LICENSING on 2900/3500/3700

Document

Wed, 04/06/2016 - 03:37
Aug 8th, 2011
User Badges:
  • Cisco Employee,

Introduction

LICENSING on 2900/3500/3700

Contents

     

  •              License
  •              Temporary License
  •              2960/2960-S
  •              3560/3750, 3560-G/3750-G, 3560-V2/3750-V2
  •              3560-E / 3750-E
  •              3560-X / 3750-X
  •              Installing Software Licenses Using CLI
  •              Removing Software Licenses Using CLI
  •              License Installation on Switch Stacks.
  •              List of Commands

License

These are the 3 feature sets available on 3K platform of switches

  • LAN Base: Enterprise access Layer 2 switching features.
  • IP Base: Enterprise access Layer 3 switching features.
  • IP Services: Advanced Layer 3 switching (IPv4 and IPv6) features

(IP Services has all the feature sets that Advipservices had; advipservices is End Of Sale : http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps7077/eol_c51_519629.html)

 

- 3560-E and 3750-E Series support the IP Base and IP Services feature sets

- 3560-X and 3750-X  Series support the LAN Base, IP Base, and IP Services feature sets.

 

The  software licenses are not affected by Cisco IOS software upgrades. A  software license applies only to a specific feature set. A switch can  have more than one software license, but you can enable only one license  at a time.

- Software Activation is a feature that is preinstalled on the switch, which allows you to install the software license for a feature set.

 

- This Software Activation License is unique to a specific device. In other words, licenses are locked to the switch's unique device identifier(UDI).

 

- A unique device identifier is made up of two components: the product ID (PID) and serial number (SN). Serial number is an 11-digit number that uniquely identifies a  device. The product ID identifies the type of device. This information can be found using the "show license udi" command on the switch CLI. So when you request for a license on the switch, the first thing that you need to have is this "UDI" of the device

 

Switch# show license udi

Device#        PID                       SN                      UDI
-----------------------------------------------------------------------------------------------------------
*2        WS-C3750E-48PD-S      CAT1033R1XU     WS-C3750E-48PD-S:CAT1033R1XU
5        WS-C3750E-48PD-S      CAT1033R1KF     WS-C3750E-48PD-S:CAT1033R1KF

 

Temporary License

- A temporary software license is limited to a usage period (around 60 days). After the usage period expires, the  switch continues to use the temporary software license until it is restarted. Before it restarts, warning messages state the switch is running the feature set without a valid license. After the switch restarts, the switch uses a valid software license based on the hierarchy (ipservices>ipbase>lanbase). If the switch does not have a valid license, it uses the IP base software license.

 

Switch#show license

Index 1 Feature: ipservices

       Period left: 8  weeks 4  days    <<<<<<< Limited usage period
        License Type: Evaluation
        License State: Active, Not in Use, EULA not accepted
        License Priority: None
        License Count: Non-Counted

Index 2 Feature: ipbase

        Period left: Life time
        License Type: Permanent
        License State: Active, In Use
        License Priority: Medium
        License Count: Non-Counted

 

Here is the link that you could use to request for a temporary license:

https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys=Y

Note: On this link you should give the correct UDI of the switch (use "show license udi")

2960/2960-S

Catalyst 2960 and 2960S switches run one of these images:

 

1.   The LAN base software image: which provides enterprise-class intelligent services such as ACLs and QoS features. On a Catalyst 2960-S switch, stacking is also supported.

2.   The LAN Lite image: This image provides reduced functionality.

 

Catalyst 2960S image ships with universal image that includes cryptographic functionality. The software image on the  switch is either the LAN base or LAN Lite image, depending on the switch  model.

 

How to determine which image your switch is running on 2960?

i.   Switches running the LAN Lite image do not support the FlexStack  module. They do not have a FlexStack module slot on the rear of the  switch.(more on FlexStack: http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps6406/white_paper_c11-578928.html)

ii.   On the front of the switch, the label in the top right corner ends in –S if the switch model runs the LAN Lite image.

iii.  Enter the show version privileged EXEC command. The line that shows the  product ID also ends in either –L (if running the LAN base image) or –S  (if running the LAN Lite image). For example, WS-C2960S-48PD-L is  running LAN base; WS-C2960S-24TS-S is running LAN Lite image.

 

3560/3750, 3560G/3750G, 3560V2/3750V2

Catalyst 3750 and 3560 switches run feature-specific software releases and do not support software activation. The Catalyst 3560 switch is supported by either the IP base image or the IP services  image. Hence the show license command doesn't work.

 

3560G#show license
             ^
% Invalid input detected at '^' marker.

