IPSERVICE License upgrade

[indiantrails]

Hi
I have two WS-C3750X-48T-S which is "IP BASE" licensed, which are connected as stack.

I need to use Policy Based Routing (PBR) to direct Vlans to two different gateways, and command "ip policy route-map" which is supported only in C3750-IPSERVICES license.
Do I need upgrade only master switch with Cisco IOS IP Services - product upgrade license
Mfg. Part#: L-C3750X-48-S-E, or both switches need to be upgraded? I am not sure if I need one or two licenses?

Sent from Cisco Technical Support iPad App

[mahmoodmkl]

Hi

AFAIK u need to upgrade both switches.

Thanks

[Marvin Rhoads]

You only need upgrade the master with the caveat that if it is lost, you will also lose your PBR feature. That is because "The system-level features supported on the stack master are supported on the entire switch stack."

Source 3750-X Software Configuration Guide, Chapter on Managing Switch Stacks.

[indiantrails]

Thank You,

What is the procedure to perform the license upgrade with StankWise switches?

Right now I am on IOS (C3750E-IPBASEK9-M), Version 12.2(58)SE2, Should I uptrade it to IOS Verrion 15.0.2-SE2?

[Reza Sharifi · Accepted solution]

Hi,

You should upgrad both switches license.

After you purchase the license, you can go here and upgeade to IP Services.

https://tools.cisco.com/SWIFT/LicensingUI/Home

You get an email with a file extension of .llc

load the file to your flash and install it.

HTH

[Marvin Rhoads · Accepted solution]

Reza,

The IP Base to IP Services license upgrade cost is not insignificant (list price on the order of USD 8000 per switch). If the feature will work with it installed only the master, why would one be advised to purchase it for both switches - other than for redundancy purposes as I noted earlier?

Re a version upgrade to 15.0(2)SE2 vs. the current running 12.2(58)SE2, both are stable versions. It's a judgement choice to upgrade to the newer one (assuming you have entitlement via Smartnet coverage). One should always balance the desire to run the newest code along with considerations such as code maturity, desire to adopt features only available in the newer release, supportability of the older release, etc.

Once you get the Product Authorization Key (PAK) you download the license (or licenses) via the Cisco portal as noted above. the full procedure for installation is described in the document "Configuring the Cisco IOS Software Activation Feature".

[Reza Sharifi]

Marvin,

As an engineer, he should think about having redundancy and make the suggestion to his managers.  Now, if they don't spend the money today and something happens tomorrow at midnight, he, as an engineer is not responsible and can tell his manager  "I told you so".  If he tries to save the company $8000 (list price) today and something happens later, the management will blame him for the outage and not planning for redundancy.  Depending on the company and sensitivity of data, he maybe looking for a new job the day after the outage.

Reza

[Marvin Rhoads]

OK, I understand your point. Think about it and recommend it - yes I agree. However it is not required technically to activate the feature.

If it was my network, I would want to have the license on both switches. For a small business with only a pair of switches however, the cost for even a single switch license upgrade can be a major cost. Were I in the OP's place I would recommend two licenses in writing and docuement the rationale for the recommendation. Management can then make an informed choice as to the path taken.

Now if I had, say, five sites each with switch stacks (with more than two switches per stack) the issue becomes bigger. In such a case I would counsel having the license on a master and secondary stack member (and use priority commands to force election of that secondary switch in the event of master failure). I might at some point go to the trouble of standing up a Cisco License Manager server too keep track of all of those varying licenses.

[indiantrails]

Thank You Reza and Marvin,

I installed demo license  [Catalyst 3560E/X and 3750E/X Evaluation] on my master switch and I will play with it.

Thank you for all sugestion.

[indiantrails]

I installed license IPSERVICE for evaluation

3750X#sh license feature switch  1
Feature name             Enforcement  Evaluation  Clear Allowed  Enabled
ipservices               yes          no          yes            yes  
ipbase                   yes          no          yes            no   
lanbase                  no           no          yes            no   
3750X#sh license feature switch  2
Feature name             Enforcement  Evaluation  Clear Allowed  Enabled
ipservices               yes          no          yes            no   
ipbase                   yes          no          yes            yes  
lanbase                  no           no          yes            no  
3750X#sh license detail switch  1
Index: 1        Feature: ipbase                            Version: 1.0
        License Type: Permanent
        License State: Active, Not in Use
        License Priority: Medium
        License Count: Non-Counted
        Store Index: 0
        Store Name: Primary License Storage
Index: 2        Feature: ipservices                        Version: 1.0
        License Type: Evaluation
        License State: Active, In Use
            Evaluation total period: 4  weeks 2  days 
            Evaluation period left: 4  weeks 1  day  
            Expiry date: Apr 17 2013 10:06:35
        License Priority: Low
        License Count: Non-Counted
        Store Index: 1
        Store Name: Primary License Storage
3750X#sh license detail switch  2
Index: 1        Feature: ipbase                            Version: 1.0
        License Type: Permanent
        License State: Active, In Use
        License Priority: Medium
        License Count: Non-Counted
        Store Index: 0
        Store Name: Primary License Storage

But I still does not see command:  ip policy route-map

[Reza Sharifi]

Is your port a layer-3 port?

