This document describes the procedure to enable Cisco Smart License on XRv 9000 when there is no direct access to the Internet from the Virtual Machine (VM) hosting the XRv 9000.
Cisco recommends that you have knowledge of these topics:
Basic knowledge of Virtual Machines.
Knowledge about Cisco IOS XRv 9000 Router installed either on VMware or KVM Hypervisors.
Basic Knowledge of Cisco IOS XRv 9000 Router Licensing Model.
Basic knowledge of Cisco Smart Software Manager (SSM) satellite.
The information provided in this document is based on these software and hardware versions:
Cisco IOS XRv 9000 Router -xrv9k-xr-6.0.1
Smart Software Manager satellite- Version 3.0.4
The information in this document was created from devices in a specific laboratory environment. All the devices used in this document were initialized with a default configuration. If your network is live, ensure that you understand the potential impact of any command.
Cisco Smart Licensing
Cisco Smart Licensing is a cloud-based, software license management solution which enables you to automate manual licensing tasks. It assists you in purchasing, management and reporting functions. Cisco Smart Licensing uses Cisco Smart Call Home feature to communicate with the Cisco Smart Software Manager. Smart Call Home is auto-configured for default Smart Licensing Setup.
In Cisco IOS XRv 9000 Router, the licensing would be Smart Licensing only. Therefore, you need to enable Smart Licensing, and it would not include a Node Locked Licensing implementation at all. The XRv 9000 Router communicates to the Cisco Licensing Cloud to provide a report of which features and to what scale the system is being used.
These are the benefits of using Cisco Smart License:
You can automatically self-register the software installed in your network without Product Activation Key (PAKs).
You do not have to install the license file on every node. You can create license pools (logical grouping of licenses) to reflect your organization structure. Smart Licensing offers you Cisco Smart Software Manager, a centralized portal that enables you to manage all your Cisco software licenses from one centralized website.
You can have an integrated view of the licenses you have purchased, and what has been actually deployed in your network via the portal.
Cisco IOS XRv 9000 Router Licensing Model
The Cisco IOS XRv 9000 Router (Sunstone) licensing model includes demo and production modes. This table gives a short description of each mode:
· This is the default mode when the router is launched.
XRv 9000 (Sunstone) by default is running in Demo mode, which applies high scale limit on the number of supported routes and amount of throughput. It expires after certain number of days and keeps showing the warning alarm.
You can utilize all the available capacity of your XRv 9000 when it is in production mode. However to enable the production mode, router’s license needs to be registered with back-end (https://software.cisco.com/#SmartLicensing-Alerts) and purchased entitlements (directly, through a proxy, or through a Smart Licensing Satellite).
This image shows the basic state transitions between Demo and Production mode.
Transition between Demo and Production mode is shown in the image
A default Smart Call Home configuration on Cisco IOS XRv 9000 (XRv9k) Router is enough to run Smart Licensing. This configuration is triggered by Smart Licensing internally, using a built-in CiscoTAC-1 profile. However, you need to ensure that there is connectivity to Cisco.com via traffic or management ports on XRv9k Router. Therefore the only requirement is to configure IP connectivity to have access to the Cisco cloud from XRv9k Router.
By default, Smart Licensing is always enabled on XRv9k routers and to use the router in production mode, you must register with Cisco. Using the ID token, the license agent on the router registers the product with Cisco and receives an identity certificate. This certificate is used for all future communications with Cisco. The license agent on the router automatically renews the registration information with Cisco every 30 days. You can refer to the following link for further information about registering XRv9k Router:
Problem: No Internet Access to Register XRv9k Router License.
Due to security reason or corporate policy, you cannot connect the XRv9k or VM host to the Internet or even Cisco Cloud. Therefore the license agent on XRv9k Router cannot reach https://software.cisco.com/#SmartLicensing-Alerts to register the product and renew it every 30 days. Therefore, you cannot enable production mode. Is there any other solution?
Depending on the requirements with respect to security, manageability, and operational mode of your network, you can deploy Smart Licensing in several ways:
You may choose not to allow the XRv9K to connect directly with Cisco Cloud/Backend servers. In this case, you can use a proxy server on your premises and manage the firewall, traffic flow, and how the Smart Licensing application fits in the organization's security needs. This can be easily set up via Open Source Apache software that runs on Windows or Linux Operating Systems.
You may want to have all your XRv9K devices connected to an aggregator host, which can receive all the local requests from all the XRv9K devices before you forward them to Cisco Backend Servers. This is a job for Transport Gateway software that runs on Linux and Windows and is available for download at Cisco Transport-Gateway download: Cisco Transport Gateway – Release and General Information
You may want to operate totally offline with On-Premise software that runs on Linux and Windows and allows you to have only this On-Premise host to do the talking for licensing information exchange with the Cisco Cloud and in turn provide information to the end devices as to their state of compliance. This software will be available in Release 5.3.1 or later.
This discussion describes a scenario which includes Smart Software Manager Satellite as an On-Premise software to communicate with Cisco cloud and register the XRv9k Router in Production mode as well as renew the license.
Implementing Smart Software Manager Satellite
Smart Software Manager Satellite is a component of Cisco Smart Licensing. It works in conjunction with Cisco Smart Software Manager (SSM) to intelligently manage your product licenses. It is providing near real-time visibility and reporting of Cisco licenses that you purchase and consume. The image shows Smart Software Manager Satellite implementation:
If you decide to install the XRv9k Router totally, offline, without direct connection to the Internet, you can use Cisco Smart Software Manager Satellite to communicate with the Cisco cloud. You can implement this solution as per the topology shown in the image :
Install Smart Software Manager Satellite
Smart Software Manager Satellite is packaged as an Open Virtual Appliance (OVA) and requires these configurations:
50GB - 200GB hard disk
8 GB memory
Smart Software Manager Satellite supports the following web browsers:
Chrome 32.0 and later versions
Firefox 25.0 and later versions
When you open the OVA file, Smart Software Manager satellite extracts the VM and imports it into whatever virtualization software you have installed on your computer.
You must provide, install, and configure the following external components before you install the OVA file:
ESXi v5.x or above host with sufficient OVA resources
vSphere Client v5.x
To deploy and install the Smart Software Manager Satellite OVA, there is a document which guides you through the installation step by step:
Step 2. The login window as shown in the image appears.Login to Satellite using default User and Password.
Step 3. As it is the first time, you are prompted to change the password. Enter your new password as shown in the image:
Then this is the procedure to continue Satellite configuration:
Step 1. To install new Satellite, check Configure as new Satellite, as shown in the image:
Step 2. The next window shows the initial configuration that you’ve done via CLI.
Step 3. Verify the clock setting and if it is not synchronized, you must edit the NTP Settings.
Step 4. Select Sync Time Now, you receive a successful message as shown image:
You can choose setup method:
In this scenario, network Setup has been selected, as shown in the image:
Smart Licensing requires products to be associated withSmart Accounts, which can be created onCisco Software Central. A Smart Account is associated with a unique company ID and is like an online banking account containing Cisco entitlements and devices for that customer. From the Cisco Smart Software Manager, sub-accounts (also calledvirtual accounts) can be created to represent various sub-divisions or buying centers of the company.
Step 1. To register Satellite, you must select a name for Satellite, then enter Smart account and Virtual account information. Click on Register Satellite to continue, as shown in the image:
Step 2. Satellite restarts automatically after registeration, then login prompt appears again, as shown in the image:
You can register the satellite using the online or offline method through the GUI. The online (network) option requires a network connection; you would use the offline (manual) when you are disconnected from the Cisco Smart Software Manager portal. After you complete the satellite registration process, you receive an immediate response, confirming the registration, from Cisco Smart Software Manager.
Step 1. As shown in the image, check Network synchronization, if you have internet access from Satellite.
Step 2. As shown in the image, click on Configure Satellite to be synchronised with Cisco Smart Software Manager.
When Satellite is registered with Smart Software Manager (SSM), you can see the link icon in the main page, as shown in the image:
Step 1.You can see initial registeration is successful. It may take time to find the license.
Step 2. You can login to the Satellite and synchronise it manually. Then you see the status is changed to Registered, as shown in the image:
Step 3. If the required licence is not in your Smart account or your defined virtual account, the status of the license usage shows Out Of Compliance. However, the current state is changed to PRODUCTION, as shown in the image:
Step 4. The Smart Software Manager Satellite also shows the major alarm as "Insufficient Licenses" and shortage of one license (-1).
Transfer Required License to the Related Virtual Account
You must transfer the required license to the related smart account and virtual account to be able to use it.
Step 1. In case you ordered a license and it is in different virtual account, you can login to your Smart Software Licensing account and transfer it to the virtual account where you've generated token for XRV9k router and then click in Transfer, as shown in the image:
Step 2. Enter the information about correct virtual account and the quantity of the license, then click in Complete Transfer,as shown in the image.
Step 3. When License is transfered, you can manually synchronise the Satellite and the Major alarm is cleared.
Step 4. You can also verify on the Smart Software Licensing and ensure the number of In-use licenses.
Verify the License Status in XRv9k
You can verify the license status of the XRv9k router by using these commands:
RP/0/RP0/CPU0:SYD-XRV9k-LAB#show license all
RP/0/RP0/CPU0:SYD-XRV9k-LAB#show license platform summary
The status of the license is changed to Authorized after communicating with Satellite and finding required license.
Note: You can register the license by using existing token, in case the status hasn't been changed.
Your XRv9k Router is using the license and the Satellite will synchronize itself with Smart software account.
You can refer to this link for more information about provisioning the VM: