#CiscoLive
Smart Licensing Using Policy
A Simplified Licensing Approach
Padma Akella, Smart Licensing Development Manager
BRKARC-1007
#CiscoLive
Agenda
• Smart Licensing Using Policy
• Cisco License Servers
• SSM Cloud (Direct)
• SSM On-Premise
• Controller Model
• Deploying Smart Licensing using Policy
• Upgrading Existing Products Scenarios
• Deploying New Product Scenarios
• Demo
• References
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Smart Licensing
Using Policy
Introduction - What is Smart Licensing?
Smart Licensing is a flexible software licensing model
that simplifies the way you activate and manage
licenses across your organization
Easy Registration Software,
services, and
Complete Visibility devices at one
Pool of
No PAKS easy-to-use
Licenses
portal
License Pooling
License Portability
Company Specific
Share Licenses
Cost Reduction across devices
of same
Compliance Reporting Licenses can be Add users
organization
Transferred across and licenses
Virtual accounts as needed
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
What’s new?!
Licensing
UPDATE …Smart Licensing Using Policy
What? When?
• Enterprise and IoT IOS-XE products • CSSM, CSLU, XE Released: November
running 17.3.2 / 17.4.1 or later 2020
• Collab CUBE, SRST, CME on XE
products • Cisco DNAC with SL Using Policy
Support – Available Limited March 2021
• Cisco Smart Software Manager
(CSSM) • Cisco SSM On-Prem - Available March
• New Cisco Smart Licensing Utility 2021
(CSLU) How?
WHY?
• Cloud CSSM systems enabled
• Simplify licensing Experience
• Upgrade any Polaris IOS-XE product to
• Enable customers to be SW the 17.3.2 release or greater
compliant without impacting
security policies and OPEX costs • Legacy PAK, SLR, PLR keys honored
• Choose direct or offline reporting
options
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Smart Licensing Using Policy Advantages
Smart Licensing Using Policy is a simplify licensing
Experience without impacting security
policies and OPEX costs
Customer
network
Simplified Operations operations
Device just Supports
works out success never
closed
No Eval mode of box impacted by any
networks
license operation
Less Connectivity to Cisco
Eliminated Day-0 Friction
Supports Closed Networks License
** Typical
compliance is Factory shipped
Maintains regulatory complianceCustomer reaction Connectivity of the managed on- perpetual
to new approach device to the change versus licenses are
internet is not acquire before use reported at
required factory – not at
customer
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Smart Licensing Simplified
ü Polaris 17.3.2 or above
No change to the ordering processes of HW and SW
THREE IMPORTANT CHANGES
No EVAL @ product Flexible Reporting Send Cisco a report
boot, No registration Model with SW license use
per device only on-change or per
policy
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Software License Using Policy – Basics DNA_Adv 3/12/2020 4/19/2020
…..
…..
Use Report
Device records usage reports (RUM Reports)
Created
Factory- Cisco
reporting Smart
Account Reports sent to Cisco for compliance
operations
Direct- Air-Gapped Support
Factory / Direct / Off-Line
reporting License servers (CSLU, CSSM On-Prem, DNAC)
Reporting via
• CSLU
CSLU • DNAC [LA]
• CSSM On- Cloud CSSM reads reports and updates
Prem
compliance statistics
DNA_Adv 3/12/2020 4/19/2020
…..
…..
Use Report
Created
Use
Report
Created
Use
Report
Created
Day 0 friction (no eval mode, no registration,
Device Device Device
no reservations, syslog only)
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Software License Using Policy Fulfillment on
Order
CSSM
Mark as Reported Cloud
Cisco Factory
• @Cisco Factory - marked as reported and consumed in CSSM
• For Perpetual
• Never report again unless consumption changes
• On change - reporting required syslog is thrown and customer needs to
do reporting. Once reporting is done no further reporting is needed
• For Subscription
• Reporting based on policy timer
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Software License Using Policy Key Differences
Smart Licensing Using Policy Smart Licensing Today
• No evaluation mode - No registration • Mandatory evaluation mode
• Acquire before use for export control • Registration to CSSM Cloud or On-Prem
licenses for compliance
• Usage reports are stored on device and • Acquire before use model
reported later • Licenses reported at regular intervals
• Allows unlimited usage of un-enforced • Varied reporting and enforcement
licenses
• SLR/PLR for off-line customers
• Syslog compliance
• No SLR/PLR required due to flexible
policy model
Registered Compliance
Not-
Reported Eval Un-
Reported Out of Compliance
Registered
In-Frequent
Comms Frequent Comms
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Software License Using Policy Key Differences
• License information collected in Reported
INFORMATION
SL SLP Usage Measurement (RUM) report
COLLECTED
• Usage Information transferred is:
Trusted Unique Identifier
Yes Yes • Serial number or unique identifier of the
(SUDI/SUVI/ID)
device
Licenses Consumed Yes Yes
• Licenses and quantities in use.
Organization Identifier (Token) Yes Optional *
• Start / Stop times of feature usage
Hostname Optional No
IP Address No No • Reported Usage Measurement reports
MAC Address Optional No • Are per license type – device can have
Other Smart Call Home multiple
Optional No
Information • Contains start and stop time of usage
Usage Start and Stop Times N/A** Yes • Only end time is updated if no change
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
License Servers
Options to Report Avail: Mar 2021
Limited Avail: Mar
2021
CSLU App CSSM On-
DNAC
Cisco Smart Licensing
Utility Windows Application Prem
Direct to Set-up reporting Set-up reporting Set-up reporting
CSSM cadence preferences cadence preferences cadence preferences
Report on-line Report on-line Supports both SL and IDs products running
automatically automatically SL Using reporting SLP
Report off-line via
upload to CSSM
Report off-line via
upload to CSSM
Report on-line
automatically or offline
Report on-line
automatically
3rd Party
Syncs to CSSM and
Same as current SL Doesn’t require Report off-line via
shows compliance Build your own
continuous operation upload to CSSM
locally
APIs and CLIs to
Push Operations Push and Pull Push and Pull Push and Pull
push or pull report
Operations Operations Operations
data
Cisco Smart Software Manager (CSSM) Use APIs or the web portal to report use, https://apidocs-
prod.cisco.com/explore;category=Smart_Accounts_&_Licensing_APIs;sgroup=Smart_Licensing_Using_Policy
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Cisco Software Central One stop for all your software
software.cisco.com and licensing needs
Manage Software License
Downloads and Tools
Upgrade Products
Ordering and Smart Account
EULA Tools Management
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
CSSM Changes for SL Using Policy
• Automated and manual uploading
of license usage data
• Parsing of data for compliance
displays
• Authorization code generation
and download
• Equipment shipped direct from
Cisco will be shown in CSSM
automatically
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Cisco Smart Licensing Utility (CSLU)
• Windows Application
• Supports multiple users with one
Smart Account/Virtual Account
• Use CSSM On-Prem for multi-tenancy
• Long-lived application or use on-
Admin GUI
demand
Reporting
Installer Reporting
• Simple windows install
Connects to Cisco with CCO Id
Collection
•
(Windows OS)
• Supports Push or Pull of data from
device
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Cisco Smart Licensing Utility (CSLU)
Authorizations Flow
1) Select the devices on CSLU, auth
request file generated on CSLU
2
CSSM
Smart 2) In CSSM inventory, upload the file
Account
1 of requests and assign licenses and
3
Auth Codes codes generated
CSLU
3) The file is then taken out of CSSM
and input in CSLU
4) CSLU downloads file to the
devices
4
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
SSM On-Prem Support
SSM • Multi-tenancy supported
Cloud
Usage
• On-Prem stores and forwards usage reports
License
Data Purchases • Usage reports are forwarded, parsed and
used to show compliance data
SSM
• License Compliance Data synced back and
On-prem forth with CSSM cloud
Usage Data
• Device Registration to On-Prem Process – Two
Flavors
• Push Mode
• Send data to CSSM on-Prem from device
Device/App • Pull Mode
• Pull data from device and send to on-prem
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Cisco DNA Center License Manager
• Cisco DNA Center License Manager
adds Smart License support
• Auto registered Smart License (SL)-
enabled devices which are added to Cisco
DNA Center to be automatically registered
Platforms to the chosen virtual account.
