本產品的文件集力求使用無偏見用語。針對本文件集的目的,無偏見係定義為未根據年齡、身心障礙、性別、種族身分、民族身分、性別傾向、社會經濟地位及交織性表示歧視的用語。由於本產品軟體使用者介面中硬式編碼的語言、根據 RFP 文件使用的語言,或引用第三方產品的語言,因此本文件中可能會出現例外狀況。深入瞭解思科如何使用包容性用語。
思科已使用電腦和人工技術翻譯本文件,讓全世界的使用者能夠以自己的語言理解支援內容。請注意,即使是最佳機器翻譯,也不如專業譯者翻譯的內容準確。Cisco Systems, Inc. 對這些翻譯的準確度概不負責,並建議一律查看原始英文文件(提供連結)。
本檔案介紹從Cisco IOS® XE 17.3.2及未來版本中的舊許可證機制遷移到新的「使用策略的智慧許可」機制後將會遇到的情況。
本文件沒有特定需求。
本檔案中的資訊是根據以下硬體版本:
本文中的資訊是根據特定實驗室環境內的裝置所建立。文中使用到的所有裝置皆從已清除(預設)的組態來啟動。如果您的網路運作中,請確保您瞭解任何指令可能造成的影響。
註:方法和命令可應用於其他Catalyst 9000系列交換機。有關本文檔中提到的命令和配置,請參閱相應的配置指南。
在Cisco IOS XE 17.3.2和17.4.1版本中,智慧許可功能已更改。不再需要向思科智慧軟體管理員(CSSM)註冊裝置的授權,也不會在裝置離線時從CSSM保留特定授權(SLR)。Eval許可證也已被刪除。使用智慧許可策略時,所有配置的許可證從零天(安裝Cisco IOS XE 17.3.2或更高版本映像的那一天)開始使用。之後,需要向CSSM報告許可證使用情況。
在使用策略的智慧許可中,沒有更改任何許可證,對於Catalyst 9K平台,所有許可證均未強制執行,並且用於註冊許可證的先前配置/拓撲仍然可用。假設裝置已使用以前的智慧許可證版本映像註冊或保留。在這種情況下,一旦將映像升級到受策略支援的智慧許可映像,許可證將自動轉換為零接觸策略使用智慧許可許可證。如果裝置仍在使用使用使用權許可證,或者由於智慧許可註冊/保留未完成而具有評估或評估過期映像,則存在使用適用於Windows 10的思科智慧許可證實用程式(CSLU)應用程式的新拓撲(預期將來可隨內部衛星或其他控制器(如Cisco DNAC)提供)。CSLU位於裝置和CSSM之間。它收集所有裝置的使用情況資料,並為CSSM提供離線或線上的單點聯絡人。
使用以前的智慧許可映像(所有Cat9K交換機從16.9.1開始一直到17.3.1),預設情況下啟用callhome以連線到雲中的CSSM。這需要裝置(單台交換機、堆疊或StackWise虛擬(SVL))通過管理埠或前面板下行鏈路/上行鏈路埠連線到CSSM。
如果裝置已經通過「智慧許可證傳輸callhome」或「智慧許可證傳輸smart」註冊,則轉換為使用策略的智慧許可為「零觸控」。將裝置軟體升級到支援使用策略的智慧許可的映像時,無需更改配置即可支援向後相容性。當裝置使用支援策略的Smart Licensing Using Policy映象啟動時,以前用於註冊產品例項(PI)許可證的idtoken將轉換為信任代碼,以允許裝置與CSSM之間的通訊。所有許可證顯示為使用中而不是註冊和授權中,如果智慧帳戶中有任何自定義策略,則還會安裝該策略。此時,將根據策略中的報告計畫報告裝置的許可證使用情況。
在CSSM上轉換為Smart Licensing Using Policy後,PI中每台交換機的以前的PI從使用主機名更改為UDI(PID和序列號)。對於HA系統,在活動交換機CSSM PI中都會報告使用的許可證。備用和成員交換機(如果可用)在CSSM中也有一個PI,但不報告任何許可證使用情況。如果HA系統中的活動交換機在報告期間發生更改,則現在可以在新的活動PI下看到許可證使用情況。
在show license命令輸出中,請注意,許可證是作為智慧許可的一部分進行註冊和授權的。
Switch#show license summary
Smart Licensing is ENABLED
Registration:
Status: REGISTERED
Smart Account: BU Production Test
Virtual Account: Cat9K-FranklinDT
Export-Controlled Functionality: ALLOWED
Last Renewal Attempt: None
Next Renewal Attempt: Mar 21 11:08:58 2021 PST
License Authorization:
Status: AUTHORIZED
Last Communication Attempt: SUCCEEDED
Next Communication Attempt: Oct 22 11:09:07 2020 PST
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
C9500 Network Advantage (C9500 Network Advantage) 2 AUTHORIZED
C9500-DNA-16X-A (C9500-16X DNA Advantage) 2 AUTHORIZED
Switch#show license usage
License Authorization:
Status: AUTHORIZEDon Sep 22 11:09:07 2020 PST
C9500 Network Advantage (C9500 Network Advantage):
Description: C9500 Network Advantage
Count: 2
Version: 1.0
Status: AUTHORIZED
Export status: NOT RESTRICTED
C9500-DNA-16X-A (C9500-16X DNA Advantage):
Description: C9500-DNA-16X-A
Count: 2
Version: 1.0
Status: AUTHORIZED
Export status: NOT RESTRICTED
Switch#show license status
Smart Licensing is ENABLED
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: REGISTERED
Smart Account: BU Production Test
Virtual Account: Cat9K-FranklinDT
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Sep 22 11:08:58 2020 PST
Last Renewal Attempt: None
Next Renewal Attempt: Mar 21 11:08:57 2021 PST
Registration Expires: Sep 22 11:04:23 2021 PST
License Authorization:
Status: AUTHORIZED on Sep 22 11:09:07 2020 PST
Last Communication Attempt: SUCCEEDED on Sep 22 11:09:07 2020 PST
Next Communication Attempt: Oct 22 11:09:06 2020 PST
