Co-authored by Lisa Morway, Enterprise Software Marketing, Cisco

1. Cisco License Active Not In Use
2. Cisco License Manager

By now, you have probably heard of Cisco’s new approach to software licensing. Smart Licensing was created to simplify the customer experience and provide greater insight into software license ownership and consumption so you know what you own and how it is being used. Gone are the days of lost or unknown PAKs. Cisco Smart Licensing establishes a pool of licenses or entitlements that can be used across the entire organization in a flexible and automated manner. But what does this mean for you? Let’s take a look at five common myths about Cisco Smart Licensing and the truth behind them.

Myth #1: Smart Licenses require daily Internet access to validate the license.

What are the different types of licenses in the Cisco Catalyst 3850? There are two main types of Cisco Catalyst 3850 license: permanent RTU license and evaluation RTU license. These are available for both image-based licensing (IP Base or IP Services) and AP count licensing. A permanent RTU license is a paid license, with no expiration date.

Cisco license is a privately held information technology website established in 2015. Here in Cisco license, we aim to offer our customers a variety of the latest Cisco devices and licenses by having a group of certified consultants with vast experience in Information Technology. Cisco User Connect Licensing (UCL) provides per-user based licensing for individual Cisco Unified Communications applications, including the applications server software, user licensing, and a soft client. User Connect Licensing is available in Essential, Basic, Enhanced, and Enhanced Plus versions. A new way to think about software licensing. A Smart Account allows you to centrally organize your licenses, devices, and specific license agreements based on your business needs. CSSM is an intuitive portal where you can activate and manage all of your Cisco licenses. An On-Prem version is available for security-sensitive customers. C9124AX CISCO DNA Advantage 1 Year Term Licenses For Trackin: 49: CON-NCDUS-AIRDLIC2: $59: CMB SSPT SWSS 1.4 Aironet CISCO DNA Advantage Licenses: 50: CON-NCJUS-AIRDLIC2: $84: CMB SSPT SWSS 2 Aironet CISCO DNA Advantage Licenses: 51: CON-NCHUS-AIRDLIC2: $76: CMB SSPT SWSS 1.8 Aironet CISCO DNA Advantage Licenses: 52: CON-NCFUS-AIRDLIC2: $67.

Truth: Smart Licenses use direct cloud access through the Cisco Smart Software Manager as the default method to send license information over the Internet. This method provides real-time visibility and management of your licenses, helping you optimize usage, lower operational costs and ensure compliance. Validation typically occurs every 30 days. Servers that change licensing needs frequently, like Call Managers, may check in more often. Why? This allows you to detect devices that are not using licenses anymore, so you can reallocate them where needed.

Smart Licensing also supports offline options. For instance, customers may choose to manage their licenses on a local satellite server that periodically connects to Cisco to exchange information. This exchange can be automatic or manual and takes place in a time frame that works for you up to one year, although every 30 days is recommended.

Cisco License Active Not In Use

Myth #2: If a device using a Smart License does not check-in within 30 days, there will be a loss in functionality.

Truth: If a device has not communicated within 30 days, an alert will be sent notifying the user that the device has not been used. After 90 days with no communication, the license usage is released, however, the device itself will continue to run in an “Authorization Expired” state until the ID certificate is revoked, which is one year after the last communication. At this point, the product returns to evaluation mode under the terms of the particular product’s evaluation policy.

Myth #3: Smart Licenses share the details of customer business interactions, type of network traffic and other customer data with Cisco.

Truth: Smart Licensing only requires information that is absolutely essential to provide accurate licensing status and ensure the communications are unaltered. This information is generally limited to the serial number or unique identifier of the device, licenses and quantities consumed by the device, and which license pool is being used. Any other information (for example host name) can be removed from communications from the product itself by looking for the privacy configurations in the product configuration guide, or in the Data Privacy settings if using Cisco Smart Software Manager satellite.

Myth #4: Using Smart Licensing introduces security risks.

Truth: With Smart Licensing, you control the level of security required for your environment. There are multiple options for usage reporting—Cisco understands that there is not a “one size fits all” approach when it comes to security. Customers may choose one deployment option or a mix and match approach of the various deployment options based on what is most convenient for them. The simplest deployment method is direct cloud access where the Cisco product sends usage information directly over the Internet or through a HTTP Proxy Server. For a higher degree of security, customers may choose on-premises license management where Cisco products send usage information to a locally installed VM-based satellite server which replicates the cloud-based user experience but keeps all communication on the customer premises. Cisco also offers full offline access through License Reservations. In this environment, all license changes are processed manually.

