C9200 CSSM On-Prem Licensing

[ali007]

HI,

I am trying to license a C9200 against SSM On Prem but unlike the other devices I can't find the following commands:

 "license smart register <token_id>" command not found

can anyone help with step-by-step guide? I did see a video online but none of them covers SSM On-Prem.

thanks in advance.

[balaji.bandi]

what is the version of code running on Cat 9200

here is my blog for on prem registration :

https://www.balajibandi.com/?p=1286

[ali007]

HI Balaji,

version is 17.03.05

thanks

[balaji.bandi]

Device# license smart trust idtoken id_token_value {local| all} [force]

https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-17/217046-configure-smart-licensing-using-policy-o.html#anc1 

[ali007]

Hi Balaji,

been trying this but getting : Fail to parse response data from SCH server.

any idea?

[balaji.bandi]

post complete log what you getting error to help you:

[ali007]

getting the following now:

SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart License Utility (CSLU) : HTTP Server Error 400

and here's the config:

service call-home
snmp-server enable traps call-home message-send-fail server-fail
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
source-interface Vlan200
no http secure server-identity-check
profile "CiscoTAC-1"
active
destination transport-method http
destination address http https://xxxxxxx/Transportgateway/services/DeviceRequestHandler
no destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
profile "test1"
destination transport-method http
destination address http https://xxxxxxx/Transportgateway/services/DeviceRequestHandler

[balaji.bandi]

are you able to reach XXXXX ip using vlan 200  (xxxx is the IP or DNS ?)

ping XXXXX  source vlan200 ?

check common errors :

https://www.cisco.com/c/en/us/td/docs/routers/sl_using_policy/b-sl-using-policy/troubleshooting.html#Cisco_Troubleshooting.dita_10c540a3-b47d-4351-9dc4-b8cb8b308dfc__SMART_LIC-3-COMM_FAILED

[ali007]

Hi,

yes I can telnet to that IP over 443 successfully.

[balaji.bandi]

check on the SSM see any logs ?

[ali007]

no logs on SSM at all. 

[balaji.bandi]

is this only device having issue  ? you mentioned other devices ok ? what is that devices working ?

[BobNet]

Do you need to set an ip http source interface?  Do you have DNS servers configured, ip domain-lookup, need to have DNS servers in a management vrf?  I received the same error and it turned out I was using the smart transport url instead of the legacy URL which you have on devices that didn't support it.  But just pointing out other possible items that might be needed.