Communication Deadline: Dec 21 11:04:34 2020 PST
Export Authorization Key:
Features Authorized:
<none>
Miscellaneus:
Custom Id: <empty>
在show license輸出中,請注意,許可證現在正在使用,而不是「Registered and Authorized」。此外,註冊idtoken已被自動用作受信任代碼,以便允許CSSM與裝置之間的通訊。此外,裝置上會安裝Cisco Default策略。
Switch#show license summary
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:*
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:*
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:**
Last ACK received: Nov 10 08:56:48 2020 PST
Next ACK deadline: Feb 08 08:56:48 2021 PST
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Dec 10 08:55:29 2020 PST
Last report push: Nov 10 08:55:29 2020 PST
Last report file write: <none>
Trust Code Installed:
Active: PID:C9500-16X,SN:FCW2233A5ZV
INSTALLED on Nov 10 08:54:48 2020 PST
Standby: PID:C9500-16X,SN:FCW2233A5ZY
INSTALLED on Nov 10 08:54:48 2020 PST
注意:在命令輸出中,策略的Enforced和Export部分不適用於C9K交換機,因為所有交換機的許可證都是Unenforced。
註:此表說明了「用法報告」部分中的每行行。
Switch#show license udi
UDI: PID:C9500-16X,SN:FCW2233A5ZV
HA UDI List:
Active:PID:C9500-16X,SN:FCW2233A5ZV
Standby:PID:C9500-16X,SN:FCW2233A5ZY
在CSSM中,顯示活動和備用UDI,而不是在 Product Instances
頁籤。
按一下活動PID以顯示許可證使用情況。按一下 High Availability
頁籤以顯示高可用性系統中包含的所有PID。
按一下Product Instance索引標籤下的Standby switch UDI,以顯示備用交換器的資訊。備用交換機不顯示任何許可證使用情況,因為裝置的許可證使用情況僅在活動交換機下顯示。
進行此轉換後,將繼續根據已安裝的策略報告許可證使用情況。
如果由於某種原因,必須將裝置降級為不支援使用智慧許可策略的先前映像,請勿更改配置並安裝該映像以降級。根據裝置降級的影象,可能需要在裝置上重新註冊。在17.3.2或17.4.1開發工作之前發佈的映像不瞭解使用策略或信任代碼的智慧許可,因此,降級後需要重新註冊。從CSSM取得idtoken並使用命令很簡單 license smart register idtoken
在裝置上。
16.9.6及更高版本、16.12.4及更高版本和17.3.1映像已新增代碼,以便識別信任代碼,並在映像降級時將其轉換回註冊識別符號。許可證將自動放回「已註冊」狀態和「已授權」狀態。
由於各種原因,客戶並不總是希望連線CSSM或外部。為此,新增了離線特定許可證保留(SLR)功能,以允許交換機符合要求。本文對此進行說明,並可以使用特定許可證保留文檔瞭解詳細資訊。SLR從16.9.1版本一直到17.3.1版本。
當安裝了特定許可證預留的裝置升級為使用策略支援的智慧許可映像時,許可證轉換是自動進行的,此時不需要執行更多操作。這些許可證現在正在使用中,表明它們以前通過SLR獲得授權。但是,在安裝的策略所指示的較遲日期,可能需要報告許可證使用情況,如本節稍後部分所示。
Switch#show license summary
Smart Licensing is ENABLED
License Reservation is ENABLED
Registration:
Status: REGISTERED - SPECIFIC LICENSE RESERVATION
Export-Controlled Functionality: ALLOWED
License Authorization:
Status: AUTHORIZED - RESERVED
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
C9500 Network Advantage (C9500 Network Advantage) 2 AUTHORIZED
C9500-DNA-16X-A (C9500-16X DNA Advantage) 2 AUTHORIZED
Switch#show license reservation
License reservation: ENABLED
Overall status:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Export-Controlled Functionality: ALLOWED
Last Confirmation code: 4bfbea7f
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Reservation status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Export-Controlled Functionality: ALLOWED
Last Confirmation code: 9394f196
Specified license reservations:
C9500 Network Advantage (C9500 Network Advantage):
Description: C9500 Network Advantage
Total reserved count: 2
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
License type: PERPETUAL
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
License type: PERPETUAL
Term Count: 1
C9500-DNA-16X-A (C9500-16X DNA Advantage):
Description: C9500-DNA-16X-A
Total reserved count: 2
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
License type: TERM
Start Date: 2020-MAR-17 UTC
End Date: 2021-MAR-17 UTC
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
License type: TERM
Start Date: 2020-MAR-17 UTC
End Date: 2021-MAR-17 UTC
Term Count: 1
Switch#show license status
Smart Licensing is ENABLED
Utility:
Status: DISABLED
License Reservation is ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: REGISTERED - SPECIFIC LICENSE RESERVATION
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Aug 31 11:07:39 2020 PDT
License Authorization:
Status: AUTHORIZED - RESERVED on Aug 31 10:15:01 2020 PDT
Export Authorization Key:
Features Authorized:
<none>
show命令顯示正在使用的許可證,並指示這些許可證以前已由特定許可證保留授權。思科預設策略正在使用中。
Switch#show license summary
License Reservation is ENABLED
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license all
Smart Licensing Status
======================
Smart Licensing is ENABLED
License Reservation is ENABLED
Export Authorization Key
Features Authorized:
<none>
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Miscellaneous:
Custom Id: <empty>
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Nov 29 10:50:05 2020 PDT
Reporting Interval: 30
Next ACK push check: <none>
Next report push: Aug 31 10:52:05 2020 PDT
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
License Usage
=============
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
Reservation:
Reservation status: SPECIFIC INSTALLED
Total reserved count: 2
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Reservation:
Reservation status: SPECIFIC INSTALLED
Total reserved count: 2
Product Information
===================
UDI: PID:C9500-16X,SN:FCW2233A5ZV
HA UDI List:
Active:PID:C9500-16X,SN:FCW2233A5ZV
Standby:PID:C9500-16X,SN:FCW2233A5ZY
Agent Version
=============
Smart Agent for Licensing: 5.0.5_rel/42
License Authorizations
======================
Overall status:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Last Confirmation code: 4bfbea7f
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Status: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
Last Confirmation code: 9394f196
Specified license reservations:
C9500 Network Advantage (C9500 Network Advantage):
Description: C9500 Network Advantage
Total reserved count: 2
Enforcement type: NOT ENFORCED
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
C9500-DNA-16X-A (C9500-16X DNA Advantage):
Description: C9500-DNA-16X-A
Total reserved count: 2
Enforcement type: NOT ENFORCED
Term information:
Active: PID:C9500-16X,SN:FCW2233A5ZV
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
Standby: PID:C9500-16X,SN:FCW2233A5ZY
Authorization type: SPECIFIC INSTALLED on Aug 31 10:15:01 2020 PDT
License type: PERPETUAL
Term Count: 1
Purchased Licenses:
No Purchase Information Available
Derived Licenses:
Entitlement Tag: regid.2017-03.com.cisco.advantagek9-Nyquist-C9500,1.0_f1563759-2e03-4a4c-bec5-5feec525a12c
Entitlement Tag: regid.2017-07.com.cisco.C9500-DNA-16X-A,1.0_ef3574d1-156b-486a-864f-9f779ff3ee49
Switch#show license status
Utility:
Status: DISABLED
License Reservation is ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneus:
Custom Id: <empty>
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Nov 29 10:50:05 2020 PDT
Reporting Interval: 30
Next ACK push check: <none>
Next report push: Aug 31 10:52:05 2020 PDT
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
在CSSM中,PI沒有更改並指示保留的許可證,因為此時沒有報告使用率。在收到策略指示或系統日誌消息之前,不需要報告使用情況。
如果正在使用Cisco DNA許可證,則以後可能會要求裝置報告使用情況。這仍可以在離線模式下完成。但是,對於HA系統,完整裝置只需要一個報告檔案。使用命令 license smart save usage
CLI,以便建立要在CSSM中使用的報告檔案。然後將檔案複製到CSSM可訪問的位置。
Switch#license smart save usage unreported file flash:RUM-usage-20200925.txt
Switch#copy flash:RUM-usage-20200925.txt tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/
Address or name of remote host [172.27.18.5]?
Destination filename [/auto/tftp-sjc-users2/byodis/RUM-usage-20200925.txt]?
!!
15128 bytes copied in 0.161 secs (93963 bytes/sec)
現在開啟CSSM,然後按一下 Report
頁籤。現在,按一下 Usage Data Files
頁籤,然後按一下 Upload Usage Data
按鈕,用於上傳使用情況報告檔案。它要求安裝虛擬帳戶,因此請確保選擇正確的帳戶。等待報告完成處理(按一下 Usage Data Files
頁籤以刷新螢幕,並檢視其是否已完成)。如果報告成功,則狀態指示無錯誤和 Download ACK
檔案可供下載並在裝置上安裝,表明已收到使用情況並報告成功。
將此下載檔案複製到裝置或裝置可訪問的某個位置,然後使用命令 license smart import
以便將ACK檔案匯入到裝置。
Switch#license smart import tftp://172.27.18.5//auto/tftp-sjc-users2/byodis/ACK_RUM-usage-20200925.txt
Import Data Successfull
以下專案的輸出 show license status
表示在正確的時間記錄了ACK。
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
License Reservation is ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneus:
Custom Id: <empty>
Usage Reporting:
Last ACK received: Sep 25 10:12:15 2020 PST
Next ACK deadline: Dec 24 10:12:15 2020 PST
Reporting push interval: 30 days
Next ACK push check: Sep 25 07:55:35 2020 PST
Next report push: Sep 25 10:12:46 2020 PST
Last report push: Sep 25 07:54:33 2020 PST
Last report file write: <none>
Trust Code Installed: <none>
在CSSM中,PI不再顯示保留的許可證,並且僅在活動PI中可見許可證使用情況。
如果映像降級為不支援使用策略的智慧許可但支援SLR的版本,則只需對映像執行降級即可。許可證保留為保留和授權 — 不需要其他任何內容。
從16.9.1版本開始,直到17.3.1版本,如果許可證未註冊或發佈,則預設情況下它們是Eval許可證。90天後,它們成為評估過期許可證。兩者均表示許可證不符合要求。 由於所有許可證均未實施,因此裝置上不會丟失任何功能功能。
使用策略的智慧許可不再具有許可證的評估狀態。因此,如果任何裝置在使用策略升級到支援智慧許可的映像時具有「評估」或「評估過期」許可證,則所有這些許可證均被視為正在使用,且應用思科預設策略。許可證不再顯示為UNAUTHORIZED或OUT OF COMPLIANCE。
Switch#show license summary
Smart Licensing is ENABLED
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: NOT ALLOWED
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 30 seconds
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
(C9500 Network Advantage) 2 EVAL MODE
(C9500-16X DNA Advantage) 2 EVAL MODE
Switch#show license usage
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 21 seconds
(C9500 Network Advantage):
Description:
Count: 2
Version: 1.0
Status: EVAL MODE
Export status: NOT RESTRICTED
(C9500-16X DNA Advantage):
Description:
Count: 2
Version: 1.0
Status: EVAL MODE
Export status: NOT RESTRICTED
Switch#show license status
Smart Licensing is ENABLED
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: NOT ALLOWED
License Authorization:
Status: EVAL MODE
Evaluation Period Remaining: 89 days, 21 hours, 37 minutes, 15 seconds
Export Authorization Key:
Features Authorized:
<none>
Miscellaneus:
Custom Id: <empty>
Switch#show license summary
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Feb 08 08:27:59 2021 PST
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Nov 10 08:29:59 2020 PST
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
作為 show license status
輸出顯示,訂閱許可證(dna-advantage和dna-essentials)需要在90天內報告。 可以使用任何支援的各種使用報告拓撲。請參閱《使用策略的智慧許可配置指南》。此外,本文結尾提供一些連結,用於提供有用的影片和文檔。此處的示例是將具有顯式配置的CSLU PUSH模型用於安裝在Windows 10電腦(筆記型電腦、伺服器、虛擬機器)上的CSLU伺服器。CSLU下載、安裝指南和使用手冊位於https://software.cisco.com/download/home/286285506/type/286327971/release/1.0.0-2。
