licenciamiento de cisco Unified Call manager

licenciamiento de cucm

1. Smart Licensing and Smart Account Overview Partner Training Shashank Gopal and Neelima Parakala Mass Scale Infrastructure Group May 2022

2. AGENDA Smart Licensing Overview 2 How Smart Licensing Works Smart Licensing Deployment Options  Product Licensing States 1 2 4 5 Helpful Resources 6 Smart Account/Virtual Account Overview 3

3. Smart Licensing Overview 3 1

4. Smart Licensing is a flexible software licensing model that simplifies the way you activate and manage licenses across your organization. The Smart Licensing model makes it easier to procure, deploy, and manage your Cisco software licenses.   What is Smart Licensing ?

5. Easy Registration Complete Visibility License Pooling License Portability Company Specific Unlocked Cost Reduction Compliance Reporting Smart Licensing Advantages No PAKS Software, services, and devices at one easy-to-use portal Pool of Licenses Licenses can be Transferred across Virtual accounts Share Licenses across devices of same organization Add users and licenses as needed

6. Smart Licenses Classic vs. Smart Licenses Limited View Customers do not know what they own. PAK Registration Manually register each device. Unlock with license key. Device-Specific Licenses are specific to only one device. Complete View Software and devices in easy-to-use portal. Easy Registration No PAKs. Easy activation. Ready to use. Company-Specific Flexible licensing. Use across devices. Classic Licenses License-Locked You cannot use more than you paid for. License-Unlocked Use what you need, when you need it. 6

7. Smart Licensing Supported Platforms Access (NCS 5xx) NCS 540 / XR NCS 540 BB Series / XR NCS 560 -7 / XR NCS 560-4 / XR Cisco 8812 Cisco 8808 Cisco 8202 Cisco 8818 Cisco 8201 Core (8000) Core (NCS 5500) NCS-5504-SYS NCS- 5508-SYS NCS-5516-SYS NCS-5501-SE-SYS NCS-5501-SYS NCS 5502 / 55A1/ 55A2 Edge (ASR 9000) 9922 9912 9904 9910 9906 9010 9006 IOSXR SW on 3 rd Party Hardware Whitebox

8. How Smart Licensing Works 8 2

9. Direct Deployment Mediated Deployment Customer Order How many in use How many own Cisco Smart Software Manager Smart Account, Licensing & Entitlements Software Center IT Cloud Services Unified Communications Activate and Use Software Router Switch Firewall Video Router Switch Firewall Video Unified Communications Transport Gateway On-Prem License Server 2 Periodic Entitlement Sync (automated, or manual upload) 1 Deposit Licenses to SA Manage Licenses 3 Air-Gapped Devices 2 Drive renewals and other customer insights Smart Licensing System 9

10. Cisco Software Central software.cisco.com One stop for all your software and licensing needs

11. Cisco Software Central software.cisco.com One stop for all your software and licensing needs

12. Access CSSM portal from https://software.cisco.com/ CSSM portal allows to track activations against your license entitlements. You can create license pools (virtual accounts) to reflect your organization structure.   Through the portal, Smart Licensing offers an integrated view of the licenses you have purchased and what has been deployed in your network. You can use this data to make better purchase decisions , based on your consumption. To use CSSM, you must first set up a Smart Account.   Cisco Smart Software Manager (CSSM)

13. Smart Account / Virtual Account Overview 13 3

14. Central repository to view, store, and manage licenses across the entire organization Get access to your software licenses, hardware, and subscriptions through your Smart Account Smart Accounts are required to access and manage Smart License-enabled products A Smart Account can have one or more virtual accounts CSSM: Smart Account 14 Users & Roles Licenses Devices Subscriptions Smart Account

15. Available to Partners and Customers Used to manage deployed or in-use assets Provide visibility into license utilization and distribution Contain licenses to which the Smart Account Owner is entitled Virtual Accounts can be configured within Customer Accounts to partition licenses for reporting and management Partner Holding Account Smart Account Types Customer Smart Account Available only to Partners Provide temporary storage of unassigned orders and licenses. Licenses cannot be activated Used for B2B transactions where a product is being purchased by one partner and resold to another Customer sees the license as coming from the Partner, not Cisco or reseller Virtual Accounts can be configured within Holding Accounts to manage sales distribution within a company You can TRANSFER but not USE a license You can USE but not TRANSFER licenses between SAs

16. Smart Account Roles Responsible for approving the Smart Licensing Agreement Terms of Service Smart Account Approver Creates and manages Smart Account and all Virtual Accounts Provides user access Smart Account Admin Manages licenses within the Virtual Accounts, but does not have the ability to manage users or delete accounts Smart Account User Manages assets and provides user access to assigned virtual accounts Virtual Account Admin Manages licenses within assigned Virtual Accounts Virtual Account User

17. Cisco Smart account assignment Pop-up window on clicking the Assign Smart Account link

18. Smart account assignment to orders in CCW

19. End customer Smart account is required to submit a Deal/Quote Assigned Smart account will carry over when converting Quote to Order Lines added after Quote to Order conversion will requires Smart Account Smart account assignment in an order is like the process done for Quotes. If an order is closed, the licenses from the order can only be reassigned by engaging Cisco Support Points to note about Smart account assignment

20. How to Get a Smart Account Access smart licensing, classic PAK licensing & Enterprise Agreement licensing through the normal licensing portals Request a Smart Account Request access to an existing SA 1 2 3 Go to Cisco Software Central – software.cisco.com Select “Get a Smart Account”. Complete the profile. Automatic email is sent to Customer SA administrator 1 2 3 Go to Cisco Software Central – software.cisco.com Select “Request Access to an Existing Smart Account” Enter Domain to notify administrators 20

21. Subaccounts within your Smart Account Virtual Accounts help you organize your Cisco assets in a way that is logical for your business Virtual Accounts can be set up by : Business unit Product Geography Other destination It allows you to allocate specific licenses to different BUs or geographies while maintaining an overall view of the organizational license usage The result : Better utilization and more efficient planning. Customer Smart Account VA 2 VA 3 VA 1 Virtual Accounts (Organize by business unit, product type, geo, etc.) 21 CSSM: Virtual Accounts

22. How to Get a Virtual Account Access smart licensing, classic PAK licensing & Enterprise Agreement licensing through the normal licensing portals Request a Virtual Account Request a Virtual Account 1 2 3 Go to Cisco Software Central – software.cisco.com Select “Manage Smart Account”. Select “Virtual Accounts” Create Virtual Account 22 Request a Virtual Account 4 5 6 Add Account Settings Assign Users and Review Automatic email is sent to Customer SA administrator

23. COMPANY.COM Domain Name COMPANY.COM Smart Account North America Virtual Account EMEA Virtual Account APAC Virtual Account 23 Virtual Account Structure Examples By Geography COMPANY.COM Domain Name COMPANY.COM Smart Account Mobility Virtual Account Metro Virtual Account Managed Services Virtual Account By Division

24. Smart and Virtual Accounts Interface 24 The first license has a deficit of 1 license, while the second license has a surplus of 1 license

25. Create virtual accounts to organize and assign your assets and entitlements. Smart Account Best Practices Avoid creating multiple Customer Smart Accounts for your company as you can’t transfer licenses and devices between your Smart Accounts. While ordering, always select the Customer Smart Account or Partner Holding Account and also assign to a specific Virtual Account. Licenses can only be consumed in a Customer Smart Account

26. Smart Licensing Deployment Options 26 4

27. Direct cloud access through HTTPs Direct cloud access through an HTTPs Proxy Mediated access through an on-premises collector-connected Mediated access through an on-premises collector-disconnected Smart Licensing Deployment Options

28. Mediated access through an on-premises collector-connected and disconnected Device has Intermediate Network Access Cisco products send license usage information to a locally installed CSSM On-Prem . Periodically, exchange information with Cisco to keep CSSM On-Prem in sync. This synchronization can occur automatically in connected environments or manually in disconnected environments Cisco Smart Software Manager On-Prem

29. 29 Registration to CSSM Start Device/ platform Smart Software Licensing Enabled by Default Device / Product Registration with your Smart Account (Customer Smart Account identified) Obtain Registration Token from Cisco Smart Software Manager/On-Prem CSSM/On-Prem Register the Software with the Token from Cisco Smart Software Manager/On-Prem Software Feature usage reported to Cisco Smart Software Manager/ On-Prem CSSM/On-Prem Token Usage In-Compliance Out-of- Compliance Have licenses Need more licenses Continual reporting to Smart Software Manager or On-Prem Activation Registration License Management

30. Smart Licensing Configuration Workflow (1/14) Purchase devices and licenses from https://apps.cisco.com/Commerce/home Install CSSM On-Prem or Direct cloud access Configure Smart Call Home on device Configure Flexible Consumption Model (FCM) Create a token in CSSM On-Prem Register Smart Licensing on Device with the token Manage Licenses in CSSM On-Prem

31. Smart Licensing Configuration Workflow  (2/14) Step 1: Purchase devices and licenses from https://apps.cisco.com/Commerce/home Create your smart account while ordering the devices. Once the order is completed, you will get a link with credentials to access your Smart Account which is associated with your organization.   

32. Smart Licensing Configuration Workflow  (3/14) Step 2: Install CSSM On-Prem To download On-Prem ISO image go to: https://software.cisco.com/download/home/286285506/type/286285517/os/Linux/release/1.2 To install CSSM On-Prem go to: https://www.cisco.com/web/software/286285517/147683/Smart_Software_Manager_On-Prem_7_Installation_Guide.pdf

33. Step 2: Direct cloud access Ensure DNS is configured Device(config)# domain name-server X.X.X.X Note: Make sure “ping ipv4 tools.cisco.com ” is success. Ensure NTP is configured Device(config)# ntp update-calendar Smart Licensing Configuration Workflow  (4/14)

34. Step 3: Configure Smart Call Home on device (Direct cloud access through HTTPs) Note: Below configuration is configured by default on the device. Device(config)# call-home Device(config-call-home)# vrf < vrf -name> (Optional)   Device(config-call-home)# service active Device(config-call-home)# contact smart-licensing  Device(config-call-home)# profile CiscoTAC-1 Device(config-call-home-profile)# active  Device(config-call-home-profile)# destination transport-method http Device(config-call-home-profile)# destination address http https:// tools.cisco.com /its/service/ oddce /services/ DDCEService   Device(config)# commit  Smart Licensing Configuration Workflow  (5/14) HTTPs vrf is not configured by default, configure it if required. It specifies the source interface name to send Call Home e-mail messages. If no source interface name or source ip address is specified, an interface in the routing table is used. Applies for all deployment options.

35. Step 3: Configure Smart Call Home on device (Direct cloud access through HTTPs Proxy) Device(config)# call-home  Device(config-call-home)# vrf < vrf -name> (Optional) Device(config-call-home)# service active Device(config-call-home)# contact smart-licensing  Device(config-call-home)# http-proxy proxy-address port port-num Device(config-call-home)# profile CiscoTAC-1 Device(config-call-home-profile)# active  Device(config-call-home-profile)# destination transport-method http Device(config-call-home-profile)# destination address http https:// tools.cisco.com /its/service/ oddce /services/ DDCEService    Device(config)# commit   Smart Licensing Configuration Workflow  (6/14)

36. Step 3: Configure Smart Call Home on device (Mediated access through an On-Prem) Device(config)# call-home  Device(config-call-home)# vrf < vrf -name> (Optional) Device(config-call-home)# service active Device(config-call-home)# contact smart-licensing  Device(config-call-home)# profile CiscoTAC-1 Device(config-call-home-profile)# active  Device(config-call-home-profile)# destination transport-method http Device(config-call-home-profile)# destination address http https:// <on- prem_ip_address > / Transportgateway /services/ DeviceRequestHandler Device(config-call-home-profile)# no destination address http https:// tools.cisco.com /its/service/ oddce /services/ DDCEService Device(config)# commit  Smart Licensing Configuration Workflow  (7/14)

37. Step 3: Configure Smart Transport on device (Supported on IOSXR 7.4.1 and above) Device(config)# license smart <destination url >  Device(config)# license smart transport smart Device(config)# commit  Smart Licensing Configuration Workflow  (8/14) HTTPs

38. Smart Licensing Configuration Workflow  (9/14) Step 4: Configure Flexible Consumption Model (FCM) Smart Licensing uses Flexible Consumption licensing model. It is available at low initial investment, provides easy scalability , and allows customers to increase consumption of licenses as they expand . If your chassis supports Flexible Consumption licensing model, you must explicitly enable this model to use the licensing features. Device(config)# license smart flexible-consumption enable  Device(config)# commit 

39. Smart Licensing Configuration Workflow  (10/14) Step 5: Create a token in CSSM On-Prem or Reuse the existing token Create Registration Token Copy the token and use it to register the device

40. Smart Licensing Configuration Workflow (11/14) Step 5: Create a token in CSSM On-Prem or Reuse the existing token While creating a token we specify “ Expire After ” and “ Max. Number of Uses ”. “ Expire After ” is a required field and “ Max. Number of Uses ” is optional. “ Expire After ” is defaulted to 30 days. “ Max. Number of Uses ” is unlimited by default. The token will be expired when either the expiration or maximum uses is reached. Token can be reused any number of times before its expired.

41. Smart Licensing Configuration Workflow  (12/14) Step 6: Register Smart Licensing on Device with the token Device# license smart register idtoken YmI4YzQ4NDgtODA0OS00YmIzLWJi MjUtN2Y5MDk3MmRiMjhiLTE1OTY2NTQ2%0ANTExODJ8UzMrcDBnMTk0SVBCMVpyWDV FczZEbXk0YUFHZmR2Q3pmVDdBNmJK%0AMlFuVT0%3D%0A Fri Jun 12 16:47:26.276 UTC  License command "license smart register idtoken " completed successfully.  Device# show license status  ---------------- Registration:    Status: REGISTERED  ----------------

42. Smart Licensing Configuration Workflow  (13/14) Step 7: Manage Licenses in CSSM On-Prem

43. Smart Licensing Configuration Workflow  (14/14) Step 7: View and Manage Licenses in CSSM As a Smart Account Admin, you can create, edit, manage, and delete Virtual Accounts from Cisco Software Central by navigating to Virtual Accounts. You can transfer the licenses and product instances to different virtual accounts. Smart Accounts are available for Smart Licenses, PAK-based licenses, EA licenses, and subscription-based licenses. Reporting tools in Cisco Smart Software Manager (CSSM) allow you to download reports on Licenses, License Subscriptions and Product Instances.

44. Devices always push information to either CSSM or On-Prem, depending on configuration change. Information transferred is generally limited to - serial number or unique identifier of the device - licenses and quantities consumed by the device - Token & license pool being used by the device. What Data is Transferred ? Information Collected Required? Trusted Unique Identifier (SUDI/SUVI/ID) Yes Licenses Consumed Yes Organization Identifier (Token) Yes Hostname No IP Address No MAC Address No Other Smart Call Home Information No NOTE: hostname is sent by default , to disable sending the hostname, configure ”data-privacy” on the device to limit what is shared.

45. In direct cloud access , devices report consumption within 24 hrs on configuration change or immediately on restarting smart license server process and every 30 days to keep the data in sync . In mediated access/On-Prem , CSSM On-Prem communicates with Cisco on a cadence set up by the customer . The shortest cadence for such a communication is once a day. How often the Data is Transferred ?

46. Product Licensing States 46 5

47. Un-Configured State Smart licensing has not been configured Un-Identified State Product unregistered or yet to contact CSSM Registered state Product has been associated with a valid Smart Account Authorized state Product is using an entitlement, and the Smart Account does not have a negative balance Out of Compliance state Product is using an entitlement, but the Smart Account has a negative balance Authorization expired state Product has not communicated with Cisco within a maximum of 90 days Registered State Authorized State Out Of Compliance State Authorization Expired Remains in state while Smart Account is OOC Remains in state until Product communicates with Cisco Un-Registered Failed Register Product Consume License Note: Platforms may differ with timeouts, check with specific platform for details Smart License Product States

48. Initial registration A Registration Message is sent when Product is registered via CLI with a valid ID Token. Cisco will reply with a Cryptograph ID certificate that,  by default, is valid for one year. Depending on the CSSM response the device will then enter Authorized or Out of Compliance. The Id certificate expires at the end of one year, Renewal starts at end of 6 months and continues till last day incase of unreachability and falls back to Un-Identified state If there is a failure sending the message , the retry interval will be as follows: Every 15 minutes for 4 hours. Then every hour until successful, or Smart License is disabled via CLI Registered State Authorized State Out Of Compliance State Authorization Expired Un-Registered Failed Register Product Consume License Smart License Product States – Registered

49. On c e a product has been successfully registered and in compliance. The Virtual Account on CSSM had the correct type and number of licenses to authorize the consumption of the device’s licenses The Entitlement Response message will Indicate if the Smart Account is in or out of compliance Provide the length of time the request is valid, and the renewal interval. By default, the Licenses usage is valid for 90 days, and renewed every 30 days Registered State Authorized State Out Of Compliance State Authorization Expired Un-Registered Failed Register Product Consume License Smart License Product States – Authorized

