Cisco Catalyst Center (DNA Center) License Guide
- Table of Contents
- Overview
- How to Set Up License Manager
- Supported Capabilities
- Frequently Asked Questions (FAQ)
- Does License Manager work in an air-gapped environment?
- Is there any license enforcement today?
- Why am I seeing an "Out of Compliance" notification for my device?
- How long does it take for an account added to CSSM to sync?
- Is there a limit to the number of devices that can be registered at once?
- How are Resource Utilization Management (RUM) reports generated?
- What is the policy for RUM reports?
- How can RUM reports be sent manually without internet connectivity?
- How is token registration performed with an on-prem CSSM connection?
- Does License Manager capture any SmartNet or CX contract licenses?
- How is a device identified for a license in Cisco DNA Center?
- What are the different licensing tiers in Cisco DNA Center?
- Is the DNA subscription license tied to a specific device serial number?
- Can I transfer a Cisco DNA Center license from one Catalyst 9300 device to another?
- Do third-party devices require a license to be managed in Cisco DNA Center?
- What are the prerequisites for smart registration of devices using Cisco DNA Center?
- When should I deploy Smart Satellite (On-Prem SSM) in Cisco DNA Center?
#
Table of Contents #
Overview #
The License Manager in Cisco Catalyst Center provides visibility, management, and consumption of licenses. While the Cisco Smart Software Manager (CSSM) remains the central source of truth for all Cisco licenses, the License Manager dashboard assists with maintaining compliance and staying up to date with Cisco Catalyst Center licenses. While staying compliant with licenses is essential, the License Manager does not enforce license compliance by disabling functionality. There are no set dates for when license enforcement might take place.
The Cisco Catalyst Center allows users to register multiple Smart Accounts and Virtual Accounts, although only one Smart Account can be set as the default and viewed at a time. Any changes made in either the License Manager or CSSM may take up to 24 hours to sync.
Over time, Cisco’s license models have evolved, with the Smart Licensing system introduced for switches (version 16.9.1+) and routers (version 16.10+). In software version 17.3.2+, Cisco introduced Smart Licensing Using Policy. Figure 1 in the whitepaper shows how licenses are purchased, deposited, and consumed, and smart license devices can be set to auto-register in the System Settings.
License Manager Requirements #
- Access Privileges: Requires SUPER-ADMIN-ROLE permissions and appropriate RBAC scope defined in Cisco DNA Center.
- Credentials: Collect Cisco user ID and password for the Smart Account.
- Connectivity: Cisco DNA Center must be able to reach tools.cisco.com to register the Smart Account.
- Device Management: Devices must be managed under the Inventory, assigned to a site, and have reachability to tools.cisco.com for Cisco DNA Center to apply licenses.
- Minimum Required Software Versions:
- Switches: Version 16.9.1 or above.
- Routers: IOS version 16.10 or above.
- Security: Required ports, FQDNs, and URLs must be allowed.
- Registration of Devices with Smart Licensing Using Policy: Software version 17.3.2 or above.
How to Set Up License Manager #
Step 1: Configure a Smart Account #
To set up the License Manager, first configure a Smart Account. This can be done in the Cisco Catalyst Center by registering and configuring a Smart Account. Once this is completed, Cisco DNA Center will synchronize with the Smart Account.
Step 2: Register the Smart Account #
After the Smart Account is configured, you will need to register it in the License Manager to ensure it can communicate with CSSM.
Step 3: Configure Connection Mode #
Cisco Catalyst Center offers several connection modes, allowing you to choose the one that best suits your environment.
- Direct Connection Mode: Devices communicate directly with Cisco CSSM servers.
- Proxy Mode: Devices communicate with CSSM via a proxy server.
- On-Prem SSM Mode: For air-gapped or security-sensitive environments, where a locally installed Cisco Smart Software Manager (SSM) is used to manage licenses.
Supported Capabilities #
Different versions of the License Manager support different features. The table below outlines the supported capabilities by release.
| Capability | Release Supported |
|---|---|
| Device Support: Switches, Routers, WLCs | 1.3.3.x |
| Dashboard Features: Register/De-register devices, Auto Registration | 1.3.3.x |
| Smart Licensing Using Policy | 2.2.1.x |
| API Support | 2.2.2.x |
| FQDN Configuration for Smart Proxy and On-Prem SSM | 2.2.3.x |
| License Historical Usage Report | 2.3.3.x |
| Disaster Recovery/High Availability Registration | 2.3.5.x |
| On-Prem SSM Support for SLUP Devices | Roadmap |
| Site-Based RBAC | Roadmap |
Device Registration #
License Manager supports several deployment models, including single-node, high availability (HA), and disaster recovery (DR) configurations. The table below describes the serial count and license consumption for each deployment.
| Deployment Type | Deployment Name | Serial Count | License Count in Smart Account | License Count in Active Consumption |
|---|---|---|---|---|
| Single Node | Single | 1 | 1 | 1 |
| Three-Node HA | 3N HA | 3 | 3 | 3 |
| 1N:1N:1W DR | DR | 2 | 2 | 1 |
| 3N:3N:1W HA&DR | HA & DR | 6 | 6 | 3 |
Frequently Asked Questions (FAQ) #
Does License Manager work in an air-gapped environment? #
Yes, License Manager does work in an air-gapped environment with some restrictions. Customers can set their connection mode to the On-Prem option. By deploying Smart Satellite (on-prem SSM), customers can integrate it with Cisco Catalyst Center and perform most licensing operations (except for the CCO and SLP workflows).
Is there any license enforcement today? #
Currently, there is no license enforcement. If a license becomes non-compliant, no features will be impacted. However, Cisco strongly encourages customers to keep their licenses and registrations up to date with the appropriate Smart and Virtual Accounts.
Why am I seeing an “Out of Compliance” notification for my device? #
As of release 2.3.5.x, there are appliance registration checks to ensure appliances are registered to their respective Smart and Virtual Accounts. If a device shows as out of compliance, it may be because the appliance is not registered. Refer to the Cisco DNA Center Release 2.3.5.x Release Notes and the “License Self-Serve” section for guidance on resolving the notification.
How long does it take for an account added to CSSM to sync? #
The sync should take no more than 24 hours.
Is there a limit to the number of devices that can be registered at once? #
No, there is no limit to the number of devices that can be registered in a single session.
How are Resource Utilization Management (RUM) reports generated? #
Cisco Catalyst Center generates RUM reports by collecting usage data from devices, which is then sent to CSSM unless the devices are directly connected to CSSM.
What is the policy for RUM reports? #
After Cisco Catalyst Center installation, customers have 120 days to submit an initial RUM report. After that, reports are automatically sent every 90 days, unless there is no internet connectivity.
How can RUM reports be sent manually without internet connectivity? #
Refer to the “Results” section of the “Workflow for Topology: No Connectivity to CSSM and No CSLU” for instructions on manual reporting.
How is token registration performed with an on-prem CSSM connection? #
Follow the “Smart Licensing registration with direct access on Catalyst Switch” video, or refer to the Cisco Smart Software Manager On-Prem User Guide for detailed instructions.
Does License Manager capture any SmartNet or CX contract licenses? #
No, License Manager only displays licenses related to Cisco Catalyst Center. It does not capture SmartNet or CX contract licenses.
How is a device identified for a license in Cisco DNA Center? #
A device is uniquely identified by the combination of its assigned IP address and system object ID (SysOid).
What are the different licensing tiers in Cisco DNA Center? #
Cisco DNA Center offers three subscription tiers: Cisco DNA Premier, Advantage, and Essentials. These subscriptions cover switching, wireless, and routing products and are available in 3, 5, or 7-year terms.
Is the DNA subscription license tied to a specific device serial number? #
No, Cisco DNA subscription licenses are tied to a specific product family (e.g., Catalyst 9300 48 Port) but are not tied to a specific serial number.
Can I transfer a Cisco DNA Center license from one Catalyst 9300 device to another? #
Yes, Cisco DNA licenses can be transferred between devices of the same product family and type. For example, a DNA Advantage license for a Catalyst 9300 24 Port can be used with any other Catalyst 9300 24 Port, but not with a 48 Port model.
Do third-party devices require a license to be managed in Cisco DNA Center? #
No, third-party devices do not consume any licenses in Cisco DNA Center.
What are the prerequisites for smart registration of devices using Cisco DNA Center? #
- Devices must have connectivity to tools.cisco.com.
- The device’s NTP clock must be in sync.
- The HTTPS client source interface must be correctly configured.
- Proper DNS server configuration is required.
- Cisco DNA Center must have connectivity to tools.cisco.com and cloudsso.cisco.com.
- Smart Account credentials must be added to Cisco DNA Center.
When should I deploy Smart Satellite (On-Prem SSM) in Cisco DNA Center? #
If your organization is security-sensitive or uses air-gapped networks, it is recommended to choose the On-Prem CSSM option for smart registration of devices. Before enabling the On-Prem CSSM, ensure that the Smart Satellite has been deployed and is up and running in the network.
