Just note to myself how to configure smart licencing on Cisco router. Config was tested on Cisco IOS XE Software, Version 17.03.03

VRF

vrf definition OOB-Management
 rd 1:1
 !
 address-family ipv4
 exit-address-family
!
!
interface GigabitEthernet4
 description Management subnet
 vrf forwarding OOB-Management
 ip address 192.168.0.1 255.255.255.0
 negotiation auto
!
ip route vrf OOB-Management 0.0.0.0 0.0.0.0 192.168.0.254
end

rd 1:1 is important. IT will not work without it.

DNS

ip name-server vrf OOB-Management 8.8.8.8 8.8.4.4

Call-home

service call-home
call-home
 contact-email-addr [email protected]
 sender from [email protected]
 site-id "NEVERLAND"
 source-interface GigabitEthernet4
 vrf OOB-Management
 profile "Smart"
  reporting smart-licensing-data
  destination transport-method http
  no destination transport-method email
  destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
 diagnostic-signature
  profile "Smart"

Some strange syslog

%SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart Software Manager (CSSM) : Fail to send out Call Home HTTP message.
%CALL_HOME-5-SL_MESSAGE_FAILED: Fail to send out Smart Licensing message to: https://tools.cisco.com/its/service/oddce/services/DDCEService (ERR 205 : Request Aborted)

Funny enough it is caused by expired CA bundle. To fix run crypto pki trustpool import ca-bundle If it fails, download file manually, transfer to router flash and install using crypto pki trustpool import url flash:????.pfx

Useful commands.

  • force refresh license smart renew auth

Updated: