Smart Licensing on a ISR4321

Jonathan Galvez · ‎03-07-2022

Hi all,

we just deployed a new ISR4321 on a customer side but I have some questions regarding licenses.

The ISR was with the version 17.03.04a delivered, that means only Smart Licensing possible.

I know that when the license are "NOT ENFORCED", it is not needed to report them but...I saw on the Smart Account that the uck9 and the securityk9 are already listed and assigned to the new Hardware.

But how can I enroll the CUBE Licenses on the CUBE? The licenses are on the Smart Account but I have no connection to report them. I am not sure, if this is necessary or not.

Here you can find the output "show licenses all" of my ISR.

Smart Licensing Status
======================

Smart Licensing is ENABLED

License Conversion:
Automatic Conversion Enabled: False
Status: Not started

Export Authorization Key:
Features Authorized:
<none>

Utility:
Status: DISABLED

Smart Licensing Using Policy:
Status: ENABLED

Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED

Transport:
Type: cslu
Cslu address: <empty>
Proxy:
Not Configured

Miscellaneous:
Custom Id: <empty>

Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)

Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Jun 01 19:59:27 2022 CET
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Mar 07 09:59:56 2022 CET
Last report push: <none>
Last report file write: <none>

Trust Code Installed: <none>

License Usage
=============

uck9 (ISR_4321_UnifiedCommunication):
Description: uck9
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: uck9
Feature Description: uck9
Enforcement type: NOT ENFORCED
License type: Perpetual

securityk9 (ISR_4321_Security):
Description: securityk9
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: securityk9
Feature Description: securityk9
Enforcement type: NOT ENFORCED
License type: Perpetual

SRST_EP (SRST_EP):
Description: SRST_EP
Count: 50
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: SRST_EP
Feature Description: SRST_EP
Enforcement type: NOT ENFORCED
License type: Perpetual

CUBE_T_STD (CUBE_T_STD):
Description: CUBE_T_STD
Count: 3
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: CUBE_T_STD
Feature Description: CUBE_T_STD
Enforcement type: NOT ENFORCED
License type: Subscription

Product Information
===================
UDI: PID:ISR4321/K9,SN:XXXXXXX

Agent Version
=============
Smart Agent for Licensing: 5.0.9_rel/68

License Authorizations
======================
Overall status:
Active: PID:ISR4321/K9,SN:XXXXXXX
Status: NOT INSTALLED

Purchased Licenses:
ISR_4321_Security (ISR_4321_Security):
Description: Security License for Cisco ISR 4320 Series
Total reserved count: 1
Term information:
Active: PID:ISR4321/K9,SN:FDO25520C1C
License type: PERPETUAL
Term Count: 1
ISR_4321_UnifiedCommunication (ISR_4321_UnifiedCommunication):
Description: Unified Communications License for Cisco ISR 4320 Series
Total reserved count: 1
Term information:
Active: PID:ISR4321/K9,SN:FDO25520C1C
License type: PERPETUAL
Term Count: 1

Rajan · ‎03-07-2022

Hi Jonathan,

If you have all required licenses in Smart account, you need to get tokens from smart account and apply it in the ISR4321 in order to register and activate the licenses. If this is not done, all voice services especially SIP service will be down once the grace period ends.

HTH
Rajan
Please rate all useful posts by clicking the star below and mark solutions as accepted wherever applicable

Ratheesh Kumar · ‎03-07-2022

Hi there

please refer to the install guide here -

Smart Software Licensing Task Flow for CUBE

From Cisco IOS XE Amsterdam 17.3.2 onwards, license use reports may be pushed to, or pulled from a licensing server. Refer to the workflows in Smart Licensing Using Policy for Cisco Enterprise Routing Platforms for more details.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/voice/cube/configuration/cube-book/voi-cube-cisco-smart-licensing.html

Hope this Helps

Cheers
Rath!

***Please rate helpful posts and if applicable mark "Accept as a Solution"***

Jonathan Galvez · ‎03-07-2022

Hi Rath,

I agree with you but have a look what a TAC engineer wrote to me, I am very confused because of that and also because on the smart account my license are already enrolled to the new hardware without any connection...

*****************************************************************************************

For “NOT ENFORCED” licenses, there is no service impact, even without acknowledgement from Cisco, for any amount of days without communication, which is the case of the three licenses being consumed on your routers:

uck9
securityk9
CUBE_T_RED

As the guides mention, “Only export-controlled and enforced licenses require Cisco authorization before use.”. An example is the “ISR_4331_Hsec” license: https://www.cisco.com/c/en/us/td/docs/routers/sl_using_policy/b-sl-using-policy/cmd_ref.html#Cisco_Command_Page.dita_36eab4df-b986-4ea8-934a-07880be417c4__example_cd5_x4d_4rb

*****************************************************************************************

I seems like on using policy you do not need to report the licenses anymore...

I will appreciate any feedback

Thanks and regards,

Jonathan

Ratheesh Kumar · ‎03-10-2022

Exactly, dont bother about the No enforcement and there is no enforcement at this time. CUBE just needs to be able to register to the Smart License portal or a satellite server.

Hope this Helps

Cheers
Rath!

***Please rate helpful posts and if applicable mark "Accept as a Solution"***

Sanjay Bishnoi · ‎04-26-2022

https://technocollab.com/slup-registration-process-for-on-prem-cssm-with-cslu/

check if this can help you .

Vaijanath Sonvane · ‎04-26-2022

Hi @Jonathan Galvez,

As per CUBE Configuration Guide Through Cisco IOS XE 17.5, the "Warning" message reads:

When using any of the following Smart Licensing using Policy releases, CUBE shuts down if the router does not receive a report acknowledgment from CSSM before the acknowledgment deadline set by the account policy: 17.3.2, 17.3.3, 17.3.4a, 17.6.1a, or any 17.4 or 17.5 release. CUBE does not shut down in this way with later releases.

As per your post, you are running IOS version 17.03.4a which falls under this warning message. The Next ACK deadline is June 01, 2022 and you never received Last ACK from Smart Account. There is possibility that the SIP service will stop working after June 01.

Couple of months back we ran into same situation. Show version on our CUBE router showed message highlighted in blue color:

Technology Package License Information:

-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
appxk9 None Smart License None
uck9 uck9 Smart License uck9
securityk9 None Smart License None
ipbase ipbasek9 Smart License ipbasek9
The current throughput level is 500000 kbps
Smart Licensing Status: Registration Not Applicable/Not Applicable

Based on this message (which is a cosmetic software bug) and similar to what you have posted, we assumed that we don't need to register CUBE license with Smart Account but we learned a lesson hard way. The SIP services on CUBE Router stopped working and caused outage for almost 2 Hrs.

Sometimes you get mixed messages from different TAC engineers but recommendations for IOS XE 17.3.2 and later is to register CUBE licenses with Smart Account.

Below is the actual configuration done when I interacted with Cisco TAC:

Verify Default Call Home Configuration on ISR:
ISR_Router#  show run | sec call-home
service call-home
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http


Configure Smart Licensing Transport Settings:
ISR_Router(config)#  hostname  ISR_Router
ISR_Router(config)#  ip domain name example.com
ISR_Router(config)#  ip name-server 10.0.0.1 10.0.0.10
ISR_Router(config)#  ip domain lookup source-interface GigabitEthernet0/0/0
ISR_Router(config)#  ip http client source-interface GigabitEthernet0/0/0
ISR_Router(config)#  license smart transport callhome


Configure Smart Licensing Token on Router:
ISR_Router#  license smart trust id_token ZDEwZDFiODktNWF............. local
			

Verify Smart Licensing on Router:
ISR_Router#  show license status
Utility:
  Status: DISABLED

Smart Licensing Using Policy:
  Status: ENABLED

Data Privacy:
  Sending Hostname: yes
    Callhome hostname privacy: DISABLED
    Smart Licensing hostname privacy: DISABLED
  Version privacy: DISABLED

Transport:
  Type: Callhome

Policy:
  Policy in use: Merged from multiple sources.
  Reporting ACK required: yes (CISCO default)
  Unenforced/Non-Export Perpetual Attributes:
    First report requirement (days): 365 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Unenforced/Non-Export Subscription Attributes:
    First report requirement (days): 90 (CISCO default)
    Reporting frequency (days): 90 (CISCO default)
    Report on change (days): 90 (CISCO default)
  Enforced (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)
  Export (Perpetual/Subscription) License Attributes:
    First report requirement (days): 0 (CISCO default)
    Reporting frequency (days): 0 (CISCO default)
    Report on change (days): 0 (CISCO default)

Miscellaneous:
  Custom Id: <empty>

Usage Reporting:
  Last ACK received: Jan 27 09:43:16 2022 EST
  Next ACK deadline: Apr 27 10:00:01 2022 EST
  Reporting push interval: 30  days
  Next ACK push check: <none>
  Next report push: Jan 27 10:02:01 2022 EST
  Last report push: Jan 27 09:39:15 2022 EST
  Last report file write: <none>

Trust Code Installed: Jan 27 09:38:39 2022 EST

Bonus Tip:

To factory reset Smart Licensing grace period until you figure out Smart Licensing use below command to avoid any outage:
ISR_Router#  license smart factory reset

Please rate helpful posts and if applicable mark "Accept as a Solution".
Thanks, Vaijanath S.

Roger Kallberg · ‎04-26-2022

Your spot on @Vaijanath Sonvane. With this specific version of IOS the SIP service will shutdown if the acknowledgment of the RUM is not received in time. We’re currently in this specific situation with this exact version and are actively looking at going to 17.6.2a to get past this and a number of caveats we have encountered in this version.