Configuring Smart Licensing
Configuring Smart Licensing
• You can automatically track activations against your license entitlements. Additionally, there is no need
to install the license file on every node. You can create license pools (virtual accounts) to reflect your
organization structure.
• Through the portal, Smart Licensing offers an integrated view of the licenses you have purchased and
what has been deployed in your network. You can use this data to make better purchase decisions, based
on your consumption.
Overview of CSSM
CSSM enables you to manage all your Cisco smart software licenses from one centralized portal. With CSSM,
you can organize and view your licenses in groups called virtual accounts (collections of licenses and product
instances).
You can access the CSSM on https://software.cisco.com/#, by clicking the Smart Software Licensing link
under the License tab.
Note Use a Chrome 32.0, Firefox 25.0, or Safari 6.0.5 web browser to access CSSM. Also, ensure that Javascript
1.5 or a later version is enabled in your browser.
CSSM Help describes the procedures for carrying out these tasks.
Connecting to CSSM
The following illustration shows the various options available to connect to CSSM:
1. Direct cloud access: In this method, Cisco products send usage information directly over the internet to
Cisco.com; no additional components are needed for the connection.
2. Direct cloud access through an HTTPs proxy: In this method, Cisco products send usage information over
the internet through a proxy server - either a Call Home Transport Gateway or an off-the-shelf proxy
(such as Apache) to Cisco.com.
3. Mediated access through a connected on-premises collector: In this method, Cisco products send usage
information to a locally-connected collector, which acts as a local license authority. Periodically, this
information is exchanged to keep the databases synchronized.
4. Mediated access through a disconnected on-premises collector: In this method, Cisco products send usage
information to a local disconnected collector, which acts as a local license authority. Exchange of
human-readable information takes place occasionally (maybe once a month) to keep the databases
synchronized.
Options 1 and 2 provide an easy connection option, and options 3 and 4 provide a secure environment
connection option. Cisco Smart Software Manager On-Prem (formerly known as Cisco Smart Software
Manager satellite) provides support for options 3 and 4.
Email Template:
To: [email protected]
Subject: Request for Linking Existing Licenses to Cisco Smart Account
Email Text:
Cisco.com ID: #####
Smart virtual account name: #####
Smart account domain ID (domain in the form of "xyz.com"): #####
List of UDIs:
List of licenses with count:
Proof of purchase (Please attach your proof of purchase along with this mail)
Procedure
Step 3 {ip | ipv6} name-server server-address 1 Configures Domain Name System (DNS).
[server-address 2] [server-address 3]
[server-address 4] [server-address 5]
[server-address 6]
Example:
Device(config)# ip name-server
209.165.201.1 209.165.200.225
209.165.201.14 209.165.200.230
Step 4 ip name-server vrf Mgmt-vrf server-address (Optional) Configures DNS on the VRF
1 [server-address 2] [server-address 3] interface.
[server-address 4] [server-address 5]
Note You should configure this
[server-address 6]
command as an alternative to the ip
Example: name-server command.
Device(config)# ip name-server vrf
Mgmt-vrf 209.165.201.1 209.165.200.225
209.165.201.14 209.165.200.230
Step 5 ip domain lookup source-interface (Optional) Configures the source interface for
interface-type interface-number the DNS domain lookup.
Example:
Device(config)# ip domain lookup
source-interface Vlan100
Step 9 ntp server ip-address [version number] [key Forms a server association with the specified
key-id] [prefer] system.
Step 10 switchport access vlan vlan_id (Optional) Enables the VLAN for which this
access port carries traffic and sets the interface
Example:
as a nontrunking nontagged single-VLAN
Ethernet interface.
Device(config)# interface
GigabitEthernet1/0/1 Note This step is to be configured only
Device(config-if)# switchport access
if the switchport access mode is
vlan 100
Device(config-if)# switchport mode required.
access
Device(config-if)# exit
Device(config)#
Step 11 ip route ip-address ip-mask subnet mask Configures a route on the device.
Example: Note You can configure either a static
route or a dynamic route.
Device(config)# ip route 192.0.2.0
255.255.255.255 192.0.2.1
Step 12 license smart transport callhome Enables the transport mode as Call Home.
Example: Note The license smart transport
Device(config)# license smart transport callhome command is mandatory.
callhome
Step 13 ip http client source-interface interface-type Configures a source interface for the HTTP
interface-number client.
Example: Note The ip http client source-interface
Device(config)# ip http client interface-type interface-number
source-interface Vlan100 command is mandatory.
Note By default, the CiscoTAC-1 profile is already set up on the device. Use the show call-home profile all
command to check the profile status.
The Call Home service provides email-based and web-based notification of critical system events to CSSM.
To configure and enable the Call Home service, perform this procedure:
Procedure
Step 4 no http secure server-identity-check Disables server identity check when HTTP
connection is established.
Example:
Device(config-call-home)# no http secure
server-identity-check
Step 7 destination transport-method http Enables the Call Home service via HTTP.
Example:
Device(config-call-home-profile)#
destination transport-method http
Step 10 no destination transport-method email Disables the Call Home service via email.
Example:
Device(config-call-home-profile)# no
destination transport-method email
Configuring the Call Home Service for Direct Cloud Access through an HTTPs
Proxy Server
The Call Home service can be configured through an HTTPs proxy server. This configuration requires no
user authentication to connect to CSSM.
To configure and enable the Call Home service through an HTTPs proxy, perform this procedure:
Procedure
Step 5 http-proxy proxy-address proxy-port Configures the proxy server information to the
port-number Call Home service.
Example:
Device(config-call-home)# http-proxy
198.51.100.10 port 3128
Step 7 destination transport-method http Enables the Call Home service via HTTP.
Example:
Device(config-call-home-profile)#
destination transport-method http
Step 8 no destination transport-method email Disables the Call Home service via email.
Example:
Device(config-call-home-profile)# no
destination transport-method email
Step 11 destination transport-method http Enables the HTTP message transport method.
Example:
Device(config-call-home-profile)#
destination transport-method http
Step 17 ip http client proxy-server proxy-address Enables the Call Home feature.
proxy-port port-number
Example:
Device(config)# ip http client
proxy-server 198.51.100.10 port 3128
Configuring the Call Home Service for Cisco Smart Software Manager On-Prem
For information about Cisco Smart Software Manager On-Prem (formerly known as Cisco Smart Software
Manager satellite), see https://www.cisco.com/c/en/us/buy/smart-accounts/software-manager-satellite.html.
To configure the Call Home service for the Cisco Smart Software Manager On-Prem (formerly known as
Cisco Smart Software Manager satellite), perform this procedure:
Procedure
Step 4 no http secure server-identity-check Disables server identity check when HTTP
connection is established.
Example:
Device(config-call-home)# no http secure
server-identity-check
Step 6 reporting smart-licensing-data Enables data sharing with the Call Home
service via HTTP.
Example:
Device(config-call-home-profile)#
reporting smart-licensing-data
Step 7 destination transport-method http Enables the HTTP message transport method.
Example:
Device(config-call-home-profile)#
destination transport-method http
Step 8 destination address http url Configures the destination URL (CSSM) to
which Call Home messages are sent.
Example:
Device(config-call-home-profile)# Note
destination address http
https://209.165.201.15:443/Transportgateway/services/DeviceRequestHandler Ensure
the IP address or the fully qualified
domain name (FQDN) in the destination URL
Step 13 ip http client source-interface interface-type Configures a source interface for the HTTP
interface-number client.
Example: Note The ip http client source-interface
Device(config)# ip http client interface-type interface-number
source-interface Vlan100 command is mandatory for a vrf
interface.
Step 14 crypto pki trustpoint name (Optional) Declares the trustpoint and a given
name and enters ca-trustpoint configuration
Example:
mode.
Device(config)# crypto pki trustpoint
SLA-TrustPoint
The required license level(s) needs to be configured on the device before registering. The following are the
license levels available for Cisco Catalyst 9000 Series Switches:
Base licenses
• Network Essentials
• Network Advantage (includes Network Essentials)
Add-on licenses—These can be subscribed for a fixed term of three, five, or seven years.
• Digital Networking Architecture (DNA) Essentials
• DNA Advantage (includes DNA Essentials)
Procedure
Step 3 license boot level license_level Activates the licenses on the switch.
Example:
Device(config)# license boot level
network-essentials
On successful registration, the device will receive an identity certificate. This certificate is saved on your
device and automatically used for all future communications with Cisco. CSSM will attempt to renew the
registration information every 30 days.
Additionally, license usage data is collected and a report is sent to you every month. If required, you can
configure your Call Home settings to filter out sensitive information (like hostname, username and password)
from the usage report.
Note Downgrading a device from Cisco IOS XE Fuji 16.9.1 to any prior release will migrate the smart license to
traditional license. All smart license information on the device will be removed. In case the device needs to
be upgraded back to Cisco IOS XE Fuji 16.9.1, the license status will remain in evaluation mode until the
device is registered again in CSSM.
Procedure
Step 9 Check the Allow export-controlled functionality on the products registered with this token checkbox.
Enabling this checkbox ensures Cisco compliance with US and country-specific export policies and guidelines.
For more information, see https://www.cisco.com/c/en/us/about/legal/global-export-trade.html.
Procedure
Step 2 license smart register idtoken token_ID Registers the device with the back-end server
using the token generated from CSSM.
Example:
Device# license smart register idtoken
$Tl4UytrNXBzbEs1ck8veUtWaG5abnZJOFdDa1FwbVRa%0AblRMbz0%3D%0A
Device> enable
Device# show license all
Smart Licensing Status
======================
Registration:
Status: REGISTERED
Smart Account: Smart Account Name
Virtual Account: Virtual Account 1
Export-Controlled Functionality: Allowed
Initial Registration: SUCCEEDED on Jul 13 09:30:40 2018 EDT
Last Renewal Attempt: None
Next Renewal Attempt: Jan 09 09:30:40 2019 EDT
Registration Expires: Jul 13 09:25:31 2019 EDT
License Authorization:
Status: AUTHORIZED on Jul 13 09:30:45 2018 EDT
Last Communication Attempt: SUCCEEDED on Jul 13 09:30:45 2018 EDT
Next Communication Attempt: Aug 12 09:30:45 2018 EDT
Communication Deadline: Oct 11 09:25:40 2018 EDT
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
License Usage
==============
Product Information
===================
UDI: PID:C9300-24U,SN:FCW2125L046
HA UDI List:
Active:PID:C9300-24U,SN:FCW2125L046
Standby:PID:C9300-24U,SN:FCW2125L03U
Member:PID:C9300-24U,SN:FCW2125G01T
Agent Version
=============
Smart Agent for Licensing: 4.4.13_rel/116
Component Versions: SA:(1_3_dev)1.0.15, SI:(dev22)1.2.1, CH:(rel5)1.0.3, PK:(dev18)1.0.3
Reservation Info
================
License reservation: DISABLED
Procedure
Step 2 license smart deregister Cancels the device's registration, and sends the
device into evaluation mode. All smart licensing
Example:
entitlements and certificates on the
Device# license smart deregister corresponding platform are removed. The
Command Purpose
Command Purpose
show license summary Displays the summary of all the active licenses.
Example
To display the Call Home profile, use the show call-home profile all command:
Device> enable
Device# show call-home profile all
Profile Name: CiscoTAC-1
Profile status: ACTIVE
Profile mode: Full Reporting
Reporting Data: Smart Call Home, Smart Licensing
Preferred Message Format: xml
Message Size Limit: 3145728 Bytes
Transport Method: http
HTTP address(es): https://tools.cisco.com/its/service/oddce/services/DDCEService
Other address(es): default
Periodic configuration info message is scheduled every 1 day of the month at 09:15
Periodic inventory info message is scheduled every 1 day of the month at 09:00
Alert-group Severity
------------------------ ------------
crash debug
diagnostic minor
environment warning
inventory normal
Syslog-Pattern Severity
------------------------ ------------
APF-.-WLC_.* warning
.* major
Example
To display the license entitlements, use the show license all command:
Device> enable
Device# show license all
Load for five secs: 1%/0%; one minute: 0%; five minutes: 0%
No time source, 09:28:07.210 EDT Fri Jul 13 2018
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: Not Allowed
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 68 days, 0 hours, 30 minutes, 5 seconds
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
License Usage
==============
Product Information
===================
UDI: PID:C9300-24U,SN:FCW2125L046
HA UDI List:
Active:PID:C9300-24U,SN:FCW2125L046
Standby:PID:C9300-24U,SN:FCW2125L03U
Member:PID:C9300-24U,SN:FCW2125G01T
Agent Version
=============
Smart Agent for Licensing: 4.4.13_rel/116
Component Versions: SA:(1_3_dev)1.0.15, SI:(dev22)1.2.1, CH:(rel5)1.0.3, PK:(dev18)1.0.3
Reservation Info
================
License reservation: DISABLED
Example
To display the license usage information, use the show license usage command:
Device> enable
Device# show license usage
Load for five secs: 1%/0%; one minute: 0%; five minutes: 0%
No time source, 09:28:34.123 EDT Fri Jul 13 2018
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 68 days, 0 hours, 29 minutes, 38 seconds
Example
To display all the license summaries, use the show license summary command:
Device> enable
Device# show license summary
Load for five secs: 1%/0%; one minute: 0%; five minutes: 0%
No time source, 09:28:39.986 EDT Fri Jul 13 2018
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: Not Allowed