m • Support for highly secured networks with
or
atfPl ter Systems
limited internet access by reserving
n n licenses securely from CSSM
e Ce
Op N A Products
D r e • Cisco DNA Center support for SL Using
co c t u
C i s s tr u Policy will add:
r a
Inf • CSLU type Support for retrieving and
forwarding RUM reports
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
On Device - Native REST Based Controller - APIs
Note: DLC-data is included only for all-reports query
• WebUI framework used to support REST APIs over HTTP/HTTPS to perform
licensing related tasks
• Get list of all RUM reports:
•GET /smartlic-service/list
• Close RUM reports:
•POST /smartlic-service/list
• Get signed and closed RUM reports:
•GET /smartlic-service/list
•GET /smartlic-service/all-reports
•GET /smartlic-service/days/<n> (90 days default)
•GET /smartlic-service/rum-report-id?udi=<pid:xxx,sn:yyy>&start-report-
id=<nnn>&end-report-id=<mmm>
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Deploying Smart
Licensing Using
Policy
Topology: PI Directly Connected to CSSM
• Configuration Required
Connected directly to CSSM
• license smart transport smart
• license smart url
CSSM On Cloud https://smartreceiver.cisco.com/licservice/license
• Establish Trust
• license smart trust idtoken <token-from-cssm> all
• Same idtoken can be used on multiple
product instances
PI PI PI
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Topology: PI Connected to CSSM through CSLU
• Configuration Required
• license smart transport cslu
Connected to CSSM through CSLU
• CSLU Discovery
CSSM On Cloud
• Option 1: Using DNS to resolve cslu-local, ,
http://cslu-local:8182/cslu/v1/pi
CSLU • Option 2: Using DNS to resolve cslu-
Windows local.<domain_name>
• Option 3: CSLU URL with IP
PI PI PI
• license smart url cslu http://<cslu-
ip>:8182/cslu/v1/pi
• No trust establishment required
• PI reports usage periodically
• Can report usage instantly by
• license smart sync ...
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
Topology: PI Connected to CSLU,
CSLU offline from CSSM
• Configuration Required
No Connectivity to CSSM
• license smart transport cslu
CSSM On Cloud • CSLU discovery as explained elsewhere
No connection to CSSM • No Trust establishment required
CSLU
• PI reports usage periodically
Windows • Can report usage instantly by
• license smart sync ...
PI PI PI • Download usage reports from CSLU
• Upload to CSSM into appropriate SA/VA
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Topology: PI Offline reporting to CSSM
No Connectivity to CSSM & No CSLU
• No Configuration Required
• Download Usage Reports from PI
CSSM On Cloud
• license smart save usage all file
bootflash:saved_usage.txt
No connection to CSSM
• Upload to CSSM, download ACK, transfer to PI
• Copy ACK to PI, and Import it:
• license smart import
bootflash:ACK_saved_usage.txt
Auth codes generated on CSSM for enforced or
PI PI PI
•
export licenses can be imported the same way
• To avoid “communication failed” syslog:
• license smart transport off
• No need to establish trust
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Demo
References
Continue your education
View demos in the World of Solutions
Software Booth
Visit Smart Accounts and Smart Licensing @
http://cisco.com/go/licensing
Visit software.cisco.com and MCE @
https://mce.cisco.com
Attend PSOEMT-1100: Remove Day 0 Friction with Smart
Licensing Using Policy
View 2 still relevant archived Cisco Live sessions:
* BRKARC-1885: Smart Licensing: Who Moved My Cheese
* BRKARC-2034: Care and Feeding of Smart Licensing
#CiscoLive BRKARC-1007 © 2021 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Thank you
#CiscoLive
#CiscoLive
