SDWAN 20.12.4 license issue

[mahende17feb@gmail.com]

Hi All,

Iam trying to build a sdwn lab with version 20.12.4 and it saying license unassigned for 2 router. anyone can clarify what type of license it is asking and were can i get this license for lab purpose.

Mode over Control connections are not coming up for vsmart and till vsmart control connection comes up BFD to other routers wont work right.

Any suggestions would be helpful.

[Torbjørn]

This would be DNA essentials/advantage licenses for SD-WAN. Refer to this matrix to see what they cover: https://www.cisco.com/c/m/en_us/products/software/sd-wan-routing-matrix.html. You don't need these licenses for most lab purposes and shouldn't be causing the issues you describe.

Can you elaborate on what issues you are having?

[Kanan Huseynli]

Hi

share show control connections and show control connection-history from routers and vsmarts.

There is no enforcement for licensing, so it is ok to continue without lics for lab purposes only. Thus, your issue is not related to licenses.

[mahende17feb@gmail.com]

Hi All,

Issue is iam not able to find control connections with Routers and vsmarts and not bfd sessions and tunnels coming with Routers.

Please find control connections with routers and vsmarts.

[Kanan Huseynli]

Can you share show run from both router and vsmart?

Also, show control local-properties from both and show control valid-vedges on vsmart, show control valid-vsmarts on vedge.

What is interesting, your router even not try to make connection

[mahende17feb@gmail.com]

Hi @Kanan Huseynli ,

Thanks for your valuable reply. 

please find below details attached, Iam not sure why the vedges are not even try to establish connection with vsmart.
I can see vedge has a connection up with Vbond and vmanage and Vsmart also has a connections with vbond and vmanage.

[Kanan Huseynli · Accepted solution]

Hi,

router fails in certificate installation. Can you verify with vmanage GUI > Configuration > Certificates, why it has issue with cert installation?

And in Administration > Settings ,what option do you use for cloud device certificates?

Basically, you don't have valid certificate so overlay can be built for router. Router just does initial connectivity to vBond, then to vManage using chassis-id/token. Token is temporary, it should be changed to serialnumber, when router has valid certificate.

[mahende17feb@gmail.com]

Hi @Kanan Huseynli ,

Thanks for your valuable reply, I had a certificate installed but in a GUI administration path i selected manaual under cloud devices, after changing it to Vmanage and reinstallint certs help to make all the connection up and BFD/ ipsec came up as well.