use many function even general routing in SD-WAN without DNA license ?

[Torbjørn]

You will have to use/consume a DNA license to use SDWAN functionality. The DNA license is the license that enables SDWAN. Here's a quote from the licensing page i linked earlier:

"Cisco Catalyst SD-WAN functionality is a pure subscription-based product offering. Upon expiration of your Cisco DNA Subscription for SD-WAN, you are no longer licensed to access the Cisco Catalyst SD-WAN feature set.

Repurposing eligible hardware platforms from Cisco Catalyst SD-WAN to traditional routing deployments is possible. Network Essentials and Network Advantage perpetual licenses are included on eligible hardware platforms with every Cisco DNA for SD-WAN subscription."

[Kanan Huseynli]

Hi,

except HSEC and virtual device licenses there is no enforcement:

Q. Are bandwidth or throughput tiers enforced?

There is no hard enforcement of non-crypto throughput tiers on any platform except the Catalyst 8000V. In all other cases, if the customer chooses to configure a throughput tier for which they do not own a valid license, they will get out-of-compliance messages and will not be entitled to Cisco Technical Assistance Center (TAC) support for related issues. Note that for all platforms without a valid HSEC license, encrypted traffic will be throttled at 250Mbps.

https://www.cisco.com/c/en/us/products/collateral/software/one-wan-subscription/nb-06-dna-sw-rout-sub-faq-ctp-en.html

[Jeongjun Park]

Hi. Thank you for your reply.

What If I only enable HSEC, not DNA license.

What will be happen? 

- cant open TAC case.

- cant use vAnalytics.

Is it correct? I'm sorry that I have no deep knowledge of DNA license especially in SD-WAN.

[Torbjørn · Accepted solution]

The HSEC license only enables you to have encrypted tunnels with higher bandwidth than 250Mbps. It won't allow you to use any SD-WAN functionality within licensing compliance. Here's a relevant doc regarding HSEC in SD-WAN: Cisco Catalyst SD-WAN Getting Started Guide - Manage HSEC Licenses [Cisco SD-WAN] - Cisco¨

It is also worth noting that your support agreement that would allow you to create a TAC case is separate from your licensing.

[Jeongjun Park]

Thanks. I've understood all.

[Torbjørn]

No problem!