Smart Licensing Offline Activation

[Psmurali89]

Hi All, 

I have a CSSM server in DC with available licenses. I have few ASR 920 routers in another building which dont have any internet access. Is there any way to license this ASR's without connecting to internet? I do see there is an option to do offline licensing for Catalyst switches but cant find any option to do for ASR's. 

[liviu.gheorghe]

Hello @Psmurali89 ,

yes, the feature is called Specific License Registration and it works for IOS XE devices that reside in air-gapped networks.

There are two variations on the way SLR is configured on your device depending if IOS XE version is lower or greater than 17.3.2a.

Take a look at the following link for exact procedure on implementing SLR.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst_slr/b-169-9000-series-SLR-cg/b-169-9000-series-SLR-cg_chapter_00.html

Hope this helps.

[Psmurali89]

Thats very helpful, thank you very much. Do we have similar option for FMC as well? 

[liviu.gheorghe]

Yes, you can use SLR on FMC also. Take a look at the exact procedure to implement this: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/710/management-center-admin-71/system-licenses.html#id_79548

[Psmurali89]

Thank you. I tried to do the SLR in ASR920 router today but there is no such option in that router as per the instructions. The IOS version in ASR is 17.6.x. I noticed that any version above 17.3.2a, Smart Licensing Using Policy was introduced. I dont fully get this and i cant find anything specific related to this? 

For FMC, i tried to log on to my virtual account and under licenses, I dont see License Reservation button.. Is it something i need to check with Cisco? 

[liviu.gheorghe]

Like I said in my firs post, starting with 17.3.2a Cisco changed a little the way you configure SLR. Take a look at the following link for details: https://www.cisco.com/c/en/us/td/docs/routers/sl_using_policy/b-sl-using-policy/how_to_configure_workflows.html#Cisco_Concept.dita_7057e18c-3c69-4d91-841b-0b5beb7a2d88

If your company has multiple virtual accounts and you are not an admin for your virtual account, I would check what rights you have on your account.

I am an admin on our VA and I can see the "License Reservation..." without a problem - screenshot attached.

[Psmurali89]

Thank you for this.. I have asked for admin account details. 

Meanwhile i see this below procedure. Does this procedure require FMC to have internet access? 

https://www.youtube.com/watch?v=QkxqSRO10NE

[liviu.gheorghe]

Yes, the video describes the procedure to enrol the FMC in Cisco Smart Licenses portal for which the FMC will need Internet access after the registration is complete.

[Psmurali89]

Thank you very much for your input which is very helpful. I spoke to the account admin and got the permission now. 

So i think the FMC itself dont have the license, its the FTD base features license is what i need to add FTD to FMC?