Cisco SD-Access Ordering Guide
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Steps for ordering Cisco SD-Access
This section provides a simplified process for ordering the Cisco SD-Access solution:
1. Choose the required Cisco SD-Access platforms.
2. Choose the required software licenses to enable Cisco SD-Access functionality in the device and ISE, available either a-la-carte or with the purchase of Cisco DNA Premier.
3. Choose the required appliances – Cisco DNA Center (if applicable) and Cisco ISE.
Note: Cisco Prime® Infrastructure is not required for Cisco SD-Access.
4. Choose Cisco SD-Access professional services (optional but recommended).
This solution supports both current and next-generation network devices, including routers, switches, wireless controllers, and access points.
Table 1 summarizes the platforms supported
Table 1. Cisco SD-Access platform support summary
| Fabric edge |
Cisco Catalyst 9200 Series Switches Cisco Catalyst 9300 Series Switches Cisco Catalyst 9400 Series Switches (SUP-1, SUP-1XL, SUP-1XL-Y) Cisco Catalyst 9500 Series Switches Cisco Catalyst 3850 Series and 3650 Series Switches Cisco Catalyst 4500E Series Switches (Sup8E, Sup9E) |
| Fabric border |
Cisco Nexus® 7700 Switch (Sup 2E, Sup 3E, M3 line cards only) – Default/External Border Only |
| Fabric border and control plane |
Cisco Catalyst 9300 Series Switches Cisco Catalyst 9500 Series Switches Cisco Catalyst 9400 Series Switches (SUP-1, SUP-1XL, SUP-1XL-Y) Cisco Catalyst 9600 Series Switches (SUP-1) Cisco Catalyst 3850 Series Cisco Catalyst 6807-XL Switch (Sup6T, Sup2T) Cisco Catalyst 6500 Series Switches Cisco Catalyst 6880-X Switch Cisco Catalyst 6840-X Switch Cisco 4400 and 4300 Series Integrated Services Routers Cisco ASR 1000 Series Aggregation Services Routers |
| Fabric-in-a-box |
Cisco Catalyst 9300 Series Switches Cisco Catalyst 9400 Series Switches (SUP-1XL, SUP-1XL-Y) Cisco Catalyst 9500 Series Switches |
| Cisco SD-Access Extended Node |
Cisco Catalyst 3560-CX Series Cisco Catalyst Digital Building Series Switches Cisco Industrial Ethernet 3300, 4000, 4010, 5000 Series |
| Policy Extended Node |
Cisco Industrial Ethernet 3400, 3400H Series |
| Cisco SD-Access Wireless |
Cisco Catalyst 9800-40, 9800-80 and 9800-CL Series Wireless Controllers Cisco 3504, 5520 and 8540 Series Wireless Controllers Cisco Catalyst 9800-L Wireless Controller WiFi 6 Access Points: Cisco Catalyst 9105 AX, Cisco Catalyst 9115 AX, Cisco Catalyst 9117 AX, Cisco Catalyst 9120 AX, Cisco Catalyst 9130 AX 802.11 Wave 2 access points: Cisco Aironet® 1800, 2800, 3800, 4800, 1540 and 1560 Series, Cisco Catalyst IW6300 Heavy Duty Series Access Points
|
| Cisco SD-Access Embedded Wireless |
Cisco Catalyst 9300 Series Switches (Embedded Wireless with Cisco Catalyst 9800 software package upgrade) Cisco Catalyst 9400 Series Switches (Embedded Wireless with Cisco Catalyst 9800 software package upgrade) Cisco Catalyst 9500 Series Switches (Embedded Wireless with Cisco Catalyst 9800 software package upgrade) |
Table 2. SD-Access wired platform part numbers
| Product family |
Device role |
Part number |
Description |
| Cisco Catalyst 9200 Series |
Fabric edge node |
C9200-24T C9200-24P C9200-48T C9200-48P C9200L-24T-4G C9200L-24P-4G C9200L-48T-4G C9200L-48P-4G C9200L-24T-4X C9200L-24P-4X C9200L-48T-4X C9200L-48P-4X |
24-port data switch 24-port data switch with full PoE+ 48-port data switch 48-port data switch full PoE+ 24-port data switch 24-port data switch with full PoE+ 48-port data switch 48-port data switch full PoE+ 24-port data switch 24-port data switch with full PoE+ 48-port data switch 48-port data switch with full PoE+ |
| Cisco Catalyst 9300 Series |
Fabric edge, border, control plane nodes, Fabric-in-a-box |
C9300-24T C9300-48T C9300-24P C9300-48P C9300-24U C9300-48U C9300-24UX C9300-48UXM C9300L-48UXG C9300L-24UXG C9300L-24P C9300L-48P C9300L-48T C9300L-24T |
24-port data switch 48-port data switch 24-port PoE+ switch 48-port PoE+ switch 24-port Cisco UPOE switch 48-port Cisco UPOE switch 24-port Multigigabit Cisco UPOE switch 48-port Multigigabit Cisco UPOE switch 48-port Multigigabit Cisco UPOE switch 24-port Multigigabit Cisco UPOE switch 24-port PoE+ switch 48-port PoE+ switch 48-port data switch 24-port data switch Catalyst 9300L series switches have fixed uplinks |
| Cisco Catalyst 9400 Series |
Fabric edge, border, control plane nodes, Fabric-in-a-box |
C9404R/C9407R/C9410R with Supervisors C9400-SUP-1 C9400-SUP-1XL C9400-SUP-1XL-Y Line Cards: C9400-LC-48U C9400-LC-48UX C9400-LC-48T C9400-LC-24XS C9400-LC-48P C9400-LC-24S C9400-LC-48S |
C9400 Supervisor engines Supervisor 1 Module Supervisor 1XL Module Supervisor 1XL Module with 25G uplinks 48-port UPOE Gigabit Ethernet Switching Module 48-port UPOE MultiGigabit Ethernet Module 48-port Gigabit Ethernet Module 24-port TenGigabit Ethernet Module with SFP/SFP+ 48-port Gigabit Ethernet PoE/PoE+ Module 24-port Gigabit Ethernet SFP Module 48-port Gigabit Ethernet SFP Module |
| Cisco Catalyst 9500 Series |
Fabric edge, border, control plane nodes, Fabric-in-a-box |
C9500-12Q C9500-24Q C9500-40X C9500-32C C9500-32QC C9500-48Y4C C9500-24Y4C C9500-16X |
12-port 40 Gigabit Ethernet with QSFP 24-port 40 Gigabit Ethernet with QSFP+ 40-port 10 Gigabit Ethernet with SFP+ 32-port 100 Gigabit Ethernet High-performance switch 32-port 40 Gigabit Ethernet High-performance switch 48-port 25 Gigabit Ethernet High-performance switch 24-port 25 Gigabit Ethernet High-performance switch 2 x 40 Gigabit Ethernet High-performance Network Module |
| Cisco Catalyst 9600 Series |
Fabric control plane and border node |
C9606R with Supervisors C9600-SUP-1 Line Cards: C9600-LC-48YL C9600-LC-24C |
Supervisor 1 Module 48 Port 25 G /10 G Line card 24-port 40 G / 12-port 100 G Line card |
| Cisco Catalyst 3850 Series |
Fabric edge, control plane and border node |
WS-C3850-12S WS-C3850-24S WS-C3850-24T WS-C3850-48T WS-C3850-24P WS-C3850-48P WS-C3850-48F WS-C3850-24U WS-C3850-48U WS-C3850-24XU WS-C3850-12X48U WS-C3850-12XS WS-C3850-24XS |
