NCS540 - license visibility

bozo.bogd · ‎01-27-2025

Hi all,

I have 2 boxes, both version 24.2.2

I w added both of them to smart account.

Considering we already have 4-5 10gig ports up and fully configured I was expecting to see box asking (together with smart account itself) those 10gig-RTU licenses. However that's not the case.

Smart account just shows 2 devices added license usage : No data found

Box 1 :

RP/0/RP0/CPU0:ncs540-1#show license platform detail
Mon Jan 27 10:59:21.024 CET
Collection: LAST: Mon Jan 27 2025 10:56:51 CET
NEXT: Mon Jan 27 2025 11:56:51 CET
Reporting: LAST: Mon Jan 27 2025 10:56:51 CET
NEXT: Tue Jan 28 2025 10:56:51 CET
SIA Status: In Compliance
Parameters: Collection interval: 60 minute(s)
Reporting interval: 1440 minute(s)
Throughput gauge: 1000000 Kbps

RP/0/RP0/CPU0:ncs540-1#show license platform summary
Mon Jan 27 10:59:30.945 CET
Collection: LAST: Mon Jan 27 2025 10:56:51 CET
NEXT: Mon Jan 27 2025 11:56:51 CET
Reporting: LAST: Mon Jan 27 2025 10:56:51 CET
NEXT: Tue Jan 28 2025 10:56:51 CET
SIA Status: In Compliance
Count
Feature/Area Entitlement Last Next
============ =================================================== ==== ====

box2 :

RP/0/RP0/CPU0:ncs540-2#show license platform detail
Mon Jan 27 10:59:57.728 CET
Collection: LAST: Mon Jan 27 2025 10:57:15 CET
NEXT: Mon Jan 27 2025 11:57:15 CET
Reporting: LAST: Mon Jan 27 2025 10:57:15 CET
NEXT: Tue Jan 28 2025 10:57:15 CET
SIA Status: In Compliance
Parameters: Collection interval: 60 minute(s)
Reporting interval: 1440 minute(s)
Throughput gauge: 1000000 Kbps

RP/0/RP0/CPU0:ncs540-2#show license platform summary
Mon Jan 27 11:00:01.178 CET
Collection: LAST: Mon Jan 27 2025 10:57:15 CET
NEXT: Mon Jan 27 2025 11:57:15 CET
Reporting: LAST: Mon Jan 27 2025 10:57:15 CET
NEXT: Tue Jan 28 2025 10:57:15 CET
SIA Status: In Compliance
Count
Feature/Area Entitlement Last Next
============ =================================================== ==== ====

Consider this output same on both boxes :

RP/0/RP0/CPU0:ncs540-1#show license all
Mon Jan 27 11:00:16.932 CET

Smart Licensing Status
======================

Smart Licensing is ENABLED

License Conversion:
Automatic Conversion Enabled: True

Export Authorization Key:
Features Authorized:
<none>

Utility:
Status: DISABLED

Smart Licensing Using Policy:
Status: ENABLED

Account Information:
Smart Account: ***** As of Jan 26 2025 18:16:53 CET
Virtual Account: *****

Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED

Transport:
Type: Smart
URL: https://smartreceiver.cisco.com/licservice/license
Proxy:
Address: proxy.dc.****.****
Port: <empty>
Username: <empty>
Password: <empty>
VRF:
Not Supported

Miscellaneous:
Custom Id: <empty>

Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)

Usage Reporting:
Last ACK received: Jan 26 2025 18:16:18 CET
Next ACK deadline: <none>
Reporting push interval: 0 (no reporting)
Next ACK push check: <none>
Next report push: <none>
Last report push: <none>
Last report file write: <none>

Trust Code Installed: Jan 26 2025 18:16:18 CET
Secondary Signing Cert: 0

License Usage
=============

No licenses in use

Product Information
===================
UDI: PID:N540-24Z8Q2C-M,SN:*********

Agent Version
=============
Smart Agent for Licensing: 5.9.34/9591040b9

License Authorizations
======================
Overall status:
Active: PID:N540-24Z8Q2C-M,SN::*********
Status: NOT INSTALLED

Purchased Licenses:
No Purchase Information Available

Enforcement Status:
No Enforcement Status Information Available

Usage Report Summary:
=====================
Total: 0, Purged: 0
Total Acknowledged Received: 0, Waiting for Ack: 0
Available to Report: 0 Collecting Data: 0

Device Telemetry Report Summary:
================================
Data Channel: AVAILABLE
Reports on disk: 0

Any help would be appreciated.

Thanks.

Giuseppe Larosa · ‎01-27-2025

Hello @bozo.bogd ,

the configuration looks like fine and you are using policy based smart licensing

>> Smart Licensing Using Policy:
Status: ENABLED

at the same time the details are

>>

Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)

>>

and finally

License Authorizations
======================
Overall status:
Active: PID:N540-24Z8Q2C-M,SN::*********
Status: NOT INSTALLED

Purchased Licenses:
No Purchase Information Available

Enforcement Status:
No Enforcement Status Information Available

Usage Report Summary:
=====================
Total: 0, Purged: 0
Total Acknowledged Received: 0, Waiting for Ack: 0
Available to Report: 0 Collecting Data: 0

Actually RTU licences have been auto converted to smart licences but no reporting to the Cisco URL is happening.

Are the mgmt ports on the route processors able to reach the internet ?

Hope to help

Giuseppe

bozo.bogd · ‎01-28-2025

Hey @Giuseppe Larosa ,

Thank you very much for your answer.

What I can see using ping is that device first try ipv6 (which i have configured but no internet access over it atm, device is not in production yet)

RP/0/RP0/CPU0:ncs540-1#ping smartreceiver.cisco.com
Tue Jan 28 10:39:48.930 CET
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2a04:e4c7:fffe::f, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
RP/0/RP0/CPU0:ncs540-1#ping ipv4 tools.cisco.com
Tue Jan 28 10:41:01.394 CET
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 173.37.145.8 timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 119/120/122 ms
RP/0/RP0/CPU0:ncs540-1#ping ipv4 smartreceiver.cisco.com
Tue Jan 28 10:41:11.744 CET
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 146.112.59.81 timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 15/15/16 ms

Over ipv4 everything should be fine, unrestricted access in GRT and source interface atm is gig0/0/0/22

RP/0/RP0/CPU0:ncs540-1#show call-home
Tue Jan 28 10:43:43.551 CET

Current call home settings:
call home feature : enable
call home message's from address: Not yet set up
call home message's reply-to address: Not yet set up

vrf for call-home messages: Not yet set up

call home contact person: noc@******

contact person's phone number: Not yet set up
street address: Not yet set up
customer ID: Not yet set up
contract ID: Not yet set up
site ID: Not yet set up

source interface: GigabitEthernet0/0/0/22
Mail-server: Not yet set up
http proxy: Not yet set up

Smart licensing messages: enabled
Profile: CiscoTAC-1 (status: ACTIVE)

aaa-authorization: disable
aaa-authorization username: callhome (default)
data-privacy: normal
syslog throttling: enable

Rate-limit: 5 message(s) per minute

Snapshot command: Not yet set up

Available alert groups:
Keyword State Description
------------------------ ------- -------------------------------
configuration Enable configuration info
inventory Enable inventory info
snapshot Enable snapshot info
syslog Enable syslog info

Profiles:
Profile Name: CiscoTAC-1

bozo.bogd · ‎01-28-2025

call-home is most likely not relevant for direct deployment.

I w tried now setting up communication trough proxy so I am able to do some tcpdump's

The moment I initiate license smart sync all

RP/0/RP0/CPU0:ncs540-1#RP/0/RP0/CPU0:Jan 28 11:36:35.705 CET: http_client[363]: %SECURITY-XR_SSL-6-CERT_VERIFY_INFO : SSL Certificate verification: Certificate can be used for purpose it was meant to be
RP/0/RP0/CPU0:Jan 28 11:36:38.682 CET: smartlicserver[158]: %LICENSE-SMART_LIC-5-COMM_RESTORED : Communications with Cisco Smart Software Manager (CSSM) restored

At that moment I can see 2-way communication on proxy server, which leads me to conclusion that communication to smart licensing is fine.

However :

Usage Report Summary:
=====================
Total: 0, Purged: 0
Total Acknowledged Received: 0, Waiting for Ack: 0
Available to Report: 0 Collecting Data: 0

Smart-account product instance, even-though its visible it still says for licensing "no data found"