License activation for VSS standby peer (WS-C4507R+E)

[Nabil.]

I have a couple of WS-C4507R+E running in VSS mode, and I'm trying to upgrade the license for the standby peer, and I'm trying to find the best procedure to do this with the minimum service interruption.

My plan is to do a vss switchover redundancy force-switchover and upload the license through tftp and start the activation. 

My question is:

1. Am I suggesting the right procedure

2. what will be license upgrade or activation procedure 

Thanks in advance 

[Nabil.]

below is device details:

================================

sho switch virtual

Executing the command on VSS member switch role = VSS Active, id = 1

Switch mode : Virtual Switch
Virtual switch domain number : 10
Local switch number : 1
Local switch operational role: Virtual Switch Active
Peer switch number : 2
Peer switch operational role : Virtual Switch Standby

Executing the command on VSS member switch role = VSS Standby, id = 2

Switch mode : Virtual Switch
Virtual switch domain number : 10
Local switch number : 2
Local switch operational role: Virtual Switch Standby
Peer switch number : 1
Peer switch operational role : Virtual Switch Active

====================

Show version

Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.08.06.E RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Thu 05-Apr-18 06:32 by prod_rel_team

Cisco IOS-XE software, Copyright (c) 2005-2015 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.
(http://www.gnu.org/licenses/gpl-2.0.html) For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: 15.0(1r)SG5
IQBGAGJA-RS01 uptime is 33 weeks, 2 days, 15 hours, 12 minutes
Uptime for this control processor is 26 weeks, 7 hours, 38 minutes
System returned to ROM by SSO Switchover
System restarted at 03:48:25 GMT Tue Nov 20 2018
System image file is "flash1:unknown"
Jawa Revision 7, Snowtrooper Revision 0x0.0x1C

Last reload reason: Reload command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

License Information for 'WS-X45-SUP7-E'
License Level: entservices Type: Permanent Right-To-Use
Next reboot license Level: entservices

cisco WS-C4507R+E (MPC8572) processor (revision 10) with 2097152K bytes of physical memory.
Processor board ID xxxxxxxx
MPC8572 CPU at 1.5GHz, Supervisor 7
Last reset from Reload
7 Virtual Ethernet interfaces
168 Gigabit Ethernet interfaces
20 Ten Gigabit Ethernet interfaces
511K bytes of non-volatile configuration memory.

Configuration register is 0x2101

[Giuseppe Larosa]

Hello Nabil,

from your show version I see you are using Right to use license on active supervisor

>> License Information for 'WS-X45-SUP7-E'
License Level: entservices Type: Permanent Right-To-Use
Next reboot license Level: entservices

The following document provides information about how to install right to use licenses.

Note that according to documentation you will need a reboot to make the new license effective.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-7-0E/wireless/configuration-guide/b_37e_4500sup8e_cg/configuring_right_to_use_licenses.pdf

So your procedure can be VSS switchover, install right to use license on new active , reboot it.

note: you have Sup 7E not sup8E. An additional check may be needed here.

Edit:

I have found the following thread about Sup 7E but they are using another type of license the classic license file .lic.

https://community.cisco.com/t5/switching/4510-dual-sup-7e-ip-base-license-issue/td-p/1784286

First document above should apply to your case.

About traditional licenses the datasheet mentions the SKU orderable item

see

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/data_sheet_c78-612364.html

L-C4500E-IP-ES  IP BASE to Enterprise Services upgrade license (electronically delivered)

You need at least IP base to build a VSS so I assume you have IP base level on standby peer.

Hope to help

Giuseppe

[Mark Malone]

Hi
yes thats how i do it on mine , install on the primary ...license install bootflash , then also copy license to slaveboot via tftp or usb do the redundancy force switchover that will reload the current bring up that license , then repeat the process on the new active switch , thats it , check it after show license image levels , show license detail

[Nabil.]

Thank you, folks

Actually, I'm installing a new ordered enterprise license instead of the Right to use evaluation one, but in order to have a minimal outage. I'm gonna disable VSL links/ports in order to isolate both of 4507 and keep the active one running normally, meanwhile, I'm gonna install the license on the standby device with the command (#license install bootflash:) then reload.

Note: Only Standby device license need to be upgraded.

Summary:

1. Disable VSL links.

2. install the license on the standby device and reload it 

3. Check the license status

4. Enable VSL links.

5. Check VSS status 

I believe this should be fine, for the overall procedure and for the license migration from evaluation to enterprise.

Regards,

[Mark Malone]

Just be careful there doing it like read scenario 3 on this link what happens when you break the VSL and go dual active just so your prepared

https://www.ciscozine.com/cisco-vss-failure-scenarios/

[Giuseppe Larosa]

Hello Nabil,

to avoid a dual active conflict you should also disable on the access layer switches side all physical ports to the standby chassis before disabling the VSS links.

This is to perform a safer procedure.

Hope to help

Giuseppe

[Nabil.]

You highlight a very important point, I'm putting in my plan disabling all backup links to avoid the dual-active scenario.

From a license perspective, do I need to reload after applying " #license install bootflash: "or no need?

Thanks,

[Mark Malone]

Yes you will still need to reload for the license to take effect on the switch

[Giuseppe Larosa]

Hello Nabil,

 a reload will be necessary to activate the new license, but in full isolation of standby chassis it shouldn't be a great issue you just need ten minutes more in your planned maintenance time window.

Hope to help

Giuseppe