Cisco IOS XR Smart Licensing
This article provides information about Smart Licensing (SL) solutions and their deployment on Cisco IOS XR Routers.
Smart Licensing
Smart Licensing (SL) is a cloud-based software licensing model that allows you to
- activate and manage Cisco software licenses across your organization
- easily track the status of your licenses and software usage trends, and
- pool licenses or entitlements across the entire organization in a flexible and automated manner.
Benefits
These are the key benefits of Smart Licensing.
- Easy activation: Establishes a pool of software licenses that can be used across your company—no more entering Product Activation Keys.
- Unified management: Provides a complete view into all of your products and services in an user-friendly portal.
- License flexibility: Allows you to easily use and move licenses as needed since the software is not node-locked to your hardware.
Key features
These are the key features of Smart licensing
- Direct and Proxy Registration: Registers your device directly with the Cisco Smart Software Manager (CSSM) portal or through a proxy for restricted internet access environments.
- Centralized Management: Manage your license inventory using CSSM, simplifying software asset tracking and management.
- License Portability: Move or transfer your licenses easily between devices, offering flexibility in deploying software assets within the organization.
- Simplified Activation: Simplifies this process by using a pool of licenses that aren’t tied to a specific device as against Traditional licensing.
- Automatic License Renewal: Renews licenses automatically, reducing the administrative burden of tracking license expiration dates and manual renewals.
- Usage Reporting: Generates detailed reports on license usage to understand device software consumption, optimizing your license investments.
- Compliance Assurance: Provides visibility into license entitlements versus actual usage, helping that you stay compliant.
- Support for Hybrid Environments: Supports both on-premises and cloud-based environments, allowing for consistent license management across different deployment models.
- Real-time Updates: Receives real-time updates from Cisco, ensuring that you have access to the latest features and compliance information.
Comparison between traditional licensing and Smart Licensing
This table summarizes the main distinctions between Smart Licensing and traditional licensing.
|
Attributes |
Traditional licensing | Smart Licensing |
|---|---|---|
|
License activation |
Activate licenses by manually installing them on the device. |
Activate licenses by registering the device with the Cisco Smart Software Manager (CSSM). |
|
License pooling |
Associates each license with a specific device (node-locked) and does not support license pooling. |
Pools licenses within a virtual network account, allowing activation or deactivation of license types on devices without installing license files. |
|
License inventory |
Does not provide a central location to view purchased licenses or software usage trends. |
Maintains license inventory in CSSM and provides a centralized, statistical view of license usage and consumption. |
|
License transfer |
Does not support easy transfer of licenses between devices. |
Enables easy movement of licenses between devices without manual transfer, simplifying reassignment during Return Material Authorization (RMA) processes. |
|
License visibility |
Offers limited visibility into software licenses, tracking licenses only on a per-node basis. |
Provides consolidated usage reports and an overall snapshot of licenses in the network through a single portal. |
Deployment models for Smart Licensing
Smart Licensing offers various deployment models to provide flexible options for managing software licenses. These are based on your specific network requirements and connectivity preferences.
- On-Premises deployments: Organizations that prefer not to have their products communicate directly with Cisco Smart Software Manager (CSSM) over the internet, opt for this model.
- Direct deployments: Organizations that have small networks and prefer not to manage an on-premises server, particularly in enterprise environments, opt for this model.
- Offline deployments: Organizations that require highly secure environments opt for this model as it allows them to set up devices without internet access.
Deploying Smart Licensing
Summary
The key components involved in Smart Licensing are:
- Network administrator: The network professional who oversees the license management process, ensuring compliance and optimal utilization.
- Cisco Commerce Workspace (CCW): The platform where users order Cisco software licenses, including Smart License-enabled products.
- Cisco Smart Software Manager (CSSM): The centralized portal where customers manage their Cisco software licenses. It allows creation and management of Smart Accounts and Virtual Accounts.
- Smart Account (SA): A secure, centralized account on Cisco’s licensing portal that enables customers and partners to manage software licenses and entitlements.
- Virtual Account (VA): A child container within a Smart Account that helps organize licenses into logical groups for easier management and delegation.
- Network devices: Routers that require licenses.
- Smart Software Manager (SSM) On-Prem: An on-premises server to report license usage in On-Premises deployment model or Offline deployment model.
- Offline server: An offline server to report license usage in Offline deployment model.
You can deploy Smart Licensing with various deployment models, including on-premises, direct, and offline environments. Each model has specific methods for license activation and usage reporting. The CSSM plays a central role in managing licenses, providing visibility into license usage and ownership, which aids in optimizing resource allocation.
Workflow
The process of deploying Smart Licensing involves these key stages:
-
Order licenses:
The network administrator
- orders licenses from CCW, and
- accesses CSSM to create the Smart Account and Virtual Accounts to organize licenses effectively.