3560G#show license ?
% Unrecognized command

3560E / 3750E

Catalyst 3750-E and 3560-E switches run the universal software image that has the Cisco IOS code for multiple feature sets (ipbase & ipservices). To enable a specific feature set, you must use the software activation feature to install the software license for  that feature set. Catalyst 3750-E and 3560-E switches support either  the noncryptographic or the cryptographic(k9 image) universal software  image.

 

They support two software feature sets: IP Base and IP Services

Beginning with Cisco IOS Release 12.2(46)SE, the switches support these features:

            - Temporary software licenses

            - Rehosting a software license

            - Cisco License Call Home

Note:

If  the switch is running a software image earlier than Cisco IOS  12.2(46)SE, to run IP base feature - remove the IP services license from  the switch, save the switch running configuration, and reload the  switch. If the switch is running Cisco IOS Release 12.2(46)SE or later,  enter thelicense boot level ipbase privileged EXEC command, save the switch running configuration, and reload the switch.

 

- If all the licenses are installed on the switch, the switch uses the highest license level, the IP services feature set.

3560X / 3750X

Catalyst  3750-X/3560-X system is also loaded with a universal Cisco IOS Software  image. Universal Cisco IOS Software images contain all Cisco IOS  Software features. The level of Cisco IOS Software functionality  available is determined by the combination of one (or more) licenses  installed on the device. They support three software feature  sets: LAN Base, IP Base, and IP Services.

 

Note:

For  the Cisco Catalyst 3750-X/3560-X Series, in addition to universalk9 images, there are also images with the universalk9-npedesignation in the image name. The reason for this alternate image type  is that some countries have import regulations that require that the  device does not support any strong data-plane crypto functionality, such  as IEEE 802.1AE, in any form. To satisfy the import requirements of  those countries, this universal image does not support any strong  payload encryption (that is, it is of the nonpayload encryption type).

 

Installing Software Licenses Using CLI

Step1: Log in to the switch by using the console port, the Ethernet management port, or a Telnet session.

Step2: copy license file onto the flash: device from the tftp server.

Step3: Install the license on the switch with the following command in the privilege mode:

            license install file-sys:file-sys//lic-location

Once  the license gets installed a log message similar to this should be  seen: "%IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Next reboot level  = ipservices and License = ipservices"

     Example:

     Switch#license install flash:FDO1229V28R_20100704203238635.lic

     Installing licenses from "flash:FDO1229V28R_20100704203238635.lic"
     Extension licenses are being installed in the device with
     UDI "WS-C3560E-48PD-S:FDO1229V28R" for the following features:
             
Feature Name: ipservices
     PLEASE  READ THE  FOLLOWING TERMS  CAREFULLY. INSTALLING THE LICENSE OR
     LICENSE  KEY  PROVIDED FOR  ANY CISCO  PRODUCT  FEATURE  OR  USING SUCH
     PRODUCT  FEATURE  CONSTITUTES  YOUR  FULL ACCEPTANCE  OF  THE FOLLOWING
     TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO  BE BOUND
     BY ALL THE TERMS SET FORTH HEREIN.

     You hereby  acknowledge  and  agree that  the  product feature  license
     is terminable and that the product  feature  enabled  by  such  license
     may  be  shut  down or  terminated by  Cisco  after  expiration of  the
     applicable  term  of  the license  (e.g., 30-day  trial  period). Cisco
     reserves the  right to terminate or shut down  any such product feature
     electronically  or by  any other  means available. While alerts or such
     messages  may  be provided, it is  your sole  responsibility to monitor
     your terminable  usage of any  product  feature enabled by  the license
     and to ensure that your systems and  networks are prepared for the shut
     down of the product feature. You acknowledge  and agree that Cisco will
     not have any liability  whatsoever for  any damages, including, but not
     limited to, direct, indirect, special, or consequential damages related
     to any product  feature  being shutdown or terminated. By clicking  the
     "accept" button  or typing "yes" you are  indicating  you have read and
     agree to be bound by all the terms provided herein.

     ACCEPT? (yes/[no]): yes
     Installing...Feature:ipservices...Successful:Supported

     1/1 licenses were successfully installed

     0/1 licenses were existing licenses

     0/1 licenses were failed to install

     Switch#

     5w2d: %LICENSE-6-EULA_ACCEPTED: EULA for feature ipservices 1.0 has been accepted. UDI=WS-C3560E-48PD-S:FDO1229V28R;     StoreIndex=-1:UNKNOWN License Store
     5w2d:  %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c3560e  Next reboot level = ipservices and License =     ipservices

Step4: The license is installed once you have accepted the EULA, but to enable  the feature set after installing the license, you need to reload the  device. Before reloading the device, the next license boot level of the  switch has to be changed, use the following command to do so:

            (In config mode) - license boot level license-level [switch switch-num]

 If  the show license all command displays the license as "Active, Not in  Use, EULA not accepted," you can use the license boot level command to  enable the license and accept the end-user license agreement (EULA).

Step5: Verify if the new license was installed:

            - show version | in License|license

    Switch#show ver | in license|License
     License Level: ipservices
     License Type: Evaluation
     Next reload license Level: ipservices

             - show license detail (its very important to check if the EULA is accepted or not from the command).

     Switch#show license det

     Index: 1        Feature: ipservices                     Version: 1.0
             License Type: Evaluation
             License State: Active, In Use

                 Evaluation total period: 8  weeks 4  days
                 Evaluation period left: 8  weeks 3  days
                 Expiry date: Apr 30 1993 00:00:25

             License Priority: Low
             License Count: Non-Counted
             Store Index: 0
             Store Name: Evaluation License Storage


     Index: 2        Feature: ipbase                            Version: 1.0

             License Type: Permanent
             License State: Active, Not in Use
             License Priority: Medium
             License Count: Non-Counted
             Store Index: 0
             Store Name: Primary License Storage

 

The  above mentioned commands are sufficient for troubleshooting purposes,  however there are other commands as well that might help under different  circumstances:

- show license feature

Switch#show license feature

Feature name             Enforcement  Evaluation  Clear Allowed  Enabled
advipservices                 yes               yes              yes            yes
ipservices                       yes               yes              yes            no
ipbase                              no                 no               yes            no

(use this command to check the allowed features on the switch, as you can see this command gives you some more detail about what you could do with these features on the switch & each feature's its status)

- show license udi .
Switch#show license udi
Device#   PID                             SN                             UDI
------------------------------------------------------------------------------------------------------------------------------------
*0        WS-C3560E-48PD-S      FDO1229V28R     WS-C3560E-48PD-S:FDO1229V28R

(this command displays the Unique Device Identifier for each switch - which can be used during license generation. If you do not provide the correct UDI while requesting for a license (from TAC OR from the license portal), then you will not be able to install that license on the switch)

Removing Software Licenses Using CLI

In software releases earlier than Cisco IOS Release 12.2(46)SE, you have the license clear license-level [switch switch-num] privileged EXEC command. Use the license-level parameter to specify the software license to remove. Use the switch switch-num parameter to specify the stack member. The switch switch-num option is supported only on Catalyst 3750-E switches.

 

In Cisco IOS Release 12.2(46)SE or later, if the software license is in use (active):

  • •a.    Enter the “license boot level license-level” global configuration command to specify a license level different from the current one.
  • •b.    Restart the switch to enable new software license.
  • •c.    Enter the license clear license-level [switch switch-num] privileged EXEC command to remove previous software license.
Switch#license clear ipservices

Feature: ipservices

    1   License Type: Evaluation
        License State: Active, Not in Use, EULA accepted
            Evaluation total period: 8  weeks 4  days
            Evaluation period left: 0  minute  0  second
        License Addition: Additive
        License Count: Non-Counted
        Comment:
        Store Index: 1
        Store Name: Primary License Storage
Are you sure you want to clear? (yes/[no]): yes

Switch#

5w2d:  %LICENSE-6-REMOVE: Feature ipservices 1.0 was removed from this device.  UDI=WS-C3560E-48PD-S:FDO1229V28R; StoreIndex=1:Primary License Storage

Backing up and saving software license information—Enter the license save {credential url | url} privileged EXEC command.

License Installation On Switch Stack

https://supportforums.cisco.com/docs/DOC-16501

https://supportforums.cisco.com/thread/2080956

 List of Commands

  • •-      Show license [all/detail]
  • •-      Show license udi
  • •-      Show version | in license|License
  • •-      Show license feature
  • •-      License install flash:filename.lic
  • •-      License boot level feature-set
  • •-      License clear license-level (ex: license clear ipservices)

Feel free to add any comments or post your questions, I shall try my best to answer those queries.

Regards,

Ranganath Raju

Loading.
Sudhir Gupta Sat, 02/01/2014 - 00:38
User Badges:

can we upgrade IP Service evaluation license on  switch 3750x with LAN Base image.

WS-C3750X-24T-L - Part code.

edsge teenstra Tue, 05/26/2015 - 06:18
User Badges:

Hi Mr Raju

 

Do you know how to temporary disable a license ?

 

We are working on a the Cisco 4451 that we recently purchased , regarding the perf licence we have a question, we would like to disable the perf. licence (temporarily.) Our concern is if we do will we be able to reload the licence as before? 

Basically can we disable and load again several times ?

 

we have seen the following info in our router :

 

“To disable any technology package license, please issue the following configuration command, save configuration and reload the system. “

“Router(config)#license boot module  technology-package  disable”

 

Can you please advise ?

 

Many thanks !

Edsge

jain.manish94 Wed, 04/06/2016 - 03:37
User Badges:

LAN Base: 
IP Base: 
IP Services:


what are these please give me one example for each...

Actions

This Document

Related Content