Myth #5: With Smart Licensing, you are handing over the keys to Cisco allowing them to poll a customer’s network and send down commands.

Truth: With Cisco Smart Licensing, communications can never be initiated by Cisco. All communications are initiated by the product itself in the customer’s environment when the licenses are first configured or if they are modified.

Cisco Smart Licensing’s streamlined software license management is like having a Fast-Pass at Disney. Customers like Smart Licensing because it gives them a complete view of their assets from a single interface, and it provides the ability to move licenses across devices, when and where they are needed.

To find out more about Smart Licensing, go to: www.cisco.com/go/smartlicensing.

Cisco License Manager

When we talk about the Layer 2 or Layer 3 switching, we should know the main Cisco IOS Software feature licenses. And the Layer 2 and layer 3 switching seem a hot and popular topics discussed in Cisco switch users.

How to deal with the problems about the Layer 2 or Layer 3 Switching?How to choose and upgrade yourCisco IOS Software Feature License?

In this article, we will share Steven Song’s summary about the Cisco IOS Software Licenses for Layer 2 or Layer 3 Switching, which tell the main differences of Cisco IOS Software feature licenses for switching.

There are 4 common Cisco IOS Software feature licenses for Cisco Catalyst 2K and 3K switches.

LAN Lite:Enterprise EntryLevel Layer 2 Switching
LAN Base: Enterprise Access Layer 2 Switching
IP Base: Enterprise Access Layer 3 Switching
IP Services: Advanced Layer 3 Switching

To be specific, we will concentrate on these popular Cisco Catalyst switches: Cisco Catalyst 2960, Catalyst 2960-S, Catalyst 3560-X and Catalyst 3750-X switches.

LAN Lite License: Cisco Catalyst 2960 and 2960-S Series Switches

LAN Lite and LAN Base are two common licenses for the 2960 and 2960-S switches. As its name suggests, LAN Lite is an entry level license for enterprise layer 2 access switches with many useful features including 802.1Q trunking, (M)STP, STP extensions, CDP, DTP, UDLD, VTPv2, PAGP/LACP, and LLDP. It also supports important security features such as TACACS+, RADIUS, port security, 802.1X and DHCP snooping. At this level, this license does not provide layer 3 routing capabilities. Nor does it have advanced security and management capabilities such as Dynamic ARP Inspection and advanced QoS beyond some basic functions, for example priority queuing.

Related:

Introducing the New Cisco Catalyst 2960-L LAN Lite Series Switches

LAN Base License: Cisco Catalyst 2960, 2960-S, 3560-X, and 3750-X Series Switches

LAN Base is a powerful license for layer 2 access switches. Its broad range of access features covers all LAN Lite capabilities plus more robust features such as VTPv3 and FlexLinks. VTP version 3 offers better administrative control over VLAN topology information sharing to reduce unintended or disruptive changes. It also adds more VLAN environment support including expanded ISL VLAN support range. FlexLinks increase Layer 2 resiliency by adding a pair of fast converging active and backup links between access and distribution switches. LAN Base allows layer 3 routing by adding static routing support. Many strong security capabilities are added in LAN Base, too. Examples include Flexible Authentication, Radius Change of Authorization and advanced 802.1X features. On the management side, a long list of capabilities becomes available in LAN Base including a wider range of MIBs, Ingress policing, Trust Boundary, AutoQoS, and DSCP mapping.

If you have a basic layer 2 access networks with essentially no routing needs and no advanced security or management requirements, you might want to consider LAN Lite. For most enterprise layer 2 networks, LAN Base is a minimum requirement. It gives you a robust layer 2 access network with excellent network manageability, security and user experience.

Q: “What are the advantages of Cisco Catalyst 2960 Series Switches with the LAN Base software relative to Cisco Catalyst 2960 Series Switches with the LAN Lite software?”

A: Cisco Catalyst 2960 LAN Base switches deliver intelligent services for branch offices and wiring closets. The LAN Base IOS software supports enhanced Layer 2+ security, quality of service (QoS), availability, and scalable management to enable new converged applications. Catalyst 2960 LAN Base switches include both 10/100 Fast Ethernet and 10/100/1000 Gigabit Ethernet connectivity in 8-, 24-, and 48-port configurations.

