此产品的文档集力求使用非歧视性语言。在本文档集中,非歧视性语言是指不隐含针对年龄、残障、性别、种族身份、族群身份、性取向、社会经济地位和交叉性的歧视的语言。由于产品软件的用户界面中使用的硬编码语言、基于 RFP 文档使用的语言或引用的第三方产品使用的语言,文档中可能无法确保完全使用非歧视性语言。 深入了解思科如何使用包容性语言。
思科采用人工翻译与机器翻译相结合的方式将此文档翻译成不同语言,希望全球的用户都能通过各自的语言得到支持性的内容。 请注意:即使是最好的机器翻译,其准确度也不及专业翻译人员的水平。 Cisco Systems, Inc. 对于翻译的准确性不承担任何责任,并建议您总是参考英文原始文档(已提供链接)。
本文档介绍从旧许可证机制迁移到Cisco IOS® XE 17.3.2及未来版本中的新“使用策略的智能许可”机制后的情况。
本文档没有任何特定的要求。
本文档中的信息基于以下硬件版本:
本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始(默认)配置。如果您的网络处于活动状态,请确保您了解所有命令的潜在影响。
注意:这些方法和命令可应用于其他Catalyst 9000系列交换机。请参阅相应的配置指南,了解本文档中提到的命令和配置。
在Cisco IOS XE 17.3.2和17.4.1版本中,智能许可功能已更改。如果设备离线,则不再需要向思科智能软件管理器(CSSM)注册设备的许可证,也不需要从CSSM保留特定许可证(SLR)。评估许可证也已删除。使用智能许可策略时,所有配置的许可证从零日(安装Cisco IOS XE 17.3.2或更高版本映像的那一天)开始使用。之后,需要向CSSM报告许可证使用情况。
在使用策略的智能许可中,许可证未更改,对于Catalyst 9K平台,所有许可证均未实施,用于注册许可证的先前配置/拓扑仍然可用。假设设备已使用之前的智能许可证版本映像注册或保留。在这种情况下,一旦映像升级到使用策略支持的映像的智能许可,许可证将自动转换为使用零接触策略许可证的智能许可。如果设备仍在使用使用权许可证,或者由于智能许可注册/预留尚未完成,设备具有评估或评估过期映像,则会出现一个使用适用于Windows 10的思科智能许可证实用程序(CSLU)应用的新拓扑(预计未来可支持内部卫星或其他控制器(如思科DNAC))。CSLU位于设备和CSSM之间。它收集所有设备的使用数据,并为CSSM提供离线或在线的单点联系。
使用以前的智能许可映像(对于直到17.3.1的所有Cat9K交换机从16.9.1开始),默认情况下会启用Callhome以连接到云中的CSSM。这要求设备(单个交换机、堆栈或StackWise虚拟(SVL))通过管理端口或前面板下行链路/上行链路端口连接到CSSM。
如果设备已经通过“智能许可证传输callhome”或“智能许可证传输智能”注册,则转换为使用策略的智能许可为“零接触”。当设备软件升级到支持使用策略的智能许可的映像时,无需更改配置即可支持向后兼容性。当设备使用支持策略的智能许可映像启动时,以前用于注册产品实例(PI)许可证的idtoken将转换为信任代码,以允许设备和CSSM之间的通信。所有许可证显示为使用中,而不是注册和授权,如果智能帐户中有可用的任何自定义策略,则还会安装该策略。从此时开始,设备的许可证使用情况会根据策略中的报告计划进行报告。
在CSSM上转换为使用策略的智能许可后,以前的PI从使用主机名更改为PI中每个交换机的UDI(PID和序列号)。对于HA系统,使用的许可证都在活动交换机CSSM PI中报告。备用交换机和成员交换机(如果可用)在CSSM中也有一个PI,但不报告任何许可证使用情况。如果在报告期间内HA系统中的活动交换机发生更改,则许可证使用情况现在会在新的活动PI下看到。
在show license命令输出中,请注意,许可证已注册和授权为智能许可的一部分。
Switch#show license summary
Smart Licensing is ENABLED
Registration:
Status: REGISTERED
Smart Account: BU Production Test
Virtual Account: Cat9K-FranklinDT
Export-Controlled Functionality: ALLOWED
Last Renewal Attempt: None
Next Renewal Attempt: Mar 21 11:08:58 2021 PST
License Authorization:
Status: AUTHORIZED
Last Communication Attempt: SUCCEEDED
Next Communication Attempt: Oct 22 11:09:07 2020 PST
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
C9500 Network Advantage (C9500 Network Advantage) 2 AUTHORIZED
C9500-DNA-16X-A (C9500-16X DNA Advantage) 2 AUTHORIZED
Switch#show license usage
License Authorization:
Status: AUTHORIZEDon Sep 22 11:09:07 2020 PST
C9500 Network Advantage (C9500 Network Advantage):
Description: C9500 Network Advantage
Count: 2
Version: 1.0
Status: AUTHORIZED
Export status: NOT RESTRICTED
C9500-DNA-16X-A (C9500-16X DNA Advantage):
Description: C9500-DNA-16X-A
Count: 2
Version: 1.0
Status: AUTHORIZED
Export status: NOT RESTRICTED
Switch#show license status
Smart Licensing is ENABLED
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: REGISTERED
Smart Account: BU Production Test
Virtual Account: Cat9K-FranklinDT
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Sep 22 11:08:58 2020 PST
Last Renewal Attempt: None
Next Renewal Attempt: Mar 21 11:08:57 2021 PST