Switch#show running-config all | include cslu
license smart transport cslu
Switch#
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#license smart url cslu http://10.24.74.180:8182/cslu/v1/pi_
Switch(config)#^Z
Switch#
Switch#write memory
Building configuration...
[OK]
Switch#show running-config all | include cslu
license smart url cslu http://10.24.74.180:8182/cslu/v1/pi
license smart transport cslu
Switch#
To force the license usage to be reported use the "license smart sync" command.
Switch#license smart sync all
Switch#
*Sep 22 10:48:36.050 PST: %SMART_LIC-5-COMM_RESTORED: Communications with Cisco Smart License Utility (CSLU) restored
Note: Use the "all" option for HA device. Use "local" option for standalone switch
Switch#show license summary
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9500 Network Advantage) 2 IN USE
dna-advantage (C9500-16X DNA Advantage) 2 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9500 Network Advantage):
Description: network-advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: network-advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9500-16X DNA Advantage):
Description: C9500-16X DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9500-16X DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: cslu
Cslu address: http://10.24.74.180:8182/cslu/v1/pi
Proxy:
Not Configured
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: Nov 10 08:56:48 2020 PST
Next ACK deadline: Feb 08 08:56:48 2021 PST
Reporting push interval: 30 days
Next ACK push check: <none>
Next report push: Dec 10 08:55:29 2020 PST
Last report push: Nov 10 08:55:29 2020 PST
Last report file write: <none>
Trust Code Installed: <none>
如果需要將映像降級到不支援SL Using Policy的映像,則許可證將恢復為Eval或Eval expired。保留原來的剩餘評估期。由於所有Cat9K許可證均未實施,因此不會丟失任何功能。
使用權(RTU)許可是從C9300、C9400和C9500到16.8.1a的初始許可方案。智慧許可在16.9.1之前不可用。
所有許可證仍然相同,但使用較舊的許可證 license right-to-use
配置命令和show命令。使用策略支援的映像將映像升級為智慧許可後,許可證即被使用,與評估/評估模式中的情況相同。如果有任何使用中的Cisco DNA許可證,則思科預設策略要求在90天內報告使用情況。可以使用使用策略映像的智慧許可使用報告支援的任何不同拓撲。
Switch#show license right-to-use summary
License Name Type Period left
------------------------------------------------
network-essentials Permanent Lifetime
dna-essentials Subscription CSSM Managed
------------------------------------------------
License Level In Use: network-essentials+dna-essentials Subscription
License Level on Reboot: network-essentials+dna-essentials Subscription
Switch#show license right-to-use
Slot# License Name Type Period left
----------------------------------------------------
1 network-essentials Permanent Lifetime
1 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription
Slot# License Name Type Period left
----------------------------------------------------
2 network-essentials Permanent Lifetime
2 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription
Slot# License Name Type Period left
----------------------------------------------------
3 network-essentials Permanent Lifetime
3 dna-essentials Subscription CSSM Managed
----------------------------------------------------
License Level on Reboot: network-essentials+dna-essentials Subscription
