Cisco Switch Licence Management

[MadyS]

Hello,
I have a question about Cisco license management specifically the Catalyst 9X00 switches.
My network is in a confined area, my questions are:
1. Is it possible to install long-term custom licenses (3 years or 7 years) on my switches before integration and not need internet during the entire license term?
2. In the event of a vulnerability discovered during this period, download the updates and install them locally via a USB key for example?

I point out that the objective is that the switch has no internet access. I also don't want to use DNA but only local updates.

Thank you for your help !

Regards

[Reza Sharifi · Accepted solution]

Hi,

1. Is it possible to install long-term custom licenses (3 years or 7 years) on my switches before integration and not need internet during the entire license term?

Yes, it is. The license file is usually on the flash and than get installed on the switch. Also, you don't need Internet access for license as the file is local to the switch.

2. In the event of a vulnerability discovered during this period, download the updates and install them locally via a USB key for example?

Yes, you can simply load the software to a USB port and installed it on the switch or load it on a laptop and than transfer the image to the switch and install it. No need for Internet.

HTH

HTH

[MadyS]

Hello,

1. Do Catalyst 9X00 switches need to go online regularly to update? I would like to know if they are obliged to communicate with a cisco server continuously as for firewalls.

2. Is it possible to request PLR (Permanent Licenses Registration) for its fleet of switches from Cisco?

3. Are synchronizations with Cisco Smart Software Manager (CSSM) from the Cisco cloud or Cisco Smart Software Manager satellite (CSSMS) mandatory when you have a PLR license?

Note: I ask these questions because in my research, I saw the explanations below and it is restrictive for my environment:
The CSSMS (client site) automatically synchronizes with the CSSM (Cisco cloud), there is no information on the synchronization frequency other than the fact that if the CSSMS has not synchronized with the CSSM since more than 31 days then an alert is generated on the 32nd day.
 On the 90th day an out-of-sync alert.
After 365 days of non-synchronization of the CSSMS with the CSSM, the revocation of the CSSMS certificate is automatic and a new CSSMS must be deployed. If the certificate is revoked and a new installation of CSSMS is done, certificates must be re-injected into the switches.

Thank you

Regards

@Reza Sharifi , @Cristian Matei 

[MadyS]

Thanks @Reza Sharifi for your help!

Regards

[jessieo]

Hello everyone! I understand that the IOS file itself contains the license and that installing the IOS file equals installing the licence. Correct me if I am wrong.

My questions are:

1. When I replace a standalone switch, do I need to worry about the software license and other licenses activated in the switch?

2. What should I be careful about when I replace a standalone switch and a stacked switch?

Thanks.