Registration Expires: Sep 22 11:04:23 2021 PST
License Authorization:
Status: AUTHORIZED on Sep 22 11:09:07 2020 PST
Last Communication Attempt: SUCCEEDED on Sep 22 11:09:07 2020 PST
Next Communication Attempt: Oct 22 11:09:06 2020 PST
Communication Deadline: Dec 21 11:04:34 2020 PST
Export Authorization Key:
Features Authorized:
<none>
Miscellaneus:
Custom Id: <empty>
在show license输出中,请注意,现在使用的是许可证而不是已注册和已授权的许可证。此外,注册idtoken已自动用作受信任代码以允许CSSM和设备之间的通信。此外,设备上还安装了Cisco Default策略。
Switch#show license summary
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:*
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:*
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:**
Last ACK received: Nov 10 08:56:48 2020 PST
Next ACK deadline: Feb 08 08:56:48 2021 PST
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Dec 10 08:55:29 2020 PST
Last report push: Nov 10 08:55:29 2020 PST
Last report file write: <none>
Trust Code Installed:
Active: PID:C9500-16X,SN:FCW2233A5ZV
INSTALLED on Nov 10 08:54:48 2020 PST
Standby: PID:C9500-16X,SN:FCW2233A5ZY
INSTALLED on Nov 10 08:54:48 2020 PST
注意:在命令输出中,策略的“Enforced”和“Export”部分不适用于C9K交换机,因为所有交换机许可证都是Unenforced的。
注:此表介绍了“使用报告”部分中的每一行。
Switch#show license udi
UDI: PID:C9500-16X,SN:FCW2233A5ZV
HA UDI List:
Active:PID:C9500-16X,SN:FCW2233A5ZV
Standby:PID:C9500-16X,SN:FCW2233A5ZY
在CSSM中,将显示活动和备用UDI,而不是Product Instances选项卡下的PI主机名。
点击活动PID以显示许可证使用情况。单击
High Availability选项卡以显示HA系统中包含的所有PID。
单击Product Instance 选项卡下的Standby switch UDI,以显示备用交换机的信息。备用交换机不显示任何许可证使用情况,因为设备的许可证使用情况仅在活动交换机下显示。
发生此转换后,许可证使用情况将继续根据已安装的策略进行报告。
从使用策略的智能许可降级到智能许可证注册映像
如果出于某种原因,必须将设备降级到不支持使用智能许可策略的上一个映像,请勿更改配置并安装映像以降级。根据设备降级到的映像,可能需要在设备上重新注册。在17.3.2或17.4.1开发工作之前发布的映像不了解使用策略或信任代码的智能许可,因此,降级之后需要重新注册。只需从CSSM获取idtoken,并在设备上使用命令
license smart register idtoken <idtoken> all即可。
16.9.6及更高版本、16.12.4及更高版本和17.3.1映像已添加代码,以便识别信任代码,并在映像降级时将其转换回注册idtoken。许可证将自动重新置于“已注册”(REGISTERED)状态和“已授权”(AUTHORIZED)状态。
使用策略将SLR迁移到智能许可
由于各种原因,客户并不总是希望连接CSSM或外部。为此,添加了离线特定许可证预留(SLR)功能以允许交换机符合要求。本文对此进行说明,并可以使用文档特定许可证保留来了解详细信息。从16.9.1版本到17.3.1版本提供SLR。
当安装了特定许可证预留的设备使用策略支持的映像升级到智能许可时,许可证转换是自动进行的,此时无需执行其他操作。这些许可证现已在使用中,表明它们之前已通过SLR获得授权。但是,在已安装策略所指示的较晚日期,可能需要报告许可证使用情况,如本节稍后部分所示。
使用旧版智能许可证支持的映像在设备上显示命令
Switch#show license summary
Smart Licensing is ENABLED
License Reservation is ENABLED
Registration:
Status: REGISTERED - SPECIFIC LICENSE RESERVATION
Export-Controlled Functionality: ALLOWED
License Authorization:
Status: AUTHORIZED - RESERVED
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
C9500 Network Advantage (C9500 Network Advantage) 2 AUTHORIZED
C9500-DNA-16X-A (C9500-16X DNA Advantage) 2 AUTHORIZED
Switch#show license reservation
License reservation: ENABLED
Overall status:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Export-Controlled Functionality: ALLOWED
Last Confirmation code: 4bfbea7f
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Export-Controlled Functionality: ALLOWED
Last Confirmation code: 9394f196
Specified license reservations:
C9500 Network Advantage (C9500 Network Advantage):
Description: C9500 Network Advantage
Total reserved count: 2
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
License type: PERPETUAL
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
License type: PERPETUAL
Term Count: 1
C9500-DNA-16X-A (C9500-16X DNA Advantage):
Description: C9500-DNA-16X-A
Total reserved count: 2
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
License type: TERM
Start Date: 2020-MAR-17 UTC
End Date: 2021-MAR-17 UTC
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
License type: TERM
Start Date: 2020-MAR-17 UTC
End Date: 2021-MAR-17 UTC
Term Count: 1
Switch#show license status
Smart Licensing is ENABLED
Utility:
Status: DISABLED
License Reservation is ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: REGISTERED - SPECIFIC LICENSE RESERVATION
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Aug 31 11:07:39 2020 PDT
License Authorization:
Status: AUTHORIZED - RESERVED on Aug 31 10:15:01 2020 PDT
Export Authorization Key:
Features Authorized:
<none>
使用策略支持的映像使用智能许可引导后,在设备上显示Show命令
show命令显示正在使用的许可证,并指示它们以前已由特定许可证预留授权。思科默认策略正在使用中。
Switch#show license summary
License Reservation is ENABLED
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license all
Smart Licensing Status
======================
Smart Licensing is ENABLED
License Reservation is ENABLED
Export Authorization Key
Features Authorized:
<none>
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Miscellaneous:
Custom Id: <empty>
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Nov 29 10:50:05 2020 PDT
Reporting Interval: 30
Next ACK push check: <none>
Next report push: Aug 31 10:52:05 2020 PDT
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
License Usage
=============
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
Reservation:
Reservation status: SPECIFIC INSTALLED
Total reserved count: 2
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Reservation:
Reservation status: SPECIFIC INSTALLED
Total reserved count: 2
Product Information
===================
UDI: PID:C9500-16X,SN:FCW2233A5ZV
HA UDI List:
Active:PID:C9500-16X,SN:FCW2233A5ZV
Standby:PID:C9500-16X,SN:FCW2233A5ZY
Agent Version
=============
Smart Agent for Licensing: 5.0.5_rel/42
License Authorizations
======================
Overall status:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Last Confirmation code: 4bfbea7f
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Last Confirmation code: 9394f196
Specified license reservations:
C9500 Network Advantage (C9500 Network Advantage):
Description: C9500 Network Advantage
Total reserved count: 2
Enforcement type: NOT ENFORCED
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
C9500-DNA-16X-A (C9500-16X DNA Advantage):
Description: C9500-DNA-16X-A
Total reserved count: 2
Enforcement type: NOT ENFORCED
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
Purchased Licenses:
No Purchase Information Available
Derived Licenses:
Entitlement Tag: regid.2017-03.com.cisco.advantagek9-Nyquist-C9500,1.0_f1563759-2e03-4a4c-bec5-5feec525a12c
Entitlement Tag: regid.2017-07.com.cisco.C9500-DNA-16X-A,1.0_ef3574d1-156b-486a-864f-9f779ff3ee49
Switch#show license status
Utility:
Status: DISABLED
License Reservation is ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneus:
Custom Id: <empty>
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Nov 29 10:50:05 2020 PDT
Reporting Interval: 30
Next ACK push check: <none>
Next report push: Aug 31 10:52:05 2020 PDT
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
在CSSM中,PI未更改并指示预留许可证,因为此时未报告使用量。只有在收到策略指示或系统日志消息后,才需要报告使用情况。
以后根据策略需要报告使用情况
稍后,如果思科DNA许可证正在使用,设备可能需要报告使用情况。这仍可以在离线模式下完成。但是,对于HA系统,完整设备只需要一个报告文件。使用命令
license smart save usage CLI创建要在CSSM中使用的报告文件。然后将该文件复制到CSSM可访问的位置。
Switch#license smart save usage unreported file flash:RUM-usage-20200925.txt
Switch#copy flash:RUM-usage-20200925.txt tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/
Address or name of remote host [172.27.18.5]?
Destination filename [/auto/tftp-sjc-users2/byodis/RUM-usage-20200925.txt]?
!!
15128 bytes copied in 0.161 secs (93963 bytes/sec)
现在打开CSSM,然后在Reports窗口中单击
Report选项卡。现在,点击
Usage Data Files选项卡,然后点击
Upload Usage Data按钮以上传使用情况报告文件。它要求安装虚拟帐户,因此请确保选择正确的帐户。等待报告完成处理(单击
Usage Data Files选项卡以刷新屏幕并查看其是否已完成)。如果报告成功,则状态指示没有错误,并且设备上有
Download ACK文件可供下载和安装,指示使用情况已成功接收和报告。
将此下载文件复制到设备或设备可以访问的地方,然后使用命令
license smart import将ACK文件导入到设备。
Switch#license smart import tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/ACK_RUM-usage-20200925.txt
Import Data Successfull
show license status的输出表明ACK是在正确的时间记录的。
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
License Reservation is ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneus:
Custom Id: <empty>
Usage Reporting:
Last ACK received: Sep 25 10:12:15 2020 PST
Next ACK deadline: Dec 24 10:12:15 2020 PST
Reporting push interval: 30 days
Next ACK push check: Sep 25 07:55:35 2020 PST
Next report push: Sep 25 10:12:46 2020 PST
Last report push: Sep 25 07:54:33 2020 PST
Last report file write: <none>
Trust Code Installed: <none>
在CSSM中,PI不再显示预留许可证,并且只在活动PI中看到许可证使用情况。
从使用策略的智能许可降级到支持的特定许可证预留映像
如果映像降级到不支持使用策略的智能许可但支持SLR的版本,则只需对映像执行降级。许可证保留为保留和授权-无需其他操作。
使用策略将评估或已过期的评估迁移至智能许可
从16.9.1版本开始,到17.3.1版本,如果许可证未注册或发布,则默认情况下它们是评估许可证。90天后,这些许可证成为评估过期许可证。两者都表示许可证不合规。 由于未实施所有许可证,因此设备上不会丢失任何功能功能。
使用策略的智能许可不再具有许可证的评估状态。因此,当使用策略支持的映像将设备升级到智能许可时,如果任何设备具有评估或评估过期许可证,则所有这些许可证都被视为正在使用中,并且应用思科默认策略。许可证不再显示为UNAUTHORIZED或OUT OF COMPLIANCE。
评估/评估过期模式下智能许可证的Show命令
Switch#show license summary
Smart Licensing is ENABLED
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: NOT ALLOWED
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 30 seconds
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
(C9500 Network Advantage) 2 EVAL MODE
(C9500-16X DNA Advantage) 2 EVAL MODE
Switch#show license usage
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 21 seconds
(C9500 Network Advantage):
Description:
Count: 2
Version: 1.0
Status: EVAL MODE
Export status: NOT RESTRICTED
(C9500-16X DNA Advantage):
Description:
Count: 2
Version: 1.0
Status: EVAL MODE
Export status: NOT RESTRICTED
Switch#show license status
Smart Licensing is ENABLED
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: NOT ALLOWED
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 15 seconds
Export Authorization Key:
Features Authorized:
<none>
Miscellaneus:
Custom Id: <empty>
升级后使用策略显示智能许可证智能许可的命令,但尚未报告使用情况
Switch#show license summary
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Feb 08 08:27:59 2021 PST
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Nov 10 08:29:59 2020 PST
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
连接到CSLU并报告使用情况后,使用策略显示智能许可命令
如
show license status中输出的策略所示,订用许可证(dna-advantage和dna-essentials)必须在90天内报告。 可以使用任何支持的各种使用报告拓扑。请参阅使用策略的智能许可配置指南。此外,本文结尾提供了一些链接,这些链接可用于提供有用的视频和文档。此处的示例是使用CSLU PUSH模型,对Windows 10计算机(笔记本电脑、服务器、虚拟机)上安装的CSLU服务器进行显式配置。有关CSLU下载、安装指南和用户指南,请访问https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2。
Switch#show running-config all | include cslu
license smart transport cslu
Switch#
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#license smart url cslu http://10.24.74.180:8182/cslu/v1/pi_
Switch(config)#^Z
Switch#
Switch#write memory
Building configuration...
[OK]
Switch#show running-config all | include cslu
license smart url cslu http://10.24.74.180:8182/cslu/v1/pi
license smart transport cslu
Switch#
To force the license usage to be reported use the "license smart sync" command.
Switch#license smart sync all
Switch#
*Sep 22 10:48:36.050 PST: %SMART_LIC-5-COMM_RESTORED: Communications with Cisco Smart License Utility (CSLU) restored
Note: Use the "all" option for HA device. Use "local" option for standalone switch
Switch#show license summary
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: cslu
Cslu address: http://10.24.74.180:8182/cslu/v1/pi
Proxy:
Not Configured
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: Nov 10 08:56:48 2020 PST
Next ACK deadline: Feb 08 08:56:48 2021 PST
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Dec 10 08:55:29 2020 PST
Last report push: Nov 10 08:55:29 2020 PST
Last report file write: <none>
Trust Code Installed: <none>
从使用策略映像的智能许可降级到支持评估许可证或评估许可证的映像
如果需要将映像降级到不支持SL Using Policy的映像,许可证将恢复为Eval或Eval expired。保留原来的剩余评估期。由于所有Cat9K许可证都未执行,因此不会丢失任何功能。
使用策略将RTU许可证迁移到智能许可
使用权(RTU)许可是C9300、C9400和C9500到版本16.8.1a的初始许可方案。智能许可在16.9.1之前不可用。
所有许可证仍然相同,但对配置和show命令使用更旧的
license right-to-use命令。使用受策略支持的映像将映像升级到智能许可后,许可证即已使用,与评估/评估模式中的许可证相同。如果正在使用任何思科DNA许可证,思科默认策略要求在90天内报告使用情况。可以使用报告使用策略映像的智能许可的使用情况所支持的任何不同拓扑。
使用RTU许可的设备上的Show命令
Switch#show license right-to-use summary
License Name Type Period left
------------------------------------------------
network-essentials Permanent Lifetime
dna-essentials Subscription CSSM Managed
------------------------------------------------
License Level In Use: network-essentials+dna-essentials Subscription
License Level on Reboot: network-essentials+dna-essentials Subscription
Switch#show license right-to-use
