The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes licensing for the Cisco Virtual Security Gateway for Microsoft Hyper-V, Release 5.2(1)VSG1(4.1) software.
This chapter contains the following sections:
Cisco VSG licenses are delivered in a Software License Claim Certificate by e-mail. The number of licenses that you request depends on the number of Virtual Ethernet Modules (VEMs) and the number of CPU sockets on each VEM that are using Cisco VSG services.
One license is needed for each installed server CPU on every VEM, and the Cisco VSG license packages are installed and configured on the Cisco Nexus 1000V Virtual Supervisor Module (VSM).
To understand more fully the terms associated with the Cisco VSG and licensing, see Licensing Terminology
Types of Licenses
You can purchase permanent licenses for a fixed number of VEM CPU sockets. Permanent licenses do not expire. The number of licenses is specified in the license file that you have purchased.
When you subsequently upgrade to a new software release, all previously installed permanent licenses remain in effect.
When you purchase permanent licenses, make sure to request enough licenses to cover all of your installed CPUs in all of your VEMs. Before licenses are applied to a VEM, enough licenses must be available to cover all of the CPUs in that VEM. If you are lacking one CPU, then no licenses are applied to the VEM.
Note |
If your license does not have the capacity to cover all CPUs in a particular VEM, then any licenses that could have been applied to that VEM are, instead, placed into a pool of available licenses on the VSM to be used as needed. The VEM remains unlicensed until enough licenses are available to cover all CPUs in the VEM. |
After you purchase a license package, you then install the package on your VSM. The following table displays the license package names.
License Package | Description |
---|---|
N1KV_MSFT_LAN_SERVICES_PKG |
Virtual Ethernet Module (VEM) |
NEXUS_VSG_MSFT_SERVICES_PKG |
VEM to use Cisco VSG services |
After installing permanent licenses, if your evaluation licenses are no longer used, you can remove the evaluation license file from the pool. For more information, see, Uninstalling a License.
512 Cisco VSG default licenses (NEXUS_VSG_MSFT_SERVICES_PKG ) are preinstalled on the VSM that do not expire. These default licenses enable you to use the Cisco VSG. You need to purchase a new VSG licenses when you upgrade to a new VSM version.
Caution |
The vEthernet interfaces on unlicensed VEMs cannot use Cisco VSG services. If you need additional licenses to cover all VEM CPU sockets, then you must obtain either permanent licenses or evaluation licenses from Cisco.com. |
Evaluation licenses are available in packages of 512 licenses that are valid for life to enable you to evaluate the Cisco VSG before you purchase permanent licenses. You need to install a new VSG Hyper-V license set before you upgrade VSM to the latest version.
Unlike default licenses, an evaluation license is not invalidated when you install a permanent license.
Evaluation licenses expire when the license file reaches its expiration date.
Caution |
If your evaluation licenses expire, your VEMs are unlicensed. The vEthernet interfaces on unlicensed VEMs cannot use Cisco VSG services. |
After installing permanent licenses, if your evaluation licenses are no longer used, you can remove them from the pool.
Overdraft licenses can prevent losing Cisco VSG security services if you exceed the number of permanent or evaluation licenses that are specified in your license file. The number of overdraft licenses provided is based on the number of licenses that you ordered.
If you have licenses that are unused, the VSM stores these licenses in a pool of available licenses. If your license does not have the capacity to cover all CPUs in a particular VEM, then any licenses that could have been applied to that VEM are, instead, placed into the pool to be used as needed. If a VEM is no longer using Cisco VSG services, its licenses are returned to the pool. Before you can uninstall a license, you must first return all licenses from their VEMs to the pool.
If any licensed VEM is offline during a renegotiation of licenses, its licenses are returned to the VSM license pool. Once the VEM comes back online, it acquires its licenses from the VSM if any virtual machine on the VEM has Cisco VSG service enabled.
During the license renegotiation process, system messages alert you if licenses are returned to the VSM pool for a VEM that is offline. This process requires no action on your part because the licenses are returned to the VEM as needed when it comes back online.
The volatile license feature automatically captures unused licenses when a VEM is taken out of service or when there are no VMs using any Cisco VSG services on the VEM and adds them to the VSM license pool so that they can be reused by another VEM. When you enable this feature, any time a VEM is taken out of service, either automatically or manually, its licenses are returned to the VSM license pool.
If its licenses are nonvolatile, the VEM does not release them when you take the VEM out of service.
Note |
For the Cisco VSG, the licenses are by default volatile. We recommend that you leave the Cisco VSG license configuration to be volatile by default. The volatile licenses feature is disabled by default for the Cisco Nexus 1000V Series Switch. That is, the licenses in VEMs are nonvolatile and are not released when a VEM is removed from service. |