-
Activate licenses:
The network administrator
- selects the deployment model based on their requirement
- configures the Smart Licensing transport mode, and
- registers the device with CSSM.
-
Manage licenses:
The network administrator
- generates reports from the devices
- synchronizes reports with CSSM either automatically or manually, and
- monitors license usage and compliance status through the CSSM portal.
Guidelines for deploying Smart Licensing
Guidelines to avoid SSL communication errors
Starting with Cisco IOS XR Release 7.10.1, for secure HTTPS communication to SSM on-prem server or CSSM, either directly or via an HTTP proxy, the device validates the Common Name (CN) on the server certificate as a Fully Qualified Domain Name (FQDN). To avoid communication errors, such as "Error during SSL communication", follow these guidelines.
- You must configure the CN in the X.509 server certificate to enable FQDN validation.
- To allow certificates with IP addresses instead of FQDNs, you must configure the crypto ca fqdn-check ip-address allow command on your device.
- If HTTPS communication occurs within a Virtual Routing and Forwarding (VRF) instance, you must configure the appropriate VRF for the trustpoint using the crypto ca trustpoint Trustpool vrf vrf-name command and the HTTP client using the http client vrf vrf-name command.
On-premises deployments
An on-premises deployment is a Smart Licensing deployment model that
- allows organizations to manage product licenses internally
- avoids direct communication between managed products and CSSM over the internet, and
- requires a local license server, such as Smart Software Manager (SSM), to administer and manage devices and licenses.
Smart Software Manager (SSM) is an on-premises version of Cisco Smart Software Manager (CSSM) that
- enables organizations to manage licenses internally and choose between online or offline connectivity with Cisco
- serves as the single point of interface with CSSM for connected devices
- supports multiple local accounts, and
- enables devices to register locally and report license consumption.
SSM on-prem modes
SSM On-Prem connects with CSSM in the cloud to synchronize license consumption and usage at the desired frequency such as daily, weekly, or monthly.
These are the ways that you can connect SSM On-Prem with CSSM:
- Connected: Manage your devices on the premises. Devices register to SSM on-prem and report license consumption to CSSM.
- Disconnected: Manage your devices on premises without connecting to CSSM. SSM on-prem synchronizes to CSSM via a manual file transfer process for reporting license consumption and usage.
Report license usage
To report license usage, synchronize local accounts on SSM On-Prem with CSSM by using the Synchronization widget in the SSM On-Prem UI.
You can synchronize license usage with CSSM using any of these methods:
- Set up on-demand synchronization with CSSM using the option Synchronize now with Cisco.
- Schedule synchronization with CSSM at a specified time.
- Synchronize the license usage with CSSM, either by connecting to CSSM or by downloading and uploading files.
Steps to deploy on-premises deployment
After you order the license and set up your smart accounts in CSSM, follow these procedures for on-premises deployment:
Activate licenses on SSM on-prem
Smart Licensing on SSM on-prem server uses call home as the transport mode.
Follow these steps to activate licenses on SSM on-prem deployment.
Step 1 | Download the Smart Software Manager On-Prem software to prepare for installation on the SSM on-prem server. Refer to the SSM On-Prem User Guide to configure the SSM on-prem server and create a local account. |
Step 2 | Navigate to the Licensing workspace > Inventory > General on SSM on-prem and select Smart Call Home Registration URL. |
Step 3 | Generate a Smart Licensing token from the smart account and virtual account in CSSM to register the devices |
Step 4 | Run the license smart register token id command on your device, to register the device with the Smart Licensing token. Example:
|
Step 5 | Configure the profile profile-name command to create a Call Home destination profile. Example:
|
Step 6 | Enter the http client source-interface command to configure source interface for the HTTP client. Example:
This command is mandatory for a VRF interface. |
Step 7 | (Optional) Enter the crypto ca trustpoint command to declare the trustpoint. Example:
|
Step 8 | Run the show call-home profile all command to view the on-prem Call Home profile. Example:
|
Step 9 | Run the show license status command to verify the license status. Example:
|
What to do next
Manage licenses on SSM on-premManage licenses on SSM on-prem
To have visibility into license usage and stay compliant, you must manage the license.
Step 1 | Log into SSM On-Prem > Smart Licensing workspace to synchronize the reports from SSM On-Prem with Cisco.
| ||||||
Step 2 | Run the show license summary or show license usage commands on your device to view the license consumption details. Example:
|
Direct deployments
A direct deployment is a Smart Licensing deployment model that
- connects devices to the URL tools.cisco.com, using the internet or an HTTP proxy
- is best suited for small networks or for organizations that do not want to manage an on-premises server
- reports usage information using Smart Transport or Smart Call Home transport modes, and
- requires no on-premises server or additional configuration.
Transport modes for direct deployment
The two transport modes available for direct deployment are:
- Smart Transport: Sends Smart Licensing (JSON) messages embedded within HTTP messages between the device and CSSM.