50. In this state the customer is out of compliance with their contract They have either used too many licenses/entitlements or they are not authorized to use a particular license When in this state the device will automatically send an authorization renewal request every day To enter in to Compliance, deposit the correct number and type of licenses into your Smart Account Registered State Authorized State Out Of Compliance State Authorization Expired Un-Registered Failed Register Product Consume License Smart License Product States – Out of Compliance

51. By default the Cryptograph ID certificate Valid duration (one Year) and renewal period is sent in with the Registration Response message . CSSM will return all in use licenses for this device back to the pool If there is a communications failure sending the message, the retry interval will be as follows: One per hour until success Or until Cryptograph ID certificate expires. If the agent re-establishes communications with Cisco and receives to its request for authorization it will process that reply normally and enter into one of the established states You can try to restore authorization via – license smart renew authorization Registered State Authorized State Out Of Compliance State Authorization Expired Un-Registered Failed Register Product Consume License Smart License Product States – Authorization Expired

52. From XR7.3.1 if the you are out of compliance; you will be blocked from upgrading to major and minor releases.  You will still have access to maintenance (bug fixes) and PSIRT Below are the syslog’s displayed when device is not registered and in evaluation(Unidentified) state. However, there is no functionality impact on the device. During this state Export Controlled functionality is disabled. %SMART_LIC-3-EVAL_EXPIRED: Displayed when the evaluation period expires.  %SMART_LIC-4-EVAL_WILL_EXPIRE_WARNING: Displayed when the evaluation period is about to expire on the following schedule:  60 days before expiration. 30 days before expiration. Every week in the last month. Every day in the last week. Every hour on the last day. %SMART_LIC-4-EVAL_EXPIRED_WARNING: Displayed when the evaluation period has already expired. The device displays this warning once a week after the expiration and displays the timestamp of expiry.  Out of Compliance & Syslog's

53. Manage Smart Accounts section Creating virtual accounts and nested Virtual Accounts  User access Control   License verification  How to check licenses, what to do when out of compliance, how to audit? License migration   How to move licenses around from one virtual account to another?  Traditional Licensing Page   Smart Software Licensing Page   Demo

54. Smart Licensing is a flexible software licensing model, makes it easier to procure, deploy, and manage your Cisco software licenses Smart Licensing offers Cisco Smart Software Manager (CSSM), a centralized portal that enables you to manage all your Cisco software licenses from one centralized website. Smart Licensing provides different direct and mediated access options, to establish a connection between Cisco routers and CSSM/CSSM On-Prem. Create a registration token in CSSM and use that to register Smart Licensing on Cisco routers. View and Manage the licenses being used across your organization. Devices always push its information such as serial number or unique identifier, licenses and quantities consumed, and license pool being used to either CSSM or CSSM On-Prem. Summary

55. Helpful Resources 55 6

56. To learn more about Smart Licensing, go to: www.cisco.com/go/smartlicensing Cisco Smart Licensing White Paper Smart Licensing Overview for MIG Routing To learn more about Cisco Smart Accounts, go to: www.cisco.com/go/smartaccounts To learn more about CSSM OnPrem, go to: www.cisco.com/go/smartsatellite To set up/manage a Smart Account or manage Smart Licenses, go to: https://software.cisco.com Websites and Learning Materials YouTube Training Videos: https://www.youtube.com/channel/UCABaWsiDScw_w6kvPcDIjHw Training Videos and Demos: https://community.cisco.com/t5/smart-licensing-enterprise/software-on-demand-training-resources-for-customers/ta-p/3639797 Training 56 Resources for Smart Licensing

57. Log in to Support Case Manager (SCM): http://www.cisco.com/go/scm Select a topic that closely aligns to your issue/problem. By hovering over the topic, you can read a brief description. Click Open Case Case Management for Licensing Support (1/2) 1. 2. 3. 57

58. After clicking Open Case , you will be asked to complete a questionnaire detailing the nature of the problem. The Problem Description must include detailed explanation of issue. After completing the questionnaire, click Submit Case. Clicking Submit Case will generate a case number. Please refer this case number in all your communication with Cisco. Case Management for Licensing Support (2/2) 4. 5. 58

59. Thank You