12-port SFP switch 24-port SFP switch 24-port data switch 48-port data switch 24-port PoE+ switch 48-port PoE+ switch 48-port PoE+ switch 24-port Cisco UPOE switch 48-port Cisco UPOE switch 24-port Cisco UPOE (100 Mbps/1/2.5/5/10 Gbps) switch 48-port Cisco UPOE (with 12x100 Mbps/1/2.5/5/10 Gbps ports) switch 12-port 1/10G SFP+ switch 24-port 1/10 Gbps SFP+ switch |
| Cisco Catalyst 3650 Series |
Fabric edge |
WS-C3650-24TS WS-C3650-48TS WS-C3650-24PS WS-C3650-48PS WS-C3650-48FS WS-C3650-24TD WS-C3650-48TD WS-C3650-24PD WS-C3650-24PDM WS-C3650-48PD WS-C3650-48FD WS-C3650-8X24PD WS-C3650-12X48FD WS-C3650-48TQ WS-C3650-48PQ WS-C3650-48FQ WS-C3650-48FQM WS-C3650-8X24UQ WS-C3650-12X48UQ WS-C3650-12X48UR WS-C3650-12X48UZ |
4 x Gigabit Ethernet with Small Form Factor Pluggable (SFP) 2 x 10 Gigabit Ethernet with SFP+ and 2 x 10 Gigabit Ethernet with SFP+ or 4 x Gigabit Ethernet with SFP 24 PoE+ (with 8 100-Mbps and 1-, 2.5-, 5-, and 10-Gbps ports) 48 PoE+ (with 12 100-Mbps and 1-, 2.5-, 5-, and 10-Gbps ports) 4 x 10 Gigabit Ethernet with SFP+ or 4 x Gigabit Ethernet with SFP 8 x 10 Gigabit Ethernet with SFP+ or 8 x Gigabit Ethernet with SFP 2 x 40 Gigabit Ethernet with QSFP+ |
| Cisco Catalyst 4500 Series |
Fabric edge |
WS X45-Sup9-E WS X45-Sup8-E |
Supervisor engine with 928 Gbps of wired access with an E-Series chassis Supervisor engine with 928 Gbps of wired access with an E-Series chassis |
Table 3. Cisco SD-Access fabric border and fabric control plane platform part numbers
| Product family |
Device role |
Part number |
Description |
| Cisco Catalyst 6807- XL and 6500-E |
Fabric border and control plane node |
VS-S2T-10G* VS-S2T-10G-XL* C6800-SUP6T C6800-SUP6T-XL C6800-8P10G C6800-8P10G-XL C6800-16P10G C6800-16P10G-XL C6800-32P10G C6800-32P10G-XL C6800-8P40G C6800-8P40G-XL |
6500 Series Supervisor Engine 2T 6500 Series Supervisor Engine 2T XL 6800 Series Supervisor Engine 6T 6800 Series Supervisor Engine 6T XL 6800 8-port 10 GE with integrated DFC4 6800 8-port 10 GE with integrated DFC4-XL 6800 16-port 10 GE with integrated DFC4 6800 16-port 10 GE with integrated DFC4-XL 6800 32-port 10 GE with dual integrated dual DFC4 6800 32-port 10 GE with dual integrated dual DFC4-XL 6800 8-port 40GE with dual integrated dual DFC4-E 6800 8-port 40GE with dual integrated dual DFC4-EXL |
| Cisco Catalyst 6880-X |
Fabric border and control plane node |
C6880-X C6880-X-16P10G C6880-X-LE C6880-X-LE-16P10G |
6880-X-chassis (XL tables) 6880-X multirate port card (XL tables) 6880-X-chassis (standard tables) 6880-X multirate port card (standard tables) |
| Cisco Catalyst 6840-X |
Fabric border and control plane node |
C6816-X-LE C6832-X-LE C6824-X-LE-40G C6840-X-LE-40G |
6816-X-chassis (standard tables) 6832-X-chassis (standard tables) 6824-X-chassis and 2 x 40G 6840-X-chassis and 2 x 40G |
| Product family |
Device role |
Part number |
Description |
| Cisco Nexus 7700 Series |
Fabric border node (default/external border only) |
N77-M324FQ-25L N77-M348XP-23L N77-M312CQ-26L |
Cisco Nexus 7700 M3 Series 24-port 40G Ethernet module Cisco Nexus 7700 M3-Series 48-port 1/10G Ethernet module Cisco Nexus 7700 M3-Series 12-port 100G Ethernet module |
| ASR 1000 Series |
Fabric border and control plane node |
ASR1001-X ASR1002-X ASR1006-X ASR1009-X |
Cisco ASR1001-X System, Crypto, 6 built-in GE, dual P/S Cisco ASR1001-HX System, 8x 10 GE + 8x 1 GE, 2x P/S, optional crypto Cisco ASR 1002-X System, crypto, 6 built-In GE, dual P/S Cisco ASR 1002-HX System, 4x 10 GE + 4x 1 GE built-in, dual P/S, optional crypto Cisco ASR 1006-X chassis, ASR1000-RP2/ASR1000-RP3/ ASR1000-ESP100/ESP-40 Cisco ASR 1009-X chassis, ASR1000-RP2/ASR1000-RP3/ ASR1000-ESP100/ASR1000-ESP200/ESP-40 |
| ISR 4400 and 4300 Series |
Fabric border and control plane node |
ISR4461 ISR4451 ISR4431 ISR4351 ISR4331 ISR4321 |
4461 ISR with 4 onboard GE, 3 NIM slots, 1 ISC slot, 3 SM slots, 8GB flash memory default, 4 GB DRAM default (data plane), 8 GB DRAM default (control plane) 4451 ISR with 4 onboard GE, 3 NIM slots, 1 ISC slot, 2 SM slots, 8 GB flash memory default, 2 GB DRAM default (data plane), 4 GB DRAM default (control plane)
4431 ISR with 4 onboard GE, 3 NIM slots, 1 ISC slot, 8 GB flash memory default, 2 GB DRAM default (data plane), 4 GB DRAM default (control plane) 4351 ISR with 3 onboard GE, 3 NIM slots, 1 ISC slot, 2 SM slots, 4 GB flash memory default, 4 GB DRAM default 4331 ISR with 3 onboard GE, 2 NIM slots, 1 ISC slot, 1 SM slot, 4 GB flash memory default, 4 GB DRAM default 4321 ISR with 2 onboard GE, 2 NIM slots, 1 ISC slot, 4 GB flash memory default, 4 GB DRAM default |
| CSR 1000v |
Fabric control plane node |
L-CSR-x-AX-xY= |
CSR 1000v e-PAK x-year subscription y Speed AX package |
Table 4. Cisco SD-Access wireless platform part numbers
| Product family |
Device role |
Part number |
Description |
| Catalyst Wireless Controllers |
SD-Access Wireless node |
C9800-40-K9 C9800-80-K9 C9800-CL-K9 |
Catalyst 9800-40 Wireless Controller Catalyst 9800-80 Wireless Controller Catalyst 9800-CL Wireless Controller for private cloud |
| Wireless LAN controllers |
SD-Access Wireless node |
AIR-CT5520-K9 AIR-CT8540-K9 AIR-CT3504-K9 |
5520 Wireless LAN controller 8540 Wireless LAN controller 3504 Wireless LAN controller |
| 802.11AX Access Points |
SD-Access Wireless node |
C9115AX C9117AX |
Cisco Catalyst 9115AX Access Points Cisco Catalyst 9115AX Access Points |
| Wave 2 access points |
SD-Access Wireless node |
AIR-AP4800X-x-K9 AIR-AP3802X-x-K9 AIR-AP2802X-x-K9 AIR-AP1832X-x-K9 AIR-AP1852X-x-K9 AIR-AP1815X-x-K9 AIR-AP1810X-x-K9 AIR-AP4800-x-K9 AIR-AP15621-x-K9 AIR-AP1562E-x-K9 AIR-AP1562D-x-K9 AIR-AP1542I-x-K9 AIR-AP1542D-x-K9 IW-6300H-DC-x-K9 IW-6300H-DCW-x-K9 IW-6300H-AC-x-K9 |
4800 Series access points 3800 Series access points 2800 Series access points 1830 Series access points 1850 Series access points 1815 Series Wave 2 access points 1810 Series Wave 2 access points 4800 Series access points Dual-band, controller-based 802.11a/b/g/n/ac 1560 Series access points Dual-band 802.11a/g/n/ac, Wave 2, internal semi-omni antennas 1560 Series access points Dual-band 802.11a/g/n/ac, Wave 2, external antennas 1560 Series access points Dual-band 802.11a/g/n/ac, Wave 2, internal directional antennas 1540 Series access points Dual-band 802.11a/g/n/ac, Wave 2, internal omni antennas 1540 Series access points Dual-band 802.11a/g/n/ac, Wave 2, internal directional antennas IW6300 Heavy Duty series with dual band 802.11a/g/n/ac, external antenna, PoE and UPOE. |
Table 5. Cisco SD-Access Extended platform part numbers
| Product family |
Device role |
Part number |
Description |
| Cisco Catalyst 3560-CX Series |
Cisco SD-Access Extended node |
C3560CX-8TC-S C3560CX-12TC-S C3560CX-8PC-S C3560CX-12PC-S C3560CX-12PD-S C3560CX-8PT-S C3560CX-8XPD-S |
8 x 1GE, 2 x 1G copper plus 2 x 1G SFP uplinks 12 x 1GE, 2 x 1G copper plus 2 x 1G SFP uplinks 8 x 1GE, 2 x 1G copper plus 2 x 1G SFP uplinks, 8 PoE+, 240W 12 x 1GE, 2 x 1G copper plus 2 x 1G SFP uplinks, 12 PoE+, 240W 12 x 1GE, 2 x 1G copper plus 2 x 10G SFP+ uplinks, 12 PoE+, 240W 8 x 1GE, 2 x 1G copper (UPOE) uplinks, 8 PoE+, 146W 6 x 1 GE plus 2 Multi-GE, 2 x 10G SFP+ uplinks, 8 PoE+, 240W |
| Cisco Catalyst Digital Building Series |
Cisco SD-Access Extended node |
CDB-8P CDB-8U |
8 x 1 FE, 2 x 1G copper uplinks, 8 PoE+, 240W 8 x 1 FE, 2 x 1G copper uplinks, 8 Cisco UPOE, 480W |
| Cisco Catalyst Industrial Ethernet 3300 Series |
Cisco SD-Access Extended node |
IE3300-8T2S-E IE3300-8T2S-A IE3300-8P2S-E IE3300-8P2S-A |
IE 3300 Rugged Series switches are available with 10 full Gigabit Ethernet interfaces |
| Cisco Catalyst Industrial Ethernet 3400 Series |
Cisco SD-Access Policy Extended node |
IE3400-8TD2S-E IE3400-8TD2S-A IE3400-8PD2S-E IE3400-8PD2S-E |
IE 3400 Rugged Series switches are available with 10 high-speed Gigabit Ethernet connectivity in a compact form factor. |
| Cisco Industrial Ethernet 3400 Heavy Duty Series |
Cisco SD-Access Policy Extended node |
IE-3400H-8FT-E IE-3400H-16FT-E IE-3400H-24T-E IE-3400H-8T-E IE-3400H-16T-E IE-3400H-24T-E |
IE3400H Series available with 8, 16, or 24 Fast ethernet (D-coded and X-coded) M12 interfaces |
| Cisco Industrial Ethernet 4000 Series |
Cisco SD-Access Extended node |
IE-4000-8GS4G-E IE-4000-8GT4G-E IE-4000-16GT4G-E IE-4000-4GS8GP4G-E IE-4000-8GT8GP4G-E IE-4000-4GC4GP4G-E IE-4000-4T4P4G-E IE-4000-8S4G-E IE-4000-8T4G-E IE-4000-4TC4G-E IE-4000-16T4G-E IE-4000-4S8P4G-E |
4 x 1G combo with 8 x 1G SFP 4 x 1G combo with 8 x 1G copper 4 x 1G combo with 16 x 1G copper 4 x 1G combo with 4 x 1G SFP, 8 x 1G PoE 4 x 1G combo with 8 x 1G copper, 8 x 1G PoE 4 x 1G combo with 4 x 1G combo, 4 x 1G PoE 4 x 1G combo with 4 x 1 FE copper, 4 x 1 FE PoE 4 x 1G combo with 8 x 1 FE SFP 4 x 1G combo with 8 x 1 FE copper 4 x 1G combo with 4 x 1 FE combo 4 x 1G combo with 16 x 1 FE copper 4 x 1G combo with 4 x 1 FE SFP, 8 x 1 FE PoE |
| Cisco Industrial Ethernet 4010 Series |
Cisco SD-Access Extended node |
IE-4010-4S24P IE-4010-16S12P |
4 x 1G SFP with 24 x 1 G PoE, 16 x 1G SFP with 12 x 1 G PoE |
| Cisco Industrial Ethernet 5000 Series |
Cisco SD-Access Extended node |
IE-5000-12S12P-10G IE-5000-16S12P |
4 x 10G SFP with 12 x 1 G SFP, 12 x 1 G PoE 16 x 1G SFP with 12 x 1 G PoE |
Cisco SD-Access software licenses
Table 6 and Table 7 summarizes the platform licenses required to be able to deploy Cisco SD-Access in your network.
Table 6. Cisco SD-Access platform license combinations for Cisco Catalyst Switches
| Network stack license (Base) |
Lan-Lite |
IP Base |
IP Services |
Enterprise Services |
Ad. IP Services |
Ad. IP Enterprise Services |
Network Advantage |
Network Essentials |
| Add-on license |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
| Cisco Catalyst 3650, 3850 |
|
|
|
|
|
|
|
|
| Cisco Catalyst 9200 |
|
|
|
|
|
|
|
|
| Cisco Catalyst 9300 |
|
|
|
|
|
|
|
|
| Cisco Catalyst 9400 |
|
|
|
|
|
|
|
|
| Cisco Catalyst 9500 |
|
|
|
|
|
|
|
|
| Cisco Catalyst 9600 |
|
|
|
|
|
|
|
|
| Cisco Catalyst 4500E (Sup8E, Sup9E) |
|
|
|
|
|
|
|
|
| Sup 2T (6500-E, 6807-XL) |
|
|
|
|
|
|
|
|
| Sup 6T (6500-E, 6807-XL), 6840-X, 6800-X |
|
|
|
|
|
|
|
|
| CDB |
|
|
|
|
|
|
|
|
| Cisco Catalyst 3560-CX |
|
|
|
|
|
|
|
|
| IE 3200 Series |
|
|
|
|
|
|
|
|
| IE 3300 Series |
|
|
|
|
|
|
|
|
| IE 3400 Series, IE 3400H Series |
|
|
|
|
|
|
|
|
Table 7. Summarizes the platform licenses required to be able to deploy Cisco SD-Access in your network.
Table 7. Cisco SD-Access platform license combinations
| Network stack license (Base) |
LAN Enterprise |
AX/AppX |
Ad. IP Services |
Adv. Enterprise Services |
| Add-on license |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
Cisco DNA Premier/ Cisco DNA Advantage |
| Cisco Nexus 7700 Series- M3 |
|
|
|
|
| Cisco ASR-1000-X, ASR-1000-HX |
|
|
|
|
| Cisco 4300, 4430, 4450, 4661 Series ISR |
|
|
|
|
| Cisco CSR 1000v |
|
|
|
|
| Cisco Catalyst 9800-80, 9800-40, 9800-CL, 9800-L, 9800 Embedded Wireless |
|
|
|
|
| AIR-CT5520, AIR-CT8540, AIR-CT3504 |
|
|
|
|
| Wave2 APs (1800, 2800, 3800, 4800, 1560, 1540, Cisco Catalyst IW6300) |
|
|
|
|
| WiFi 6 APs (9115 AX, 9117 AX, 9120 AX, 9130 AX) |
|
|
|
|
Notes:
● Cisco DNA subscriptions require a minimum level of Base license on the device. The Base licenses are perpetual in nature.
● Cisco DNA subscriptions are term based and are available in 3-, 5-, and, in some cases, 7-year terms.
● On the Cisco Catalyst 3000 Series Switches, only three virtual networks are available if IP Base and Cisco DNA Advantage are enabled on the switch. With IP Services, the restriction of three virtual networks is removed and all VRFs supported on the platform are available for Cisco SD-Access.
● Cisco DNA subscriptions can be purchased as a configuration option under most compatible hardware platforms (listed above), or can be purchased separately using A La Carte (ALC) SKUs.
● Cisco DNA Premier is term based and available in 3-, 5-, and, in some cases, 7-year terms.
● Cisco DNA Premier bundle includes Cisco DNA Advantage, ISE Base, ISE Plus, and Stealthwatch licenses. This bundle includes between 25 and 100 ISE Base and ISE Plus sessions and 25 flows for a fixed switch, depending on the switch.
◦ Note that an add-on consisting of 25 ISE Base and ISE Plus sessions and an additional 25 flows is selected by default for 48-port switches at an additional cost. Customers can select up to three add-ons, for up to 100 ISE Base and ISE Plus endpoints and 100 flows per modular switch. This add-on is optional and can be removed if not required.
● Cisco DNA Advantage for Wireless includes term-based AP license and Cisco Prime Infrastructure license.