- Smart Call Home: Sends critical system event notifications via email or web-based messages between the device and CSSM.You can also configure Call Home to collect syslog and diagnostic data, collect core dump data, or send email notifications for events. You can view your Call Home collected information with your Smart Licensing username and password at https://tools.cisco.com/sch/reports/deviceReport.do.For more information on the Smart Call Home feature, see the Smart Call Home Deployment Guide.
Direct deployment methods
Direct deployment offers the following methods:
- Direct cloud access: In this method, devices send usage information directly over the internet using either Smart Transport or Smart Call Home to CSSM.
- Direct cloud access through an HTTPS proxy: In this method, devices send usage information over the internet through a proxy server using either Smart Transport or Smart Call Home to CSSM.
Report license usage
In direct deployments, the device automatically generates reports once it’s registered with the CSSM.
Steps to deploy direct deployment
After you order the license and set up your smart accounts in CSSM, follow these procedures for direct deployment:
- You can activate licenses for direct deployment in two ways. Choose the method that meets your network requirements.
- Manage direct deployment licenses
Activate direct deployment licenses with Smart Transport
Before you begin
- Obtain necessary Smart Account and Virtual Account credentials in CSSM.
- Ensure internet connectivity or proxy access, if required.
Follow this procedure to set up direct communication between your device and CSSM using Smart Transport and activate direct deployment licenses.
Step 1 | Execute the license smart transport smart command to enable Smart Transport mode on your device. Example:
|
Step 2 | Execute the license smart url smart transport-url command to configure the transport URL. The router automatically configures the Smart URL - https://smartreceiver.cisco.com/licservice/license. Refer to the topic Guidelines for deploying Smart Licensing to avoid SSL communication errors. Example:
|
Step 3 | If you want to deploy direct cloud access through an HTTPS proxy server, then configure the license smart proxy hostname port port-number command to set up a proxy for Smart Transport mode. Skip this step for direct cloud access method. When you configure a proxy server, your device sends licensing messages to the proxy server along with the destination URL of CSSM. The proxy server then sends the message to CSSM. Example:
|
Step 4 | Generate a token from the smart account and virtual account in CSSM to register the device. |
Step 5 | Run the license smart register idtoken command to copy the token on the devices. Example:
|
Step 6 | Run the show license status command to verify the license status. Example:
|
What to do next
Manage direct deployment licensesActivate direct deployment licenses with Smart Call Home
Before you begin
- Obtain necessary Smart Account and Virtual Account credentials in CSSM.
- Ensure internet connectivity or proxy access, if required.
Follow this procedure to set up direct communication between your device and CSSM using Smart Call Home and activate direct deployment licenses.
Step 1 | Enter the call-home command to configure the Call Home profile. Example:
|
Step 2 | Enter the contact-email-address email-address command to set the default email address. You can enter up to 200 characters in email address format. Avoid using spaces in the email address. Example:
|
Step 3 | If you want to deploy direct cloud access through an HTTPS proxy server, then configure the http-proxy proxy-address port port-number command to set up a proxy for Smart Call Home. Skip this step for direct cloud access method. Example:
|
Step 4 | Configure the no destination transport-method email command in the CiscoTAC-1 profile for the Call Home service to disable the email option in this profile. Example:
|
Step 5 | Configure the profile profile-name command to create a Call Home destination profile. Example:
|
Step 6 | Execute the show call-home profile all command to view and verify the Call Home profile configurations. Example:
|
Step 7 | Generate a token from the smart account and virtual account in CSSM and copy the token to the devices with the license smart register token id command in order to register the devices. Example:
|
Step 8 | Run the show license status command to verify the license status. Example:
|
The device communicates with CSSM through Smart Call Home, and direct deployment licenses are activated and registered
What to do next
Manage direct deployment licensesManage direct deployment licenses
This task helps you periodically review license compliance and status for devices managed through direct CSSM deployment.
Follow this procedure to generate license usage reports and verify current license status for devices deployed via direct CSSM connection.
Before you begin
- Ensure you have access to the CSSM UI.
- Ensure you have administrative CLI access to your devices.
Step 1 | In the CSSM UI, navigate to Smart Software Licensing > Reports. |
Step 2 | Generate the report at Run License Report. You can save the report to the device using Export to Excel or Export to CSV. |
Step 3 | On your device, run the show license summary or show license usage commands to view the license status and summary and manage licenses. Example:
|
Offline deployments
Offline deployment is a Smart Licensing deployment model that
- allows devices to be set up without internet access
- does not require communication with Cisco, and
- is used in highly secure environments.
Offline deployments for different environments
Select the offline deployment method depending on your network environment.
