Cisco CSR 1000V Series Cloud Services Router Software Configuration Guide
Managing Cisco CSR 1000V Licenses
Downloads: This chapterpdf (PDF - 332.0KB) The complete bookPDF (PDF - 3.28MB) | Feedback

Table of Contents

Managing Cisco CSR 1000V Licenses

Installing and Activating Cisco CSR 1000V Licenses

Installing Licenses on the Cisco CSR 1000V

Managing Technology Package and Throughput Licenses

License Upgrade and Downgrade Scenarios

Changing the Technology Package License Boot Level (Cisco IOS XE Release 3.10S and Later)

Managing the Throughput Level Licenses

Changing the Maximum Throughput Level

Configuring the 10 Gbps Interface

License-Based Restriction on Aggregate Bandwidth

Managing Throughput Notifications

Managing Memory Upgrade Licenses (Cisco IOS XE Release 3.11S and Later)

Requesting a New Virtual UDI

Installing and Activating Cisco CSR 1000V Licenses

When the Cisco CSR 1000V first boots, the router boots in limited mode. The network interfaces are activated but throughput is limited and the feature support is limited. You need to install and activate the software licenses using the license install command to obtain the throughput and feature support provided by the license. See the sections below:

For information about the available licenses in your software version, see the Cisco CSR 1000V Series Cloud Services Router Release Notes .The Cisco CSR 1000V supports the following option to activate the software licenses:

  • Cisco Software Licensing (CSL)

The procedure for installing the Cisco CSR 1000V licenses using Cisco Software Licensing (CSL) is similar to other Cisco router platforms. For information on obtaining and installing Cisco CSR 1000V licenses using the standard Cisco software activation procedures, see the Software Activation Configuration Guide, Cisco IOS XE Release 3S and the Cisco IOS Software Activation Command Reference.

Installing Licenses on the Cisco CSR 1000V

The Cisco CSR 1000V boots in a limited mode that provides limited feature support and throughput limited. You must install the license using the license install command for the feature support and throughput settings to take effect. The following requirements apply to the license installation:

  • Before the license is installed the maximum throughput is limited as follows:

(Cisco IOS XE 3.13S and later): Throughput is limited to 100 Kbps

(Cisco IOS XE 3.12S and earlier): Throughput is limited to 2.5 Gbps

  • Depending on the release version and the installed license, you may need to reboot the Cisco CSR 1000V for the feature technology package and the supported maximum throughput to take effect.

(Cisco IOS XE 3.13S and later) The Cisco CSR 1000V first boots up in the AX technology mode by default, so all features in this package are supported. Installing an AX technology license applies the AX license immediately, and the throughput is increased to the maximum throughput of the installed license. Rebooting the router is not required.

If you install a different technology license (IPBase, Security or APPX), the corresponding license boot level command setting is automatically added to the running configuration, but you must reboot the router for the new license technology level to take effect and to have the license applied.

(Cisco IOS XE 3.12S and earlier) For first-time license installation, you must configure the license boot level command to obtain the feature technology package supported by the installed license. You must reboot the Cisco CSR 1000V for the settings to take effect.

(All versions) If a license currently exists on the Cisco CSR 1000V and you install a new license, if the feature technology package or the maximum throughput of the new license differs from the existing license, you must enter the license boot level command and reboot the Cisco CSR 1000V for the settings of the new license to take effect.

For example, if you currently have an IPBase license installed, and you install a new AX license, you must configure the license boot level command to the “ax” setting and reboot the Cisco CSR 1000V for the new installed license setting to take effect.


Note If multiple licenses are installed, the throughput value reflects the highest throughput license installed. When performing the show license detail command, the license with the highest throughput value is shown as “in use”.


For more information about the license boot level command, see the “Changing the Technology Package License Boot Level (Cisco IOS XE Release 3.10S and Later)” section. For more information about the platform hardware throughput command, see the “Changing the Maximum Throughput Level” section.s

Managing Technology Package and Throughput Licenses

License Upgrade and Downgrade Scenarios

The Cisco CSR 1000V licenses are based on both technology packages and maximum supported throughput levels. Depending on the licenses installed, different upgrades and downgrades are possible.

  • If you want to change the technology package, you must install a new license.

For example, if you are running the Security technology package but want to change to the IPBase technology package that supports fewer features, you must purchase and install an IPBase technology package license.

  • If you want to increase the maximum throughput supported on the Cisco CSR 1000V beyond what the current license supports, you must install a new license with the increased throughput. The license must be for the same technology package.

For example, if you are running a license that supports a maximum throughput of 50 Mbps and you want to increase it to 100 Mbps, you must purchase and install a 100-Mbps throughput license.

  • If you want to reduce the maximum throughput on the router, you can use the platform hardware throughput level command to do so. You can increase the maximum throughput back to the level supported by the license.

For more information, see the “Managing the Throughput Level Licenses” section. For more information about how the maximum throughput is regulated, see the “Configuring the 10 Gbps Interface” section.

Changing the Technology Package License Boot Level (Cisco IOS XE Release 3.10S and Later)

The Cisco CSR 1000V supports three levels of technology package licenses that provide different levels of feature support. For more information, see the “Cisco CSR 1000V Series Software License Overview” section. You can change the technology package license boot level in the following situations:

  • When using an evaluation license, the license boot level command is required to activate the evaluation license. You will be prompted to accept the EULA. Once the EULA is accepted, the evaluation license is enabled.
  • When using an evaluation license, you can use the license boot level command to change the boot level for evaluating the different technology packages.
  • When multiple technology package licenses are installed on the same VM.

For example, if both a Standard and a Premium license are installed on the same VM. If you want the router to boot using the Standard package the next time the router is reloaded, you must use the license boot level command to change the boot level. If multiple licenses are installed on the same VM, the router boots to the highest technology license package level that is installed.

In all cases, the change in the technology package level takes effect the next time the router is rebooted.


Caution If you downgrade to a lower technology package level, the configuration for those features not supported by the lower technology package level will be rejected when the router reboots. If you do a write or copy running configuration startup-configuration operation, the configuration will be erased.

SUMMARY STEPS

1. enable

2. configure terminal

3. Cisco IOS XE 3.13S and higher:

license boot level { ipbase | security | ax | appx }

Cisco IOS XE 3.12S and lower:

license boot level { standard | advanced | premium }

DETAILED STEPS

Command or Action
Purpose

Step 1

enable

 

Router> enable

Enables privileged EXEC mode.

  • Enter your password if prompted.

Step 2

configure terminal

 

Router# configure terminal

Enters global configuration mode.

Step 3

Cisco IOS XE 3.13S and higher:

license boot level { ipbase | security | ax | appx }

Cisco IOS XE 3.12S and lower:

license boot level { standard | advanced | premium }

 

Router(config)# license boot level ax

Changes the technology package level. The Cisco CSR 1000V must be rebooted for the change to take effect.

Note In Cisco IOS XE 3.12.1S and later IOS XE 3.12.xS releases, use the standard option for the IPBase feature set, the advanced option for the Security feature set, and the premium option for the AX feature set.

Managing the Throughput Level Licenses

When you first install the Cisco CSR 1000V, the network ports are active, but the throughput is limited to 2.5 Mbps (Cisco IOS XE 3.12S and earlier) or 100 Kbps (Cisco IOS E 3.13S and later). Once you have installed and activated the base performance license (including accepting the EULA), the throughput on the network ports will increase to the supported level.


NoteIf your license expires or becomes invalid, the maximum throughput automatically reverts to the 2.5-Mbps or 100 Kbps default.


For information about installing and activating the software licenses using Cisco Software Licensing (CSL), see the Software Activation Configuration Guide, Cisco IOS XE Release 3S. For the list of available license SKUs, see the Cisco CSR 1000V Series Cloud Services Router Release Notes.

Depending on the configuration and the licenses installed, you may need to manually increase or decrease the maximum throughput level on the Cisco CSR 1000V. When you install the base subscription license and accept the EULA, the maximum throughput on the Cisco CSR 1000V will increase to the level allowed by the license.

You may need to manually change the maximum throughput level in the following cases:

  • If you are using an evaluation license, the maximum throughput is initially limited to 2.5 Mbps (Cisco IOS XE 3.12S and earlier) or 100 Kbps (Cisco IOS E 3.13S and later). You must enter the platform hardware throughput level command to increase the maximum throughput to the supported level. When the evaluation license expires, the maximum throughput level reverts to the limited level.

Note (Cisco IOS XE Release 3.10S and higher) You must enter the license boot level command to enable the evaluation license. See the “Changing the Technology Package License Boot Level (Cisco IOS XE Release 3.10S and Later)” section.


  • If you want to reduce the maximum throughput level from the maximum permitted by the installed licenses. For example, if you have the 100-Mbps license installed and you want to reduce the maximum throughput to 50 Mbps. You must enter the platform hardware throughput level command to reduce the maximum throughput.
  • If you previously changed the maximum throughput using the platform hardware throughput level command. When you enter the command, it becomes part of the configuration file. You must enter the command again to change the maximum throughput level.

When changing the maximum throughput level, you do not need to reboot the Cisco CSR 1000V for the change to take effect. If you try to increase the throughput level higher than what the installed license supports, you will receive an error message. For more information on the maximum throughput level and how the router limits throughput based on the installed license, see the “Configuring the 10 Gbps Interface” section.

Note that changing the maximum throughput level for a license is limited to the technology package license that is installed. For example, if you have a Standard technology license, you can increase the maximum throughput level to another Standard technology license only.

Changing the Maximum Throughput Level

The license must be activated and the EULA accepted before changing the maximum throughput level.

SUMMARY STEPS

1. enable

2. show platform hardware throughput level

3. configure terminal

4. Choose one of the following:

Cisco IOS XE Release 3.10S and later (throughput options vary by release version):

platform hardware throughput level MB
{ 10 | 100 | 1000 | 10000 | 250 | 2500 | 50 | 500 | 5000 }

Cisco IOS XE Release 3.9S:

platform hardware throughput level
{ 10000 | 25000 | 50000 | eval-only }

5. exit

6. show platform hardware throughput level

DETAILED STEPS

Command or Action
Purpose

Step 1

enable

 

Router> enable

Enables privileged EXEC mode.

  • Enter your password if prompted.

Step 2

show platform hardware throughput level

 
Router# show platform hardware throughput level
 
The current throughput level is 50000 kb/s

Displays the current maximum hardware throughput level.

Verify the current settings.

Step 3

configure terminal

 

Router# configure terminal

Enters global configuration mode.

Step 4

Cisco IOS XE Release 3.10S and later:

platform hardware throughput level MB
{ 10 | 100 | 1000 | 10000 | 250 | 2500 | 50 | 500 | 5000 }

Cisco IOS XE Release 3.9S:

platform hardware throughput level
{ 10000 | 25000 | 50000 | eval-only }

 

Router(config)# platform hardware throughput level 500

Changes the maximum throughput level for the Cisco CSR 1000V. The available throughput options vary depending on the release version.

Note In Cisco IOS XE Release 3.9S, the throughput level values are expressed in Kbps. If you select eval-only, the system will check only the evaluation license.

Step 5

exit

 

Router(config)# exit

Exits configuration mode.

Step 6

show platform hardware throughput level

 
Router# show platform hardware throughput level
The current throughput level is 50000 kb/s

Displays the current maximum hardware throughput level.

Verify that the maximum throughput level has been updated.

Configuring the 10 Gbps Interface

If you install a license with 10 Gbps maximum throughput, then additional configuration is required to enable an interface to reach the 10 Gbps throughput.

SUMMARY STEPS

1. enable

2. configure terminal

3. interface GigabitEthernet number

4. no negotiation auto

5. speed 10000

DETAILED STEPS

Command or Action
Purpose

Step 1

enable

 

Router> enable

Enables privileged EXEC mode.

  • Enter your password if prompted.

Step 2

configure terminal

 

Router# configure terminal

Enters global configuration mode.

Step 3

interface GigabitEthernet number

 

Router(config)# interface GigabitEthernet1

Enters interface configuration mode.

Step 4

no negotiation auto

 

Router(config-if)# no negotiation auto

Disables the autonegotation protocol setting on the interface.

Step 5

speed 10000

 
Router(config-if)# speed 10000

Configures the interface speed to 10 Gbps.

License-Based Restriction on Aggregate Bandwidth

The Cisco CSR 1000V includes a license-based performance limiter that may restrict the aggregate bandwidth of the router’s interfaces. For example, if a 50 Mbps license is installed, then a maximum of 25 Mbps of bidirectional traffic is possible.

The performance limiter regulates the performance on all non-management interfaces for both priority traffic and non-priority traffic. Throughput limits are checked globally, not on a per-interface basis. The performance limiter does not distinguish between different types of traffic, such as for IPSec or NAT. If the throughput level is exceeded, then packets may get discarded.

The performance limiter does not affect traffic through the GigabitEthernet 0 management interface.

Figure 10-1 shows how the performance limiter, also known as a traffic shaper, works. In this example, the four interfaces on the Cisco CSR 1000V are passing an aggregated traffic level of 60 Mbps. Because this exceeds the 50 Mbps license-enforced maximum throughput, 10 Mbps of traffic is discarded.

Figure 10-1 Cisco CSR 1000V Performance-Based Limiter Example

 

To check the license-based performance limiter value, use the following command for your interface:

Router# show platform hardware qfp active feature qos queue out int GigabitEthernet1 hier det | inc max:
 
orig_max : 0 , max: 33333 child policy-map
orig_max : 0 , max: 500000 parent policy-map
orig_max : 0 , max: 1050000000 interface rate limiter
orig_max : 0 , max: 2500000 license performance limiter
orig_max : 0 , max: 10000000000 entry for ROOT/SIP infra (ignore rate)

 

The value for the license performance limiter field should match the current maximum throughput level as shown with the show platform hardware throughput level command.


NoteThe license-based limiter includes an extra scheduler node in the default HQF hierarchy. The Cisco CSR 1000V does not provide an option to detect congestion for a particular node in the HQF hierarchy.


For more information about verifying the VM performance indicators, see your hypervisor documentation.

To verify the actual throughput, use the following command:

Router# show platform hardware qfp active datapath utilization summary
 
CPP 0: 5 secs 1 min 5 min 60 min
Input: Total (pps) 59232 59234 59237 59234
(bps) 58757104 58757824 58760840 58757880
Output: Total (pps) 48839 48835 48833 48833
(bps) 50011264 50012072 50009312 498768736
Processing: Load (pct) 33 34 34 34
 

In the example, the input rate shown in bold is close to 60 Mbps. The output rate shown in bold is close to 50 Mbps. In this case, the input rate exceeds 50 Mbps, the maximum license rate allowed.

The following command displays the number of packages dropped when the maximum throughput is exceeded:

Router# show platform hardware qfp active statistics drop clear | exc _0_
 
-------------------------------------------------------------------------
Global Drop Stats Packets Octets
-------------------------------------------------------------------------
TailDrop 2018258 256333010
 

When the actual throughput level approaches the maximum allowed by the installed license, you will receive an alert message similar to the following (the message may differ depending on the release version):

Dec 13 22:00:29.699: %BW_LICENSE-3-THROUGHPUT_THRESHOLD_LEVEL: F0: cpp_ha: Average throughput rate exceeded 95 percent of licensed bandwidth 3 times, sample period 300 seconds, in last 24 hours
 

When the throughput exceeds the maximum allowed bandwidth set by the license, you will receive an alert message similar to the following (Cisco IOS XE 3.12S and later):

*Dec 13 22:00:29.699: %BW_LICENSE-4-THROUGHPUT_MAX_LEVEL: F0: cpp_ha: Average throughput rate exceeded the total licensed bandwidth 50000000 bps and dropped 7 times, sample period 300 seconds, in last 24 hours
 

You can configure the QoS policies at the interface level to guarantee that high-priority traffic is not dropped. For more information, see the Quality of Service Solutions Configuration Guide Library, Cisco IOS XE Release 3S.

Managing Throughput Notifications

Beginning with Cisco IOS XE 3.13S, you can configure the Cisco CSR 1000V to notify you when a certain percentage of the maximum throughput level is reached. The maximum allowable throughput is based on the installed throughput license.

By default, when the Cisco CSR 1000V first boots, the throughput level notification is enabled, and notifications are sent when the router reaches 95 percent of the maximum throughput level. The throughput level is measured every 300 seconds. When the router is rebooted, the threshold and interval level settings configured using the set platform hardware throughput-monitor command are retained.

SUMMARY STEPS

1. set platform hardware throughput-monitor throughput percentage interval seconds

DETAILED STEPS

Command or Action
Purpose

Step 1

set platform hardware throughput-monitor throughput percentage interval seconds

 

Router# set platform hardware throughput-monitor throughput 85 interval 30

Configures the hardware throughput monitor settings. The throughput percentage value represents the percentage of the maximum throughput at which the system notifies you. The valid range is from 75 to 95, and the default value is 95 percent.

The interval value represents how often the system measures the throughput level. The valid range is from 30 to 86400 seconds. The default value is 300 seconds.

To display the platform hardware throughput monitor settings, use the show platform hardware throughput-monitor parameters command, as shown in the following example:

Router# show platform hardware throughput-monitor parameters
Throughput monitor parameters
 
Throughput monitor threshold: 95 percent
Throughput monitor interval: 300 seconds
Throughput monitor status: enabled
 

The following example shows a console log message received when the average throughput has exceeded 95 percent of the maximum throughput with a sample period of 300 seconds:

Dec 13 22:00:29.699: %BW_LICENSE-3-THROUGHPUT_THRESHOLD_LEVEL: F0: cpp_ha: Average throughput rate exceeded 95 percent of licensed bandwidth 3 times, sample period 300 seconds, in last 24 hours
 

The following example shows a console log message received when the average throughput approaches maximum allowed throughput set by the installed license:

Dec 13 22:00:29.699: %BW_LICENSE-4-THROUGHPUT_MAX_LEVEL: F0: cpp_ha: Average throughput rate exceeded the total licensed bandwidth 50000000 bps and dropped packets 7 times, sample period 300 seconds, in last 24 Hours
 

To disable the platform hardware throughput monitor, perform the following step:

SUMMARY STEPS

1. set platform hardware throughput-monitor disable

DETAILED STEPS

Command or Action
Purpose

Step 1

set platform hardware throughput-monitor-disable

 

Router# set platform hardware throughput-monitor disable

Disables the platform hardware throughput-monitor.

Managing Memory Upgrade Licenses (Cisco IOS XE Release 3.11S and Later)

Beginning with Cisco IOS XE Release 3.11S, memory upgrade licenses can be used to add available memory to the Cisco CSR 1000V. The additional memory is allocated to IOSD, an internal processing component on the router, to increase scalability. The memory upgrade license does not add memory for the VM itself. The actual memory added to IOSD depends on the available system memory.

The memory upgrade license is available only through a Cisco service representative, and can be used only if you have selected licenses already installed.

You can upgrade the memory by installing the memory upgrade license using the standard license installation procedure. You must reboot the Cisco CSR 1000V to increase the maximum memory supported.

Requesting a New Virtual UDI

The Cisco CSR 1000V license is node-locked to the vUDI. If you clone the Cisco CSR 1000V to a new VM instance, the vUDI is in most cases automatically updated when the router first boots up on the cloned machine. However, if the vUDI is not automatically updated, you must manually request a new vUDI on the cloned VM instance.


Caution Requesting a new vUDI will invalidate the existing license. If you later need to rehost the license due to a system failure, you may need to perform additional steps on the Cisco Software Licensing portal. For more information on rehosting the Cisco CSR 1000V license, see Appendix A, “Rehosting the Cisco CSR 1000V License.”.

Perform the following step in EXEC mode:

SUMMARY STEPS

1. request license new-udi

DETAILED STEPS

Command or Action
Purpose

Step 1

request license new-udi

 

Router# request license new-udi

Requests that a new virtual UDI be assigned to the Cisco CSR 1000V VM instance.

Once you enter the request license new-udi command, you will be prompted to confirm, and then you will receive a series of system messages confirming the request:

Executing this command will invalidate the existing license,
proceed with generating new-udi?[confirm]
 
New udi CSR1000V:9MF19951DMU
Router#
*Aug 21 11:24:27.275: found an eval license info: csr1kv_medium
*Aug 21 11:24:27.276: Step 3. deletion of NOT-in-use licenses
*Aug 21 11:24:27.276: Step 4. deletion of in-use licenses
*Aug 21 11:24:27.440: %LICENSE-2-UDI_CHANGED: UDI of this instance changed from OLD: CSR1000V:9YA3086B993 to New: CSR1000V:9MF19951DMU

 

To display the UDI history of the Cisco CSR 1000V feature license, including previous virtual UDIs, enter the show license udi history command. The following example displays the UDI history of the feature license:

Router# show license udi history
 
SlotID PID SN UDI
--------------------------------------------------------------------------------
* CSR1000V 9MF19951DMU CSR1000V:9MF19951DMU
 
Invalidated UDIs:
------------------------------------------------------------
1. CSR1000V : 9YA3086B993