Slot# License Name Type Period left
----------------------------------------------------
1 network-essentials Permanent Lifetime
1 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription
Slot# License Name Type Period left
----------------------------------------------------
2 network-essentials Permanent Lifetime
2 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription
Slot# License Name Type Period left
----------------------------------------------------
3 network-essentials Permanent Lifetime
3 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription
Switch#show license right-to-use usage
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
1 network-essentials Permanent 00:00:00 yes yes
1 network-essentials Evaluation 00:00:00 no no
1 network-essentials Subscription 00:00:00 no no
1 network-advantage Permanent 00:00:00 no no
1 network-advantage Evaluation 00:00:00 no no
1 network-advantage Subscription 00:00:00 no no
1 dna-essentials Evaluation 00:00:00 no no
1 dna-essentials Subscription 00:00:00 yes yes
1 dna-advantage Evaluation 00:00:00 no no
1 dna-advantage Subscription 00:00:00 no no
----------------------------------------------------------------------------
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
2 network-essentials Permanent 00:00:00 yes yes
2 network-essentials Evaluation 00:00:00 no no
2 network-essentials Subscription 00:00:00 no no
2 network-advantage Permanent 00:00:00 no no
2 network-advantage Evaluation 00:00:00 no no
2 network-advantage Subscription 00:00:00 no no
2 dna-essentials Evaluation 00:00:00 no no
2 dna-essentials Subscription 00:00:00 yes yes
2 dna-advantage Evaluation 00:00:00 no no
2 dna-advantage Subscription 00:00:00 no no
----------------------------------------------------------------------------
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
3 network-essentials Permanent 00:00:00 yes yes
3 network-essentials Evaluation 00:00:00 no no
3 network-essentials Subscription 00:00:00 no no
3 network-advantage Permanent 00:00:00 no no
3 network-advantage Evaluation 00:00:00 no no
3 network-advantage Subscription 00:00:00 no no
3 dna-essentials Evaluation 00:00:00 no no
3 dna-essentials Subscription 00:00:00 yes yes
3 dna-advantage Evaluation 00:00:00 no no
3 dna-advantage Subscription 00:00:00 no no
使用策略支持的映像从RTU升级到智能许可后,显示设备上的命令
Switch#show license summary
License Usage:
License Entitlement Tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9300-24 Network Advan...) 2 IN USE
dna-advantage (C9300-24 DNA Advantage) 2 IN USE
network-advantage (C9300-48 Network Advan...) 1 IN USE
dna-advantage (C9300-48 DNA Advantage) 1 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9300-24 Network Advantage):
Description: C9300-24 Network Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: C9300-24 Network Advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9300-24 DNA Advantage):
Description: C9300-24 DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9300-24 DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