Cisco Catalyst 2960 LAN Lite switches are for entry-level branch office and wiring closet networks. They simplify the migration from nonintelligent hubs and unmanaged switches to a fully scalable and reliable network. The LAN Lite IOS software supports standard Layer 2 security, QoS, and availability while lowering the network total cost of ownership. Catalyst 2960 LAN Lite switches deliver 10/100 Fast Ethernet connectivity in 24- and 48-port configurations.

All Cisco Catalyst 2960 Series Switches have technical support service options available through Cisco SMARTNetservice. All come with a Limited Lifetime Hardware Warranty, and LAN Base and LAN Lite software updates are provided at no additional cost.

Layer 3 Licenses-IP Base and IP Services Licenses

IP Base License: Cisco Catalyst 3560-X and 3750-X Series Switches

Dynamic routing provides network scalability, adaptability and resiliency. IP Base is a baseline enterprise services license for the 3560-X and 3750-X switches with dynamic routing support. It includes all layer 2 functionalities covered by the LAN Base license, plus an impressive list of layer 3 capabilities including static routing, RIP, EIGRP stub, Protocol Independent Multicast (PIM) stub and OSPF for Routed Access. Here EIGRP stub means that the switch participates in EIGRP routing as a stub and the EIGRP routes will not be extended to any downstream devices connecting to the switch. Also, notice that OSPF for Routed Access is designed specifically to extend Layer 3 routing capabilities to the wiring closet. It supports only one OSPFv2 and one OSPFv3 instance, with a maximum number of 200 dynamically learned routes. On the security front, a huge number of network security features are delivered in IP Base. Examples include ACLs, Private VLANs, TrustSec SXP, and IEEE 802.1AE (also known as MACsec). A new and exciting security feature is device sensor. It is part of the IOS software running on a switch which collects certain endpoint device attributes and sends such info to the Cisco Identify Services Engine (ISE) through RADIUS accounting packets. Cisco ISE then applies the appropriate policies as part of the Bring Your Own Device (BYOD) solution. In addition, new management capabilities have been added to the IP Base image. A good example is Embedded Event Manager (EEM). This is a policy-based framework that allows you to customize a script for real-time network event detection and onboard automation. Also, medianet support gives you the ability to troubleshoot and customize business applications such as video-based collaborations.

IP Services License: Cisco Catalyst 3560-X, and 3750-X Series Switches

IP Services is your full enterprise services license. It supports everything delivered by IP Base. It then adds further capabilities to enable a high-quality user experience that one expects in the next-generation workplace. At the top of the list are full capabilities of EIGRP and OSPF routing protocols with no restrictions on network topology or routing table size. In addition, the BGP routing protocol is supported which is not part of IP Base. Another important area is IPv6 support. IP Services provides OSPFv3 and EIGRP for IPv6 which are not available in IP Base. As many customers are running out of IPv4 addresses, IPv6 support is rapidly becoming a high priority requirement for the networks. Yet another important area is full scale support for PIM for IP multicast routing, including PIM sparse mode (PIM-SM), PIM dense mode (PIM-DM), PIM sparse-dense mode and Source Specific Multicast (SSM). The full PIM routing support greatly improves network efficiency as multimedia, interactive video and business collaborations generate exponential traffic growth. Here’s another important enhancement that IP Services enables: VRF-lite support is not in IP Base but it is in IP Services. As you may recall, VRF-lite is a good way to segment a physical network into multiple logical networks for network virtualization. Additional IP Services capabilities include Web Cache Coordination Protocol (WCCP) and policy-based routing (PRB) support.

Now let’s show some information on various license SKUs, then you can easily recognize them.

For Catalyst 2960 and 2960S switches, the SKU group ending with
-S represents LAN Lite
-L represents LAN Base

For Catalyst 3560-X and 3750-X switches, the SKU group ending with
-L represents LAN base
-S represents IP Base
-E represents IP Services

Here are some samples SKUs.

More Suggestions:

If you require dynamic routing for your enterprise access networks, you’ll need to begin with IP Base. It gives you full layer 2 capabilities, plus robust layer 3 features to support your access network with enhanced scale, performance and network services such as security and application optimization. IP Services takes you one step further with full scale support of unicast and multicast routing protocols, as well as critical services such as network segmentation and IPv6 support for OSPF/EIGRP to enable the full experience of the next generation workplace.

If yourinitial software choices were LAN Base or an IP Base license for your Catalyst 3560-X and 3750-X switches, you would need an upgrade license to deploy IP Services. A family of new IP Services SKUs is available (SKUs ending with –E). These new SKUs make it easy for you to deploy IP Services directly.

More Related: