DNAC License Manager

hello and welcome to asgen tech forum in this video i'm going to touch base upon a very interesting feature in dnac called dnac license manager and this video is not about cisco smart licensing because if you want to know more about smart licensing you can watch my other two videos where i have touch base upon giving you a high high level overview of what is smart licensing and how to register to us cssm from device perspective in this video we are going to specifically talk about how you can use dnac for your license management uh so i'm i'm using cisco dnac 1339 there may be some changes coming in new versions but this video is in 1339 so let's get started with our topic dnac license manager cisco dna center license manager feature help you visualize and manage all your cisco product license including smart account licenses when you purchase um cisco sc 1610 that's where the smart licensing will start started and it is enabled by default so what is the prerequisite for this video uh you need to have a super admin access to dnac then you have your smart account and virtual account information handy with you if you don't have it check with your purchasing department smart licenses check if you have smart licenses now available in your smart account and finally we will use direct connectivity method so that means my device switches will directly reach out to cssm which is cisco software management portal directly over the internet uh to register themselves so how excuse me so what are the different steps to achieve this step one is make sure you have licenses in your smart account uh step two uh configure call home so now you have to configure your network element so make sure that you have call home transport type configured on your network element and have reachability to cssm i'll show you a config snippet how to do that make sure then come back to dnac and configure your cco and smart account credentials in dnac once you configure your cco and smart account credential within dnac dns you can go to smart account and read all the licenses and finally we will use dnac to register the devices with cssm so you can actually you have seen in my earlier video that you can go to individual devices and say smart license register and provide a token id here you can use dnac to do that all right so here is a config snippet i put on my screen i think it's better to see on you know what document rather than the device itself so what is different here here for me is i have network reachability via outbound interface that is via via the vrf you may have direct connectivity so your case may be differ but uh more or less it's same my connectivity is via vrf that's why i'm using vrf everywhere so you can see that i have my name server and dns are defined then the call home profile under call home profile i have my source interface and vrf configured so if you have vrf connectivity via vrf make sure you have configured your vrf and that that is it how to verify you can do a quick verification you can try to telnet to tools.cisco.com143 using your source interface whatever your interface you are using to reach internet or cssm so this is the call home config let's talk a little bit about call home profile what is call home profile you can see that we have profile cisco tac one right starting um 1691 for switches and 1610 one for router default call home profile name cisco tac one is generated to assist the migration to smart license by default this profile is set up for direct uh cloud access method so what what goes into this profile if you do show call home profile and then um profile name you can say all also but i have given the profile name it will send you the it will show you the detail of the profile so profile mode is active at one point of time only one profile can be active so i have this profile active profile mode is full reporting smart licensing and you can see the frequency periodic configuration and inventory one day and the time other things alert group and all so this this goes into call home profile but this is available by default when you have your transport mode set as column what you can do at switch to validate uh i have i'm running couple of debugs on my switch if you want you can run those debugs uh to understand it more i have a debug running for http client all and uh because we are using http to go to cssm and at the same time we will be debugging smart licenses currently uh before registration if you want to check your license status show license status you can see smart licensing is enabled if you are on ios 60 version 12 16 10 an hour so your licensing will be enabled by default uh what you want to see is uh transport type this should be call home that mean uh you are you going to use this profile cisco profile and registration so status uh it may differ uh when you are not registered it may be unregistered or eval expired or anything um so but in our final demo this should go into registered state and that's that's what we will be watching you can also do couple of deworks in dnac side okay so in dnac side license manager and license services these are the two services responsible for licensing and that's what you can see maxwell apps abstract status if i filter with license these are the two license services available and i'll be running a debug on dnac so i want to capture service log for my license manager because what dnec is doing is not really shown anywhere right so i want to run some debug on dnac to help you understand that what exactly dna is doing right because you need to understand dna what what what dna does behind the scene right so now let's go to demo so for demo first we will be seeing our uh smart account and so this is this if you are not aware cisco software central again you can watch my video uh regarding smart account to make yourself familiar i'm going to go back to my smart software licensing and you can choose your smart account this is your smart account these are the different alerts related to that account you can click on inventory under inventory you have token general tab where you can create token and use this token you can download this token and go to device and say smart license register using this token but we are not going to do that we will let dn dnac handle that that now second tab is license so here is all my purchase license and in use licenses are shown here and product instances if anything is registered those products will be shown here so i'm hoping that once we have uh dnac register the network element those product instance should show up here all right let's go back to dnac and within dnac as i shown you the step one is to put cco and license manager credentials so you can go to system settings under system settings setting come to cisco credential and you can see um cco license and i can link your smart account so you can link your smart account i have already linked my smart account here using my credential you will use yours then what you have to do you have to click on this cube icon and click license manager select license manager under license manager you can see switch router wireless ice all these different product families individual accounting how many licenses you are using how many licenses you have purchased all this bar graph is shown here we are interested in all license uh that mean it is going to show all the licenses respective of their product family at the same time you can perform action so let's filter our device the device which we are going to work on this is my filter okay so this is the space is now much cleaner and let me log into the box itself so i am logged into my dnac let me start my dnac debug and we will go to switch here you would like to okay turn on basically everything is configured so i am not going to change any configuration here you can see the call home is configured and domain other things are configured so this is all set if you want to look at the version i'm running i'm running 171 and my license status is so license summary is eval expired it's unregistered state all right so let's go ahead and register it using dnac click on select your device click on action manage smart license there are other things which you can use like changing the dnac license level virtual account and other things if you have air gap solution you can use manage license reservation and convert your traditional license into smart one for these but we are interested in manage smart licenses click on register select your virtual account you i want to register now so confirm saved all right and i have some tasks going on previously so it may not be really useful so let's go back and check in device itself so you can see that dnac is trying to log in and here my smart account registration started so it's progressing and registration successful here you can see it is pretty good yes it was fast uh very fast what i thought better than that all right so let's verify again show license status and you can see fantastic registration status is registered and we are compliance very nice so this was a quick one let me go back to product central and see if product instances can populate absolutely absolutely you can see the product instance is populated here and if we go to general you can see token created by cisco dna center that mean we i didn't have to create a manual token here cisco dnac logged into my cssm created a token and used that token to register this network element and i can show you why i was running dnac logs because dnac logs is actually using that token so this is the token you can see we start with ey ends with uh something ou and this is the token start with this is the token used by dnac this log is a little cluttered but i'm sure if you spend time you can figure it out yes so i don't want to stretch the video anymore uh i'm going to stop the video right now there are other features you can play around like uh change dna license you can change the license level from essential to advantage most of most of the license within sda require advantage so you may have you may run in the case where your network devices are running essential so you can change the advan license level and that may require a reboot other options you can change the virtual account and if you have air gap solution that means dnac cannot sorry network element cannot reach directly to cssm over internet connection you can use license reservation model so this is for now i hope you are finding my video useful please feel free to provide comment um and suggestions thank you

Channel: SDN TechForum

Views: 1,171

Keywords: Networking, sdntechforum, monitoring, cisco

Id: B-uttij-l10

Length: 13min 42sec (822 seconds)

Published: Mon Dec 07 2020