Switch#show license right-to-use usage
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
1 network-essentials Permanent 00:00:00 yes yes
1 network-essentials Evaluation 00:00:00 no no
1 network-essentials Subscription 00:00:00 no no
1 network-advantage Permanent 00:00:00 no no
1 network-advantage Evaluation 00:00:00 no no
1 network-advantage Subscription 00:00:00 no no
1 dna-essentials Evaluation 00:00:00 no no
1 dna-essentials Subscription 00:00:00 yes yes
1 dna-advantage Evaluation 00:00:00 no no
1 dna-advantage Subscription 00:00:00 no no
----------------------------------------------------------------------------
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
2 network-essentials Permanent 00:00:00 yes yes
2 network-essentials Evaluation 00:00:00 no no
2 network-essentials Subscription 00:00:00 no no
2 network-advantage Permanent 00:00:00 no no
2 network-advantage Evaluation 00:00:00 no no
2 network-advantage Subscription 00:00:00 no no
2 dna-essentials Evaluation 00:00:00 no no
2 dna-essentials Subscription 00:00:00 yes yes
2 dna-advantage Evaluation 00:00:00 no no
2 dna-advantage Subscription 00:00:00 no no
----------------------------------------------------------------------------
Slot# License Name Type usage-duration(y:m:d) In-Use EULA
----------------------------------------------------------------------------
3 network-essentials Permanent 00:00:00 yes yes
3 network-essentials Evaluation 00:00:00 no no
3 network-essentials Subscription 00:00:00 no no
3 network-advantage Permanent 00:00:00 no no
3 network-advantage Evaluation 00:00:00 no no
3 network-advantage Subscription 00:00:00 no no
3 dna-essentials Evaluation 00:00:00 no no
3 dna-essentials Subscription 00:00:00 yes yes
3 dna-advantage Evaluation 00:00:00 no no
3 dna-advantage Subscription 00:00:00 no no
Switch#show license summary
License Usage:
License Entitlement Tag Count Status
-----------------------------------------------------------------------------
network-advantage (C9300-24 Network Advan...) 2 IN USE
dna-advantage (C9300-24 DNA Advantage) 2 IN USE
network-advantage (C9300-48 Network Advan...) 1 IN USE
dna-advantage (C9300-48 DNA Advantage) 1 IN USE
Switch#show license usage
License Authorization:
Status: Not Applicable
network-advantage (C9300-24 Network Advantage):
Description: C9300-24 Network Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: C9300-24 Network Advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9300-24 DNA Advantage):
Description: C9300-24 DNA Advantage
Count: 2
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9300-24 DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
network-advantage (C9300-48 Network Advantage):
Description: C9300-48 Network Advantage
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: network-advantage
Feature Description: C9300-48 Network Advantage
Enforcement type: NOT ENFORCED
License type: Perpetual
dna-advantage (C9300-48 DNA Advantage):
Description: C9300-48 DNA Advantage
Count: 1
Version: 1.0
Status: IN USE
Export status: NOT RESTRICTED
Feature Name: dna-advantage
Feature Description: C9300-48 DNA Advantage
Enforcement type: NOT ENFORCED
License type: Subscription
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Merged from multiple sources.
Reporting ACK required: yes (CISCO default)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 365 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 90 (CISCO default)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 90 (CISCO default)
Reporting frequency (days): 90 (CISCO default)
Report on change (days): 90 (CISCO default)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: <none>
Next ACK deadline: Feb 08 08:27:59 2021 PST
Reporting push interval: 20 days
Next ACK push check: <none>
Next report push: Nov 10 08:29:59 2020 PST
Last report push: <none>
Last report file write: <none>
Trust Code Installed: <none>
這些show命令是在使用策略支援的映像升級到智慧許可後執行的,但尚未向CSSM報告使用情況。許可證全部轉換為使用策略的Smart Licensing IN USE和Cisco預設策略的Smart Licensing。如果使用訂閱許可證,則在90天內需要使用報告。之後,系統日誌消息從CSSM傳送。但是,由於所有C9K許可證均未強制執行,因此不會丟失任何功能功能。
需要報告時,可以使用使用策略的智慧許可配置指南中描述的任何拓撲。許可證show命令輸出與本文檔中所述的輸出類似。根據使用的拓撲,某些輸出可能不同。
如果需要將Cisco IOS XE映像降級回到16.9.1之前的映像,則會保留許可證和功能功能。但是,任何智慧許可配置都是未知且未儲存的。
如果裝置從支援RTU的映像遷移到支援策略智慧許可的映像,並在以後降級為支援17.3.2和17.4.1之前的智慧許可的映像,則這些裝置上的許可證需要執行註冊或特定許可證保留操作。
公司可能已與思科協商自定義策略。如果是這種情況,思科會將該策略安裝到智慧帳戶中。每個智慧帳戶只能有一個自定義策略,該策略應用於該智慧帳戶中的所有虛擬帳戶。若要判斷自定義策略在CSSM中是否生效,請開啟Reports檢視,然後按一下 Reporting Policy
頁籤。可以有多個版本,但是只能安裝最新版本。
如果在智慧帳戶中安裝了自定義策略,則在執行許可證使用報告時安裝該策略。可以使用exec命令檢視新的自定義策略 show license status
.顯示自定義策略,而不是思科預設策略。根據自定義策略中定義的內容,可以看到自定義值和預設值的組合。在自定義策略中未定義的任何欄位繼續具有Cisco預設值。
如果使用離線拓撲或具有CSSM拓撲的CSLU離線,則自定義策略可以從CSSM下載到裝置可訪問的檔案/位置。然後可使用exec命令將自定義策略安裝到裝置上 license smart import
.
Switch#show license status
Utility:
Status: DISABLED
Smart Licensing Using Policy:
Status: ENABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Transport Off
Policy:
Policy in use: Installed On Nov 09 09:09:36 2020 PST
Policy name: Custom Policy
Reporting ACK required: yes (Customer Policy)
Unenforced/Non-Export Perpetual Attributes:
First report requirement (days): 60 (Customer Policy)
Reporting frequency (days): 60 (Customer Policy)
Report on change (days): 60 (Customer Policy)
Unenforced/Non-Export Subscription Attributes:
First report requirement (days): 30 (Customer Policy)
Reporting frequency (days): 30 (Customer Policy)
Report on change (days): 30 (Customer Policy)
Enforced (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Export (Perpetual/Subscription) License Attributes:
First report requirement (days): 0 (CISCO default)
Reporting frequency (days): 0 (CISCO default)
Report on change (days): 0 (CISCO default)
Miscellaneous:
Custom Id: <empty>
Usage Reporting:
Last ACK received: Nov 09 09:09:36 2020 PST
Next ACK deadline: Dec 09 09:09:36 2020 PST
Reporting push interval: 30 days
Next ACK push check: Oct 29 14:39:50 2020 PST
Next report push: Nov 09 09:10:07 2020 PST
Last report push: Oct 29 14:35:51 2020 PST
Last report file write: <none>
Trust Code Installed:
Active: PID:C9300-24UX,SN:FCW2303D16Y
INSTALLED on Oct 29 14:35:12 2020 PST
Standby: PID:C9300-24U,SN:FHH2043P09E
INSTALLED on Oct 29 14:35:13 2020 PST
Member: PID:C9300-48T,SN:FCW2139L056
INSTALLED on Oct 29 14:35:13 2020 PST
修訂 | 發佈日期 | 意見 |
---|---|---|
3.0 |
09-Mar-2022 |
更新的ALT文本。 |
2.0 |
01-Dec-2021 |
在SLR更改為SLUP離線模式時更新了報告操作。 |
1.0 |
10-Dec-2020 |
初始版本 |