● Cisco DNA Premier for Wireless includes term-based Cisco DNA Advantage, AP license, Cisco Prime Infrastructure license, CMX Base, and 15 endpoint licenses for ISE Base and ISE Plus per access point.
● Cisco SD-Access Wireless requires Cisco DNA Advantage or Cisco DNA Premier license per Access Point.
● Cisco SD-Access Embedded Wireless requires Cisco DNA Advantage or Cisco DNA Premier license per Access Point.
● Cisco SD-Access requires ISE Base and ISE Plus licenses.
The following sections list the detailed SKUs required to deploy Cisco SD-Access.
In most cases, Cisco DNA subscriptions can be added as an option when configuring Cisco SD-Access-capable hardware in Cisco Commerce Workspace (CCW). When ordered separately (for brownfield purposes), the following part numbers will serve as a guide for ordering and configuring Cisco DNA licenses.
For Cisco DNA Premier Software, the part number is the orderable part number, which should be entered into the ordering tool first. After the orderable part number is entered, the software part numbers are visible in the Subscription Software Option Class. The subscription term will typically default to 60 months, but can be modified in two ways. The Subscription Duration Preference area of the ordering tool can be modified for the desired subscription term, or the Advantage part number hyperlink can be customized to a 3, 5, or, in some cases, 7- year term.
Cisco Catalyst 9200L Series licenses
Table 8. A la carte part numbers for ordering Cisco DNA Advantage for the Cisco Catalyst 9200L Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C9200L-DNA-A-24 (Greenfield) C9200L-DNA-A-24= (Brownfield) C9200L-DNA-A-24-3Y C9200L-DNA-A-24-5Y C9200L-DNA-A-24-7Y |
C9200L Cisco DNA Advantage, 24-port term licenses C9200L Cisco DNA Advantage, 24-port, 3-year term license C9200L Cisco DNA Advantage, 24-port, 5-year term license C9200L Cisco DNA Advantage, 24-port, 7-year term license |
| C9200L-DNA-A-48 (Greenfield) C9200L-DNA-A-48= (Brownfield) C9200L-DNA-A-48-3Y C9200L-DNA-A-48-5Y C9200L-DNA-A-48-7Y |
C9200 Cisco DNA Advantage, 48-port term licenses C9200L Cisco DNA Advantage, 48-port, 3-year term license C9200L Cisco DNA Advantage, 48-port, 5-year term license C9200L Cisco DNA Advantage, 48-port, 7-year term license |
Cisco Catalyst 9200 Series licenses
Table 9. A la carte part numbers and Cisco DNA Premier Software part numbers for ordering Cisco DNA Advantage for the Cisco Catalyst 9200 Series
| License type |
Product ID |
Description |
||||
| A la carte part numbers |
C9200-DNA-A-24 (Greenfield)/ C9200-DNA-A-24= (Brownfield) C9200-DNA-A-24-3Y C9200-DNA-A-24-5Y C9200-DNA-A-24-7Y |
C9200 Cisco DNA Advantage, 24-port term licenses C9200 Cisco DNA Advantage, 24-port, 3-year term license C9200 Cisco DNA Advantage, 24-port, 5-year term license C9200 Cisco DNA Advantage, 24-port, 7-year term license |
||||
| C9200-DNA-A-48 (Greenfield)/ C9200-DNA-A-48= (Brownfield) C9200-DNA-A-48-3Y C9200-DNA-A-48-5Y C9200-DNA-A-48-7Y |
C9200 Cisco DNA Advantage, 48-port term licenses C9200 Cisco DNA Advantage, 48-port, 3-year term license C9200 Cisco DNA Advantage, 48-port, 5-ywear term license C9200 Cisco DNA Advantage, 48-port, 7-year term license |
|||||
| Cisco DNA Premier |
|
C9200 Cisco DNA Premier, 24-port term licenses C9200 Cisco DNA Premier, 24-port, 3-Year term license C9200 Cisco DNA Premier, 24-port, 5-year term license C9200 Cisco DNA Premier, 24-port, 7-year term license C9200 Cisco DNA Premier, 48-port term licenses C9200 Cisco DNA Premier, 48-port, 3-year term license C9200 Cisco DNA Premier, 48-port, 5-year term license C9200 Cisco DNA Premier, 48-port, 7-year term license |
||||
Cisco Catalyst 9300 Series licenses
Tables 10 and 11 list the part numbers for ordering of Cisco DNA Advantage for the Cisco Catalyst 9300 Series.
Table 10. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 9300 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C9300-DNA-A-24 (Greenfield)/ C9300-DNA-A-24= (Brownfield) C9300-DNA-A-24-3Y C9300-DNA-A-24-5Y C9300-DNA-A-24-7Y |
C9300 Cisco DNA Advantage, 24-port term licenses C9300 Cisco DNA Advantage, 24-port, 3-year term license C9300 Cisco DNA Advantage, 24-port, 5-year term license C9300 Cisco DNA Advantage, 24-port, 7-year term license |
| C9300-DNA-A-48 (Greenfield)/ C9300-DNA-A-48= (Brownfield) C9300-DNA-A-48-3Y C9300-DNA-A-48-5Y C9300-DNA-A-48-7Y |
C9300 Cisco DNA Advantage, 48-port term licenses C9300 Cisco DNA Advantage, 48-port, 3-year term license C9300 Cisco DNA Advantage, 48-port, 5-year term license C9300 Cisco DNA Advantage, 48-port, 7-year term license |
Table 11. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 9300 Series
| License type |
Product ID |
Description |
| Cisco DNA Premier |
C1-CAT-ADD-T (Brownfield) C1A1TCAT93001 (Greenfield/Brownfield) C1A1TCAT93002 (Greenfield/Brownfield) C1A1ATACT93001 (Greenfield/Brownfield) C1A1ATACT93002 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier term, C9300 24-port Cisco DNA Premier term, C9300 48-port Cisco DNA Premier Upgrade term, C9300 24-port Cisco DNA Premier Upgrade term, C9300 48-port |
The base license for Cisco DNA Advantage or Cisco DNA Premier is Network Advantage. For initial purchase, choose only hardware PIDs with the “-A” suffix. For “-E” suffix, use an upgrade SKU to upgrade to “-A” suffix.
Cisco Catalyst 9300L Series licenses
Table 10a. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 9300 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C9300L-DNA-A-24 (Greenfield)/ C9300L-DNA-A-24= (Brownfield) C9300L-DNA-A-24-3Y C9300L-DNA-A-24-5Y C9300L-DNA-A-24-7Y |
C9300L Cisco DNA Advantage, 24-port term licenses C9300L Cisco DNA Advantage, 24-port, 3 Year Term license C9300L Cisco DNA Advantage, 24-port, 5 Year Term licens C9300L Cisco DNA Advantage, 24-port, 7 Year Term license |
| C9300L-DNA-A-48 (Greenfield)/ C9300L-DNA-A-48= (Brownfield) C9300L-DNA-A-48-3Y C9300L-DNA-A-48-5Y C9300L-DNA-A-48-7Y |
C9300L Cisco DNA Advantage, 48-port term licenses C9300L Cisco DNA Advantage, 48-port, 3-year term license C9300L Cisco DNA Advantage, 48-port, 5-year term license C9300L Cisco DNA Advantage, 48-port, 7-year term license |
Cisco Catalyst 9400 Series licenses
Tables 12 and 13 list the part numbers for ordering of Cisco DNA Advantage for the Cisco Catalyst 9400 Series.
Table 12. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 9400 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C9400-DNA-A (Greenfield)/ C9400-DNA-A = (Brownfield) C9400-DNA-A-3Y C9400-DNA-A-5Y C9400-DNA-A-7Y |
Top-level SKU C9400 Cisco DNA Advantage, 3-year term license C9400 Cisco DNA Advantage, 5-year term license C9400 Cisco DNA Advantage, 7-year term license |
Table 13. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 9400 Series
| License type |
Product ID |
Description |
| Cisco DNA Premier |
C1-CAT-ADD-T (Brownfield) C1A1TCAT94001 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier term, C9400 |
The base license for Cisco DNA Advantage or Cisco DNA Premier Advantage is Network Advantage. For initial purchase, choose only hardware PIDs with the “-A” suffix. For “-E” suffix, use an upgrade SKU to upgrade to “-A” suffix.
Cisco Catalyst 9500 Series licenses
Table 14 lists the part numbers for a la carte ordering of Cisco DNA Advantage for the Cisco Catalyst 9500 Series.
Table 15 lists the part numbers for ordering through Cisco DNA Premier.
Table 14. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 9500 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C9500-DNA-L-A (Greenfield) C9500-DNA-L-A-3Y C9500-DNA-L-A-5Y C9500-DNA-L-A-7Y |
C9500 Cisco DNA Advantage, low density term licenses C9500 Cisco DNA Advantage, low density, 3-year term license C9500 Cisco DNA Advantage, low density, 5-year term license C9500 Cisco DNA Advantage, low density, 7-year term license |
| C9500-DNA-L-A (Greenfield) C9500-DNA-L-A-3Y C9500-DNA-L-A-5Y C9500-DNA-L-A-7Y |
C9500 Cisco DNA Advantage, high density term licenses C9500 Cisco DNA Advantage, high density, 3-year term license C9500 Cisco DNA Advantage, high density, 5-year term license C9500 Cisco DNA Advantage, high density, 7-year term license |
Table 15. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 9500 Series
| License type |
Product ID |
Description |
| Cisco DNA Premier |
C1-CAT-ADD-T (Brownfield) C1A1TCAT95001 (Greenfield/Brownfield) C1A1ATCAT95001 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier Advantage term, C9500 Cisco DNA Premier Advantage Upgrade term, C9500 |
The base license for Cisco DNA Advantage or Cisco DNA Premier Advantage is Network Advantage. For initial purchase, choose only hardware PIDs with the “-A” suffix. For “-E” suffix, use an upgrade SKU to upgrade to “-A” suffix.
Cisco Catalyst 9600 Series licenses
Table 14a lists the part numbers for a la carte ordering of Cisco DNA Advantage for the Cisco Catalyst 9600 Series.
Table 14a. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 9600 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C9600-DNA-A (Greenfield) C9600-DNA-A-3Y C9600-DNA-A-5Y C9600-DNA-A-7Y |
Top-level SKU C9600 Cisco DNA Advantage, 3-year term license C9600 Cisco DNA Advantage, 5-year term license C9600 Cisco DNA Advantage, 7-year term license |
| Cisco DNA Premier |
C9600-DNA-P-3Y C9600-DNA-P-5Y C9600-DNA-P-7Y |
Cisco DNA Premier Advantage, 3-year term license Cisco DNA Premier Advantage, 5-year term license Cisco DNA Premier Advantage, 7-year term license |
Cisco Catalyst 3850 Series licenses
Tables 16, 17, 18, and 19 list the product IDs for ordering Cisco DNA Advantage or Cisco DNA Premier licenses for the Cisco Catalyst 3850 Series.
Table 16. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 3850 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C3850-DNA-A-24 (Greenfield)/ C3850-DNA-A-24= (Brownfield) C3850-DNA-A-24-3Y C3850-DNA-A-24-5Y |
C3850 Cisco DNA Advantage, 24-port term licenses C3850 Cisco DNA Advantage, 24-port, 3-year term license C3850 Cisco DNA Advantage, 24-port, 5-year term license |
| C3850-DNA-A-48 (Greenfield)/ C3850-DNA-A-48= (Brownfield) C3850-DNA-A-48-3Y C3850-DNA-A-48-5Y |
C3850 Cisco DNA Advantage, 48-port term licenses C3850 Cisco DNA Advantage, 48-port, 3-year term license C3850 Cisco DNA Advantage, 48-port, 5-year term license |
Table 17. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 3850 Series
| License type |
Product ID |
Description |
| Cisco DNA Premier |
C1-CAT-ADD-T (Brownfield) C1A1ATCAT38501 (Greenfield/Brownfield) C1A1ATCAT38502 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier term, C3850 24-port Cisco DNA Premier term, C3850 48-port |
Table 18. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 3850 Series (10G fiber)
| License type |
Product ID |
Description |
| A la carte part numbers |
C3850XS-DNA-L-A (Greenfield) C3850XS-DNA-L-A= (Brownfield) C3850XS-DNA-L-A-3Y C3850XS-DNA-L-A-5Y |
C3850 Cisco DNA Advantage, Low Port Term licenses C3850 Cisco DNA Advantage, Low Port, 3 Year Term license C3850 Cisco DNA Advantage, Low Port, 5 Year Term license |
| C3850XS-DNA-A (Greenfield) C3850XS-DNA-A= (Brownfield) C3850XS-DNA-A-3Y C3850XS-DNA-A-5Y |
C3850 Cisco DNA Advantage, High Port Term licenses C3850 Cisco DNA Advantage, High Port, 3 Year Term license C3850 Cisco DNA Advantage, High Port, 5 Year Term license |
Table 19. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 3850 Series (fiber)
| License type |
Product ID |
Description |
| Cisco DNA Premier |
C1-CAT-ADD-T (Brownfield) C1A1ATCAT38503 (Greenfield/Brownfield) C1A1ATCAT38504 (Greenfield/Brownfield) C1A1ATCAT38505 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier term, C3850 12-port fiber Cisco DNA Premier term, C3850 24-port fiber Cisco DNA Premier term, C3850 48-port fiber |
The required base license for Cisco DNA Advantage is IP Base or IP Services. Choose only hardware PIDs with the “-S” or “-E” suffix. Note that when the base license is IP Base, you are limited to only three virtual networks.
Cisco Catalyst 3650 Series licenses
Table 20 lists the product IDs for ordering Cisco DNA Advantage licenses for the Cisco Catalyst 3650 Series.
Table 20. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 3650 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C3650-DNA-A-24 (Greenfield) C3650-DNA-A-24= (Brownfield) C3650-DNA-A-24-3Y C3650-DNA-A-24-5Y |
C3650 Cisco DNA Advantage, 24-port term licenses C3650 Cisco DNA Advantage, 24-port, 3-year term license C3650 Cisco DNA Advantage, 24-port, 5-year term license |
| C3650-DNA-A-48 (Greenfield) C3650-DNA-A-48= (Brownfield) C3650-DNA-A-48-3Y C3650-DNA-A-48-5Y |
C3650 Cisco DNA Advantage, 48-port term licenses C3650 Cisco DNA Advantage, 48-port, 3-year term license C3650 Cisco DNA Advantage, 48-port, 5-year term license |
|
| Cisco DNA Premier |
C1-CAT-ADD-T (Brownfield) C1A1ATCAT36501 (Greenfield/Brownfield) C1A1ATCAT36502 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier Term C3650 24-Port Cisco DNA Premier Term C3650 48-Port |
The required base license for Cisco DNA Advantage is IP Base or IP Services. For initial purchase, choose only hardware PIDs with the “-A” suffix. For “-E” suffix, use an upgrade SKU to upgrade to “-A” suffix. Note that when the base license is IP Base, you are limited to only three virtual networks.
Cisco Catalyst 3560-CX and Cisco Catalyst Digital Building Series licenses
Table 21. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 3650 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C3560CX-DNA-A-8 (Greenfield) C3560CX-DNA-A-8= (Brownfield) C3560CX-DNA-A-8-3 C3560CX-DNA-A-8-5 |
C3560 Cisco DNA Advantage, 8-port term licenses C3560 Cisco DNA Advantage, 8-port, 3-year term license C3560 Cisco DNA Advantage, 8-port, 5-year term license |
| C3560CX-DNA-A-12 (Greenfield) C3560CX-DNA-A-12= (Brownfield) C3560CX-DNA-A-12-3 C3560CX-DNA-A-12-5 |
C3560 Cisco DNA Advantage, 12-port term licenses C3560 Cisco DNA Advantage, 12-port, 3-year term license C3560 Cisco DNA Advantage, 12-port, 5-year term license |
Table 22. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst Digital Building Series
| License type |
Product ID |
Description |
| A la carte part numbers |
CDB-DNA-A-8 (Greenfield) CDB-DNA-A-8= (Brownfield) CDB-DNA-A-8-3Y CDB-DNA-A-8-5Y CDB-DNA-A-8-7Y |
Cisco Digital Building Cisco DNA Advantage, 24-port term licenses Cisco Digital Building Cisco DNA Advantage, 24-port, 3-year term license Cisco Digital Building Cisco DNA Advantage, 24-port, 5-year term license Cisco Digital Building Cisco DNA Advantage, 24-port, 7-year term license |
Cisco Catalyst 4500-E Series licenses
Only the 4500-E Series switches with Sup 8E and Sup 9E Supervisors are capable of Cisco SD-Access.
Tables 23 and 24 list the product IDs for ordering Cisco DNA Advantage or Cisco DNA Premier licenses for the Cisco Catalyst 4500-E Series.
Table 23. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 4500-E Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C4500E-DNA-A (Greenfield) C4500E-DNA-A= (Brownfield) C4500E-DNA-A-3Y C4500E-DNA-A-5Y C4500E-DNA-A-7Y |
C4500E Cisco DNA Advantage term license C4500E Cisco DNA Advantage 3-year term license C4500E Cisco DNA Advantage 5-year term license C4500E Cisco DNA Advantage 7-year term license |
Table 24. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 4500-E Series
| License type |
Product ID |
Description |
| A la carte part numbers |
C1-CAT-ADD-T (Brownfield) C1A1ATCAT4500S (Greenfield/Brownfield) C1A1ATCAT4500X (Greenfield/Brownfield) C1A2ATCAT4500X (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier Term C4500E Cisco DNA Premier Term 16/24 Port C4500X Cisco DNA Premier Term 32 Port C4500X |
The required base license for Cisco DNA Advantage is IP Base or Enterprise Services. For initial purchase, choose only hardware PIDs with the “-A” suffix. For “-E” suffix, use an upgrade SKU to upgrade to “-A” suffix. Note that when the base license is IP Base, you are limited to only three virtual networks.
Cisco Catalyst 6800 Series and 6500-E Series licenses
Only Cisco Catalyst 6840-X Series, 6880-X Series, 6500-E Series, and 6807-XL Series support Cisco SD-Access. For 6500-E and 6807-XL, Sup 2T and Sup 6T Supervisors are required. Note that Sup 2T uplinks do not support Cisco SD-Access.
Tables 25 and 26 list the part numbers for ordering Cisco DNA Advantage for the Cisco Catalyst 6840-X, 6880-X, 6500-E, and 6807-XL Series.
Table 25. A la carte part numbers for Cisco DNA Advantage for the Cisco Catalyst 6800 and 6500-E Series
| License type |
Product ID |
Description |
|
| A la carte part numbers |
C6840-DNA-L-A (Greenfield) C6840-DNA-L-A= (Brownfield) C6840-DNA-L-A-3Y C6840-DNA-L-A-5Y C6840-DNA-L-A-7Y |
C6840 Low Density Term 3 years 5 years 7 years |
|
| C6500-DNA-A (Greenfield) C6500-DNA-A= (Brownfield) C6500-DNA-A-3Y C6500-DNA-A-5Y C6500-DNA-A-7Y |
C6500 High Density Term 3 years 5 years 7 years |
|
|
| C6807-DNA-A (Greenfield) C6807-DNA-A= (Brownfield) C6807-DNA-A-3Y C6807-DNA-A-5Y C6807-DNA-A-7Y |
C6807 High Density Term 3 years 5 years 7 years |
|
|
| C6880-DNA-A (Greenfield) C6880-DNA-A= (Brownfield) C6880-DNA-A-3Y C6880-DNA-A-5Y C6880-DNA-A-7Y C6840-DNA-A (Greenfield) C6840-DNA-A= (Brownfield) C6840-DNA-A-3Y C6840-DNA-A-5Y C6840-DNA-A-7Y |
C6880 High Density Term 3 years 5 years 7 years
C6840 High Density Term 3 years 5 years 7 years |
|
|
Any base license on the Cisco Catalyst 6800 and 6500-E Series can be used with Cisco DNA Advantage. Note that when the base license is IP Base, you are limited to only three virtual networks.
Table 26. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for the Cisco Catalyst 6800 and 6500-E Series
| License type |
Product ID |
Description |
| Cisco DNA Premier Advantage |
C1-CAT-ADD-T (Brownfield) C1A1ATCAT65001 (Greenfield/Brownfield) C1A1ATCAT68071 (Greenfield/Brownfield) C1A1ATCAT68801 (Greenfield/Brownfield) C1A1ATCAT68401 (Greenfield/Brownfield) C1A1ATCAT68402 (Greenfield/Brownfield) C1AA1TCAT6500 (Greenfield/Brownfield) C1AA1TCAT6800 (Greenfield/Brownfield) C1AA1TCAT6840 (Greenfield/Brownfield) |
Top-level SKU Cisco DNA Premier Term C6500 Cisco DNA Premier Term C6807 Cisco DNA Premier Term C6880 Cisco DNA Premier Low Term C6816/C6824 Cisco DNA Premier High Term C6832/C6840 Cisco DNA Premier Add-On Term, C6500 Cisco DNA Premier Add-On Term, C6807/C6880 Cisco DNA Premier Add-On Term, 6840 |
Cisco Nexus 7700 Series licenses
Only Cisco Nexus 7700 Series Switches with Sup2E and M3 line cards support Cisco SD-Access.
Table 27 lists the part numbers for a la carte ordering of Cisco DNA Advantage for the Cisco Nexus 7700 Series.
Table 27. A la carte part numbers for Cisco DNA Advantage for the Cisco Nexus 7700 Series
| License type |
Product ID |
Description |
| A la carte part numbers |
N7000-DNA-A (Greenfield)/ N7000-DNA-A= (Brownfield) N7000-DNA-A-3YR N7000-DNA-A-5YR N7000-DNA-A-7YR |
Nexus 7000 Cisco DNA Advantage 3 Years 5 Years 7 Years |
Contact your account team for additional ordering information, such as Cisco DNA Premier Software packaging.
The minimum base license for activating Cisco DNA Advantage is the LAN Enterprise license
(N77-LAN1K9).
Cisco Industrial Ethernet 3200 Series licenses
Table 28. A la carte part numbers for Cisco DNA Essentials for the Cisco Industrial Ethernet 3200 Series license
| License type |
Product ID |
Description |
| A la carte part numbers |
IE3200-DNA-E IE3200-DNA-E-3Y IE3200-DNA-E-5Y |
IE3200 Series Cisco DNA Essentials 3 Years 5 Years |
Cisco Industrial Ethernet 3300 Series licenses
Table 29. A la carte part numbers for Cisco DNA Advantage and DNA Essentials for the Cisco Industrial Ethernet 3300 Series license
| License type |
Product ID |
Description |
| A la carte part numbers |
IIE3300-DNA-A IE3300-DNA-E IE3300-DNA-A-3Y IE3300-DNA-E-3Y IE3300-DNA-A-5Y IE3300-DNA-E-5Y |
IE3300 Series Cisco DNA Advantage IE3300 Series Cisco DNA Essentials 3 Years 5 Years |
Cisco Industrial Ethernet 3400 Series licenses
Table 30. A la carte part numbers for Cisco DNA Advantage and Cisco DNA Essentials for the Cisco Industrial Ethernet 3400 Series license
| License type |
Product ID |
Description |
| A la carte part numbers |
IE3400-DNA-A IE3400-DNA-E IE3400-DNA-A-3Y IE3400-DNA-E-3Y IE3400-DNA-A-5Y IE3400-DNA-E-5Y |
IE3400 Series Cisco DNA Advantage IE3400 Series Cisco DNA Essentials 3 Years 5 Years |
Table 30 A. A la carte part numbers for Cisco DNA Advantage and Cisco DNA Essentials for the Cisco Industrial Ethernet 3400 Series license
| License type |
Product ID |
Description |
| A la carte part numbers |
IE3400H-DNA-A IE3400H-DNA-E IE3400H-DNA-A-3Y IE3400H-DNA-A-5Y IE3400H-DNA-E-3Y IE3400H-DNA-E-5Y |
IE3400H Series Cisco DNA Advantage IE3400H Series Cisco DNA Essentials IE 3400H DNA Advantage, 3 Year Term license IE 3400H DNA Advantage, 5 Year Term license IE 3400H DNA Essentials, 3 Year Term license IE 3400H DNA Essentials, 5 Year Term license |
Cisco Industrial Ethernet 4000 Series licenses
Table 31. A la carte part numbers for Cisco DNA Advantage for the Cisco Industrial Ethernet 4000 Series licenses
| License type |
Product ID |
Description |
| A la carte part numbers |
IE4000-DNA-A-L (Greenfield)/ IE4000-DNA-A-L =(Brownfield) IE4000-DNA-A-M (Greenfield) 24 ports/ IE4000-DNA-A-M=(Brownfield) 24 port IE-4000-DNA-A-L-3Y IE-4000-DNA-A-M-3Y IE-4000-DNA-A-L-5Y IE-4000-DNA-A-M-5Y |
IE 4000 Cisco DNA Advantage (12 ports) IE 4000 Cisco DNA Advantage (12 ports) IE 4000 Cisco DNA Advantage (24 ports) IE 4000 Cisco DNA Advantage (24 ports) 3 Years 5 Years |
Cisco Industrial Ethernet 4010 Series licenses
Table 32. A la carte part numbers for Cisco DNA Advantage for the Cisco Industrial Ethernet 4010 Series licenses
| License type |
Product ID |
Description |
| A la carte part numbers |
IE4010-DNA-A-H (Greenfield)/ IE4010-DNA-A-H= (Brownfield) IE4010-DNA-A-H-3Y IE4010-DNA-A-H-5Y |
IE 4010 Cisco DNA Advantage 3 Years 5 Years |
Cisco Industrial Ethernet 5000 Series licenses
Table 33. A la carte part numbers for Cisco DNA Advantage for the Cisco Industrial Ethernet 5000 Series licenses
| License type |
Product ID |
Description |
| A la carte part numbers |
IE5000-DNA-A-H (Greenfield)/ IE5000-DNA-A-H= (Brownfield) IE5000-DNA-A-H-3Y IE5000-DNA-A-H-5Y |
IE 5000 Cisco DNA Advantage 3 Years 5 Years |
Cisco ISR, ASR, and CSR Series licenses
Only ASR-1000-X, ASR-1000-HX, ASR1006, ASR1006-X, ASR1009-X, ISR 4461, ISR 4451, ISR 4431, ISR 4351, ISR 4331, ISR 4321, and CSR 1000v support Cisco SD-Access.
ISR and CSR require an AppX license or Cisco DNA licenses to be able to deploy Cisco SD-Access. Choose only hardware PIDs with the “-AX” suffix. ASR requires either AIS or Advanced Enterprise Services license to be able to deploy Cisco SD-Access.
No additional add-on licenses are required.
Contact your account team for additional ordering information such as Cisco DNA Premier packaging.
Cisco Enterprise Wireless licenses
Tables 34 and 35 list the product IDs for ordering Cisco DNA Advantage licenses for the Cisco wireless controllers and access points.
Table 34. A la carte part numbers for Cisco DNA Advantage for wireless controllers and access points
| License type |
Product ID |
Description |
| A la carte part numbers |
AIR-DNA (Greenfield/Brownfield) AIR-DNA-A-3Y AIR-DNA-A-5Y AIR-DNA-A-7Y |
Wireless Cisco DNA Advantage Term License, per AP Wireless Cisco DNA Advantage 3-year term license, per AP Wireless Cisco DNA Advantage 5-year term license, per AP Wireless Cisco DNA Advantage 7-year term license, per AP |
Table 35. Cisco DNA Premier Software part numbers for Cisco DNA Advantage for wireless controllers and access points
| License type |
Product ID |
Description |
| Cisco DNA Premier |
C1-AIR-K9-T (Greenfield/Brownfield) C1A1TAIRK9-3Y C1A1TAIRK9-5Y C1A1TAIRK9-7Y |
Cisco DNA Premier Term License, per AP Cisco DNA Premier 3-year term license, per AP Cisco DNA Premier 5-year term license, per AP Cisco DNA Premier 7-year term license, per AP |
Notes:
● Wireless Cisco DNA Advantage includes term-based AP license (Term-based AP licenses are included in Cisco DNA Essentials).
● Cisco DNA Premier for Wireless includes term-based Cisco DNA Advantage, AP license, Cisco Prime Infrastructure license, CMX Base, ISE Base, and ISE Plus. This bundle includes:
◦ 15 ISE Base and ISE Plus sessions per access point
● Cisco SD-Access Embedded Wireless can be enabled on Cisco Catalyst 9300 series, Cisco Catalyst 9400 series, and Cisco Catalyst 9500 series switches with per AP Cisco DNA Premier/Cisco DNA Advantage license, in addition to license needed for the switch itself to work for Cisco SD-Access.
Cisco recommends that you review all current offers and programs in the event that one or more may be applicable to your customer. These offers and programs vary based on regions, and include Cisco DNA Center Appliances, Cisco DNA Migration offers for customers owning specific perpetual licenses, Cisco DNA Upgrade offers for customers upgrading from a lower Cisco DNA tier to higher Cisco DNA tier, and so on. To review all current offers, please go to: https://cs.co/enpromotions.
Cisco Identity Services Engine (ISE) licenses
A la carte software licensing requires the purchase of both ISE Base and ISE Plus licenses separately. All ISE licensing is based on the number of endpoints to be supported in the network. For more information refer Cisco Identity Services Engine Ordering Guide.
Cisco ISE Base session licensing
Table 36 shows the part numbers for perpetual ISE Base session licensing.
Table 36. Perpetual Cisco ISE Base session licenses
| L-ISE-BSE-100= |
Cisco ISE 100-session Base license |
| L-ISE-BSE-250= |
Cisco ISE 250-session Base license |
| L-ISE-BSE-500= |
Cisco ISE 500-session Base license |
| L-ISE-BSE-1K= |
Cisco ISE 1000-session Base license |
| L-ISE-BSE-1500= |
Cisco ISE 1500-session Base license |
| L-ISE-BSE-2500= |
Cisco ISE 2500-session Base license |
| L-ISE-BSE-3500= |
Cisco ISE 3500-session Base license |
| L-ISE-BSE-5K= |
Cisco ISE 5000-session Base license |
| L-ISE-BSE-10K= |
Cisco ISE 10,000-session Base license |
| L-ISE-BSE-25K= |
Cisco ISE 25,000-session Base license |
| L-ISE-BSE-50K= |
Cisco ISE 50,000-session Base license |
| L-ISE-BSE-100K= |
Cisco ISE 100,000-session Base license |
| L-ISE-BSE-250K= |
Cisco ISE 250,000-session Base license |
The ISE Plus session licensing can be purchased as a subscription and is available for 1-, 3-, and 5-year terms. Table 34 shows ordering details for the 1-year subscription, Table 38 shows details for the 3-year subscription, and Table 39 shows details for the 5-year subscription.