network-advantage (C9300-48 Network Advantage):
Description: C9300-48 Network Advantage
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: C9300-48 Network Advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9300-48 DNA Advantage):
Description: C9300-48 DNA Advantage
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9300-48 DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Feb 08 08:27:59 2021 PST
Reporting push interval: 20 days
Next ACK push check: <none>
Next report push: Nov 10 08:29:59 2020 PST
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
这些show命令是在使用策略支持的映像升级到智能许可后执行的,但尚未向CSSM报告使用情况。使用显示在使用中的策略和使用思科默认策略将许可证全部转换为智能许可。如果使用订用许可证,则需要在90天内报告使用情况。之后,系统日志消息从CSSM发送。但是,由于未实施所有C9K许可证,因此不会丢失任何功能功能。
当需要报告时,可以使用使用策略的智能许可配置指南中描述的任何拓扑。许可证show命令输出类似于本文档中介绍的输出。根据所使用的拓扑,某些输出可能有所不同。
从使用策略映像的智能许可降级到映像支持RTU许可证
如果需要将Cisco IOS XE映像降级回16.9.1之前的映像,则保留许可证和功能性。但是,所有智能许可配置均未知且未保存。
从使用策略映像的智能许可降级到支持智能许可证的映像
如果设备从支持RTU的映像迁移到使用策略支持的映像的智能许可,然后降级为支持17.3.2和17.4.1之前的智能许可的映像,则这些设备上的许可证需要执行注册或特定许可证预留操作。
使用策略自定义策略的智能许可
公司可能已与思科协商自定义策略。如果出现这种情况,思科会将该策略安装到智能帐户中。每个智能帐户只能有一个自定义策略,该策略应用于该智能帐户中的所有虚拟帐户。要告诉自定义策略在CSSM中是否有效,请打开Reports视图并单击
Reporting Policy选项卡。可以有多个版本,但只能安装最新版本。
如果智能帐户中安装了自定义策略,则在执行许可证使用情况报告时安装该策略。使用exec命令
show license status可以查看新的自定义策略。系统会显示自定义策略,而不是思科默认设置。根据自定义策略中定义的内容,可以看到自定义值和默认值的组合。在自定义策略中未定义的任何字段继续使用思科默认值。
如果使用离线拓扑或使用CSSM拓扑的CSLU离线,则可以从CSSM将自定义策略下载到设备可访问的文件/位置。然后可以使用exec命令
license smart import <device:path/file>在设备上安装自定义策略。
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Installed On Nov 09 09:09:36 2020 PST
Policy name: Custom Policy
Reporting ACK required: yes (Customer Policy)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 60 (Customer Policy)
Reporting frequency (days): 60 (Customer Policy)
Report on change (days): 60 (Customer Policy)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 30 (Customer Policy)
Reporting frequency (days): 30 (Customer Policy)
Report on change (days): 30 (Customer Policy)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: Nov 09 09:09:36 2020 PST
Next ACK deadline: Dec 09 09:09:36 2020 PST
Reporting push interval: 30 days
Next ACK push check: Oct 29 14:39:50 2020 PST
Next report push: Nov 09 09:10:07 2020 PST
Last report push: Oct 29 14:35:51 2020 PST
Last report file write: <none>
Trust Code Installed:
Active: PID:C9300-24UX,SN:FCW2303D16Y
INSTALLED on Oct 29 14:35:12 2020 PST
Standby: PID:C9300-24U,SN:FHH2043P09E
INSTALLED on Oct 29 14:35:13 2020 PST
Member: PID:C9300-48T,SN:FCW2139L056
INSTALLED on Oct 29 14:35:13 2020 PST
相关信息
- 发行版本注释:RN-9200、RN-9300、RN-9400、RN-9500、RN-9600
- 配置指南:Cat9200-CG、Cat9300-CG、Cat9400-CG、Cat9500-CG、Cat9600-CG
- 命令参考:Cat9200-CR、Cat9300-CR、Cat9400-CR、Cat9500-CR、Cat9600-CR
- 用于Windows 10下载的CSLU(包括用户指南和安装指南):https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2
- 技术支持和文档 - Cisco Systems
版本 | 发布日期 | 备注 |
---|---|---|
3.0 |
09-Mar-2022 |
更新的ALT文本。 |
2.0 |
01-Dec-2021 |
当SLR更改为SLUP脱机模式时,已更新报告操作。 |
1.0 |
10-Dec-2020 |
初始版本 |