Make sure you first issue "no switchport"

and then "ip policy route-map"

HTH

[indiantrails]

Is your port a layer-3 port?
Make sure you first issue "no switchport"
and then "ip policy route-map"

I wnat to do somethink like

interface Vlan104
ip address 192.168.104.1 255.255.255.0
private-vlan mapping 144
ip access-list extended ACL-ROUTE-104-TO-ASA1
deny    ip 192.168.104.0   0.0.0.255 192.168.0.0  0.0.255.255
permit ip 192.168.104.0   0.0.0.255   0.0.0.0          0.0.0.0
route-map PBR-FOR-V104 permit 104
match ip address ACL-ROUTE-104-TO-ASA1
set ip next-hop 10.10.2.1     10.10.2.1
int vlan 104
ip policy route-map  PBR-FOR-104

But also I tried this command  on the interface portchannel

interface Port-channel2
 no switchport
 ip address 10.10.2.1 255.255.255.252

And I see only

(config-if)#ip p?
pim  probe  proxy-arp  

[Reza Sharifi]

Can you post "sh ver"

[indiantrails]

#sh ver  

Cisco IOS Software, C3750E Software (C3750E-IPBASEK9-M), Version 12.2(58)SE2, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2011 by Cisco Systems, Inc.

Compiled Thu 21-Jul-11 01:23 by prod_rel_team

ROM: Bootstrap program is C3750E boot loader

BOOTLDR: C3750E Boot Loader (C3750X-HBOOT-M) Version 12.2(53r)SE2, RELEASE SOFTWARE (fc1)

CORE uptime is 57 minutes

System returned to ROM by power-on

System image file is "flash:/c3750e-ipbasek9-mz.122-58.SE2/c3750e-ipbasek9-mz.122-58.SE2.bin"

License Level: ipservices

License Type: Evaluation

Next reload license Level: ipservices

cisco WS-C3750X-48 (PowerPC405) processor (revision A0) with 262144K bytes of memory.

Processor board ID FDO1627R3H2

Last reset from power-on

6 Virtual Ethernet interfaces

1 FastEthernet interface

104 Gigabit Ethernet interfaces

4 Ten Gigabit Ethernet interfaces

The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address       : 30:F7:0D:7F:7F:80

Motherboard assembly number     : 73-12552-06

Motherboard serial number       : FDO16271S1M

Model revision number           : A0

Motherboard revision number     : A0

Model number                    : WS-C3750X-48T-S

Daughterboard assembly number   : 800-32727-03

Daughterboard serial number     : FDO16392C0K

System serial number            : FDO1627R3H2

Top Assembly Part Number        : 800-31326-03

Top Assembly Revision Number    : B0

Version ID                      : V03

CLEI Code Number                : COMJT00ARC

Hardware Board Revision Number  : 0x04

Switch Ports Model              SW Version            SW Image                

------ ----- -----              ----------            ----------              

*    1 54    WS-C3750X-48       12.2(58)SE2           C3750E-IPBASEK9-M       

     2 54    WS-C3750X-48       12.2(58)SE2           C3750E-IPBASEK9-M       

Switch 02

---------

Switch Uptime                   : 57 minutes

Base ethernet MAC Address       : 60:73:5C:3F:AD:80

Motherboard assembly number     : 73-12552-06

Motherboard serial number       : FDO16300GGM

Model revision number           : A0

Motherboard revision number     : A0

Model number                    : WS-C3750X-48T-S

Daughterboard assembly number   : 800-32727-03

Daughterboard serial number     : FDO16392BNX

System serial number            : FDO1630Z2SK

Top assembly part number        : 800-31326-03

Top assembly revision number    : B0

Version ID                      : V03

CLEI Code Number                : COMJT00ARC

License Level                   : ipbase

License Type                    : Permanent

Next reboot licensing Level     : ipbase

#show sdm prefer

The current template is "desktop routing" template.

The selected template optimizes the resources in

the switch to support this level of features for

8 routed interfaces and 1024 VLANs.

  number of unicast mac addresses:                  3K

  number of IPv4 IGMP groups + multicast routes:    1K

  number of IPv4 unicast routes:                    11K

    number of directly-connected IPv4 hosts:        3K

    number of indirect IPv4 routes:                 8K

  number of IPv4 policy based routing aces:         0.5K

  number of IPv4/MAC qos aces:                      0.5K

  number of IPv4/MAC security aces:                 1K

[Reza Sharifi]

C3750E-IPBASEK9-M

The issue is that you have an IP Base image.  Usually the 3750X series come with a universal image and then base on the license you enable features.

You IOS should look something like this when you do a sh ver:

C3750E-UNIVERSAL-M

So, you need to download an universal image from the CCO:

150.2 is currently available (see below)

c3750e-universalk9-mz.150-2.SE2.bin

HTH