Table 37. Ordering details for the 1-year ISE Plus session subscription
| Term license |
Subscription term |
Description |
| L-ISE-PLS-S-100= |
ISE-PLS-1YR-100 |
Cisco ISE 1-Yr 100-session Plus license |
| L-ISE-PLS-S-250= |
ISE-PLS-1YR-250 |
Cisco ISE 1-Yr 250-session Plus license |
| L-ISE-PLS-S-500= |
ISE-PLS-1YR-500 |
Cisco ISE 1-Yr 500-session Plus license |
| L-ISE-PLS-S-1K= |
ISE-PLS-1YR-1K |
Cisco ISE 1-Yr 1000-session Plus license |
| L-ISE-PLS-S-1500= |
ISE-PLS-1YR-1500 |
Cisco ISE 1-Yr 1500-session Plus license |
| L-ISE PLS-S-2500= |
ISE-PLS-1YR-2500 |
Cisco ISE 1-Yr 2500-session Plus license |
| L-ISE-PLS-S-3500= |
ISE-PLS-1YR-3500 |
Cisco ISE 1-Yr 3500-session Plus license |
| L-ISE-PLS-S-5K= |
ISE-PLS-1YR-5K |
Cisco ISE 1-Yr 5000-session Plus license |
| L-ISE-PLS-S-10K |
ISE-PLS-1YR-10K |
Cisco ISE 1-Yr 10,000-session Plus license |
| L-ISE-PLS-S-25K= |
ISE-PLS-1YR-25K |
Cisco ISE 1-Yr 25,000-session Plus license |
| L-ISE-PLS-S-50K= |
ISE-PLS-1YR-50K |
Cisco ISE 1-Yr 50,000-session Plus license |
| L-ISE-PLS-S-100K= |
ISE-PLS-1YR-100K |
Cisco ISE 1-Yr 100,000-session Plus license |
| L-ISE-PLS-S-250K= |
ISE-PLS-1YR-250K |
Cisco ISE 1-Yr 250,000-session Plus license |
Table 38. Ordering details for the 3-year ISE Plus session subscription
| Term license |
Subscription term |
Description |
| L-ISE-PLS-S-100= |
ISE-PLS-3YR-100 |
Cisco ISE 3-Yr 100-session Plus license |
| L-ISE-PLS-S-250= |
ISE-PLS-3YR-250 |
Cisco ISE 3-Yr 250-session Plus license |
| L-ISE-PLS-S-500= |
ISE-PLS-3YR-500 |
Cisco ISE 3-Yr 500-session Plus license |
| L-ISE-PLS-S-1K= |
ISE-PLS-3YR-1K |
Cisco ISE 3-Yr 1000-session Plus license |
| L-ISE-PLS-S-1500= |
ISE-PLS-3YR-1500 |
Cisco ISE 3-Yr 1500-session Plus license |
| L-ISE PLS-S-2500= |
ISE-PLS-3YR-2500 |
Cisco ISE 3-Yr 2500-session Plus license |
| L-ISE-PLS-S-3500= |
ISE-PLS-3YR-3500 |
Cisco ISE 3-Yr 3500-session Plus license |
| L-ISE-PLS-S-5K= |
ISE-PLS-3YR-5K |
Cisco ISE 3-Yr 5000-session Plus license |
| L-ISE-PLS-S-10K= |
ISE-PLS-3YR-10K |
Cisco ISE 3-Yr 10,000-session Plus license |
| L-ISE-PLS-S-25K= |
ISE-PLS-3YR-25K |
Cisco ISE 3-Yr 25,000-session Plus license |
| L-ISE-PLS-S-50K= |
ISE-PLS-3YR-50K |
Cisco ISE 3-Yr 50,000-session Plus license |
| L-ISE-PLS-S-100K= |
ISE-PLS-3YR-100K |
Cisco ISE 3-Yr 100,000-session Plus license |
| L-ISE-PLS-S-250K= |
ISE-PLS-3YR-250K |
Cisco ISE 3-Yr 250,000-session Plus license |
Table 39. Ordering details for the 5-year ISE Plus session subscription
| Term license |
Subscription term |
Description |
| L-ISE-PLS-S-100= |
ISE-PLS-5YR-100 |
Cisco ISE 5-Yr 100 Session Plus License |
| L-ISE-PLS-S-250= |
ISE-PLS-5YR-250 |
Cisco ISE 5-Yr 250 Session Plus License |
| L-ISE-PLS-S-500= |
ISE-PLS-5YR-500 |
Cisco ISE 5-Yr 500 Session Plus License |
| L-ISE-PLS-S-1K= |
ISE-PLS-5YR-1K |
Cisco ISE 5-Yr 1K Session Plus License |
| L-ISE-PLS-S-1500= |
ISE-PLS-5YR-1500 |
Cisco ISE 5-Yr 1500 Session Plus License |
| L-ISE PLS-S-2500= |
ISE-PLS-5YR-2500 |
Cisco ISE 5-Yr 2500 Session Plus License |
| L-ISE-PLS-S-3500= |
ISE-PLS-5YR-3500 |
Cisco ISE 5-Yr 3500 Session Plus License |
| L-ISE-PLS-S-5K= |
ISE-PLS-5YR-5K |
Cisco ISE 5-Yr 5K Session Plus License |
| L-ISE-PLS-S-10K |
ISE-PLS-5YR-10K |
Cisco ISE 5-Yr 10K Session Plus License |
| L-ISE-PLS-S-25K= |
ISE-PLS-5YR-25K |
Cisco ISE 5-Yr 25K Session Plus License |
| L-ISE-PLS-S-50K= |
ISE-PLS-5YR-50K |
Cisco ISE 5-Yr 50K Session Plus License |
| L-ISE-PLS-S-100K= |
ISE-PLS-5YR-100K |
Cisco ISE 5-Yr 100K Session Plus License |
| L-ISE-PLS-S-250K= |
ISE-PLS-5YR-250K |
Cisco ISE 5-Yr 250K Session Plus License |
Choose the appliance(s) below based on the solution requirements, as follows.
Cisco Identity Services Engine appliances
Cisco ISE provides the identity and access control policy functions for the Cisco SD-Access solution and is an integral part of the solution.
Cisco ISE supports both physical and virtual appliances. Cisco ISE physical appliances are based on the Cisco Secure Network Server, a Cisco UCS® C220 rack server configured specifically to support Cisco ISE. The Secure Network Server for Cisco ISE deployments is available in two versions:
● The Cisco Secure Network Server 3515 is designed for small and medium-sized deployments.
● The Cisco Secure Network Server 3595 is suitable for large deployments that require a highly reliable system, including redundant components such as hard disks, and power supplies.
Table 40. Cisco ISE support for Cisco SD-Access
| Device role |
Product family |
Part number |
Description |
| Fabric access policy engine |
Cisco ISE (Identity Services Engine) |
SNS-3515-K9 SNS-3595-K9 R-ISE-VMS-K9= R-ISE-VMM-K9= R-ISE-VML-K9= |
Small secure server for ISE applications Large secure server for ISE applications Cisco ISE Virtual Machine Small (eDelivery) Cisco ISE Virtual Machine Medium (eDelivery) Cisco ISE Virtual Machine Large (eDelivery) |
Cisco DNA Center provides automation and assurance functions of the Cisco SD-Access solution.
Cisco DNA Center is only available as a physical appliance, suitable for small and medium-sized deployments.
Table 41. Cisco DNA Center support for Cisco SD-Access
| Device role |
Product family |
Part number |
Description |
| Fabric controller |
Cisco DNA Center |
DN2-HW-APL DN2-HW-APL-L DN2-HW-APL-XL |
Cisco DNA Center Appliance (Gen 2) 44-Core Cisco DNA Center Appliance (Gen 2) 56-Core Cisco DNA Center Appliance (Gen 2) 112-Core |
| Fabric controller |
Cisco DNA Center upgrade |
DN2-HW-APL-U |
Cisco DNA Center Appliance (Gen 2) 44-Core, available for customers that have previously purchased an APIC-EM physical appliance |
The Cisco DNA Center appliance is available in a prebuilt form factor.
For more information on the Cisco DNA Center appliance, visit here.
Professional and technical services
Cisco offers a wide range of services to help accelerate your success in deploying and optimizing the Cisco SD-Access solution in your enterprise network. The innovative Cisco Services offerings are delivered through a unique combination of people, processes, tools, and partners and are focused on helping you increase operational efficiency and optimize your network. With proven experience, methodology, and best practices, Cisco Services use an architecture-led approach to help you align software-defined networking with your business goals to achieve long-term value. Offering a comprehensive lifecycle of services – from advisory, implementation, optimization and technical services – you can move to a secure and automated unified network with ease and confidence.
Table 39 lists the available Cisco Services. Cisco Smart Net Total Care® Service helps you resolve mission-critical problems with direct access at any time to Cisco network experts and award-winning resources. With this service, you can take advantage of the Cisco Smart Call Home service capability, which offers proactive diagnostics and real-time alerts on your Cisco SD-Access deployment. Spanning the entire network lifecycle, Cisco Services offerings help increase investment protection, optimize network operations, support migration operations, and strengthen your IT expertise.
Table 42. Cisco SD-Access Advise and Implement Services
| Product ID |
Description |
| AS-DNA-SDA-CNSLT |
Cisco DNA Advisory for Cisco SD-Access |
| AS-SEC-ADVIS |
Segmentation Service |
| AS-DNA-SDA-CNSLT |
Cisco DNA Center Advise and Implement |
| AS-DNA-SDA-CNSLT |
Cisco SD-Access Design |
| AS-DNA-SDA-CNSLT |
Cisco SD-Access Operations Planning |
| CON-AS-ISE |
Security Implementation for ISE |
| CON-AS-SW |
Security Implementation for Stealthwatch |
| AS-DNA-SDA-CNSLT |
Cisco SD-Access Migration |
| AS-DNA-SDA-CNSLT |
Network Migration Upgrade |
| AS-BN-T-CNSLT |
Cisco SD-Access Solutions Validation |
| CON-AS-TEST-BN |
Cisco SD-Access Solution Validation Optimization |
| CON-AS-BN, CON-AS-OSS-BN or CON-AS-SEC |
Network Optimization for Cisco SD-Access |
For more details on Cisco Services offerings, go to Cisco DNA Services listing.
For more information about Cisco SD-Access, visit here.