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 68 days, 0 hours, 29 minutes, 33 seconds
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
(C9300-24 DNA Advantage) 3 EVAL MODE
(C9300-24 Network Advan...) 3 EVAL MODE
Example
To display the license status information, use the show license status command:
Device> enable
Device# show license status
Load for five secs: 1%/0%; one minute: 0%; five minutes: 0%
No time source, 09:28:37.683 EDT Fri Jul 13 2018
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: Not Allowed
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 68 days, 0 hours, 29 minutes, 35 seconds
Example
To register a device, use the license smart register idtoken command:
Device> enable
Device# license smart register idtoken
Tl4UytrNXBzbEs1ck8veUtWaG5abnZJOFdDa1FwbVRa%0AblRMbz0%3D%0A
Device# write memory
Example
To display the license entitlements, use the show license all command:
Device> enable
Device# show license all
Load for five secs: 0%/0%; one minute: 2%; five minutes: 1%
No time source, 09:31:16.387 EDT Fri Jul 13 2018
Registration:
Status: REGISTERED
Smart Account: Smart Account Name
License Authorization:
Status: AUTHORIZED on Jul 13 09:30:45 2018 EDT
Last Communication Attempt: SUCCEEDED on Jul 13 09:30:45 2018 EDT
Next Communication Attempt: Aug 12 09:30:45 2018 EDT
Communication Deadline: Oct 11 09:25:40 2018 EDT
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
License Usage
==============
Product Information
===================
UDI: PID:C9300-24U,SN:FCW2125L046
HA UDI List:
Active:PID:C9300-24U,SN:FCW2125L046
Standby:PID:C9300-24U,SN:FCW2125L03U
Member:PID:C9300-24U,SN:FCW2125G01T
Agent Version
=============
Smart Agent for Licensing: 4.4.13_rel/116
Component Versions: SA:(1_3_dev)1.0.15, SI:(dev22)1.2.1, CH:(rel5)1.0.3, PK:(dev18)1.0.3
Reservation Info
================
License reservation: DISABLED
Example
To display license usage information, use the show license usage command:
Device> enable
Device# show license usage
License Authorization:
Status: AUTHORIZED on Jul 17 09:47:28 2018 EDT
Example
To display all the license summaries, use the show license summary command:
Device> enable
Device# show license summary
Load for five secs: 1%/0%; one minute: 1%; five minutes: 1%
No time source, 09:32:13.746 EDT Fri Jul 13 2018
Registration:
Status: REGISTERED
Smart Account: Smart Account Name
Virtual Account: Virtual Account 1
Export-Controlled Functionality: Allowed
Last Renewal Attempt: None
Next Renewal Attempt: Jan 09 09:30:40 2019 EDT
License Authorization:
Status: AUTHORIZED
Last Communication Attempt: SUCCEEDED
Next Communication Attempt: Aug 12 09:30:44 2018 EDT
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
C9300 DNA Advantage (C9300-24 DNA Advantage) 3 AUTHORIZED
C9300 Network Advantage (C9300-24 Network Advan...) 3 AUTHORIZED
Example
To display the license status information, use the show license status command:
Device> enable
Device# show license status
Load for five secs: 0%/0%; one minute: 1%; five minutes: 1%
No time source, 09:32:00.191 EDT Fri Jul 13 2018
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: REGISTERED
Smart Account: Smart Account Name
Virtual Account: Virtual Account 1
Export-Controlled Functionality: Allowed
Initial Registration: SUCCEEDED on Jul 13 09:30:40 2018 EDT
Last Renewal Attempt: None
Next Renewal Attempt: Jan 09 09:30:40 2019 EDT
Registration Expires: Jul 13 09:25:31 2019 EDT
License Authorization:
Status: AUTHORIZED on Jul 13 09:30:45 2018 EDT
Last Communication Attempt: SUCCEEDED on Jul 13 09:30:45 2018 EDT
Next Communication Attempt: Aug 12 09:30:45 2018 EDT
Communication Deadline: Oct 11 09:25:40 2018 EDT
Additional References
Related Documents
Cisco Smart Software Manager On-Prem Cisco Smart Software Manager On-Prem
Technical Assistance
Description Link
The Cisco Support website provides extensive online http://www.cisco.com/support
resources, including documentation and tools for
troubleshooting and resolving technical issues with
Cisco products and technologies.
To receive security and technical information about
your products, you can subscribe to various services,
such as the Product Alert Tool (accessed from Field
Notices), the Cisco Technical Services Newsletter,
and Really Simple Syndication (RSS) Feeds.
Access to most tools on the Cisco Support website
requires a Cisco.com user ID and password.