- Remote environments: SSM on-prem disconnected mode is suitable for remote environments. You can enable SSM on-prem disconnected mode by turning off communication with CSSM on the SSM on-prem server. You can enable disconnected mode on the SSM on-prem server by turning off communication with CSSM. To activate licenses for SSM on-prem disconnected mode, see Activate licenses on SSM on-prem.
- Air-gapped environments: Specific License Reservation (SLR) is designed for fully air-gapped, classified environments where on-premises licensing is not an option. SLR reserves specific licenses from the smart account according to the router’s license usage and requires no ongoing communication or additional infrastructure. To use the Specific License Reservation, you must have approval and authorization from Cisco. For assistance, go to www.cisco.com/go/scm or contact your account representative. To activate SLR for your network, see Activate licenses for air-gapped environments
License reporting requirements
- SSM on-prem disconnected mode: Network administrators manually upload RUM reports that contain the license usage, to maintain trust and license compliance. This is because device communication to CSSM on On-Premises servers is disabled. See Manage licenses on SSM on-prem.
- Specific License Reservation: No license usage reporting to CSSM required due to the fully offline nature.
Activate licenses for air-gapped environments
Before you begin
- Ensure you have approval and authorization from Cisco to enable SLR.
- Contact your Cisco account representative for guidance, or visit www.cisco.com/go/scm as needed.
Follow these steps to activate SLR licenses in air-gapped deployments.
Step 1 | Contact your Cisco account representative to obtain the license reservation code. |
Step 2 | Run the license smart reservation command on the device to enable SLR on the device. Example:
|
Step 3 | Run the license smart reservation request local command on the device to generate a request code. Copy the request code and enter it at CSSM. Example:
|
Step 4 | Navigate to Smart Software Licensing > Inventory in the CSSM UI, and select the virtual account. Then, navigate to Licenses > License Reservation.
|
Step 5 | Run the license smart reservation install file command on your device to enter the file path of the authorization code. Example:
This activates SLR for your device. |
Step 6 | Run the show license reservation command to verify the license status of your device.
|
YANG data models for Smart Licensing
Cisco IOS XR supports a programmatic way of configuring and collecting operational data of a network device using YANG data models. Although configurations using CLIs are easier and human-readable, automating the configuration using model-driven programmability results in scalability.
The data models are available in the release image, and are also published in the Github repository. Navigate to the release folder of interest to view the list of supported data models and their definitions. Each data model defines a complete and cohesive model, or augments an existing data model with additional XPaths. To view a comprehensive list of the data models supported in a release, navigate to the Available-Content.md file in the repository.
You can also view the data model definitions using the YANG Data Models Navigator tool. This GUI-based and easy-to-use tool helps you explore the nuances of the data model and view the dependencies between various containers in the model. You can view the list of models supported across Cisco IOS XR releases and platforms, locate a specific model, view the containers and their respective lists, leaves, and leaf lists presented visually in a tree structure. This visual tree form helps you get insights into nodes that can help you automate your network.
To get started with using the data models, see the Programmability Configuration Guide.
The data model handles the types of requirements for smart licensing.
|
Data |
Data Model |
CLI Commands |
|---|---|---|
| Configuration data: a set of writable data that is required to configure smart licensing on the router. |
Native data model:
Cisco-IOS-XR-smart-license-cfg.yang |
|
| Operational state data: a set of data that the system obtains at run time. |
Common data model: cisco-smart-license.yang Native data model:Cisco-IOS-XR-smart- license-platform-oper.yang Cisco-IOS-XR-infra- -smartlicense-oper.yang |
|
| Actions: a set of NETCONF actions that support robust networkwide configuration transactions. |
Native data model:
Cisco-IOS-XR-smart-license-act.yang |
|
Revision History
This table provides a concise reference of Smart Licensing features, including their release information and descriptions, to help users quickly identify the evolution of capabilities and determine feature availability across releases.
|
Feature Name |
Release Information |
Feature Description |
|---|---|---|
|
Release 7.4.1 |
With this feature, you can use data models for all the smart licensing operations such as registering your device with a token, renewing token ID, deregistering device to remove the software entitlements and so on using NETCONF remote procedure calls (RPCs). The following data models are introduced: Cisco-IOS-XR-smart-license-cfg.yang cisco-smart-license.yang Cisco-IOS-XR-smartlicense-platform-oper.yang Cisco-IOS-XR-infra-smartlicense-oper.yang Cisco-IOS-XR-smart-license-act.yang You can access these data models from the Github repository. |
|
|
Release 7.4.1 |
You can now use Smart transport to communicate with CSSM. Smart transport is a transport method where a Smart Licensing (JSON) message is contained within an HTTPs message, and exchanged between a product instance and CSSM, to communicate. |
|
|
Release 7.3.1 |
Specific License Reservation (SLR) allows customers in highly secure networks to utilize smart licenses without communicating the license information to the Cisco Smart Software manager (CSSM). |