Just note to myself how to configure smart licencing on Cisco router. Config was tested on Cisco IOS XE Software, Version 17.03.03
VRF
vrf definition OOB-Management
rd 1:1
!
address-family ipv4
exit-address-family
!
!
interface GigabitEthernet4
description Management subnet
vrf forwarding OOB-Management
ip address 192.168.0.1 255.255.255.0
negotiation auto
!
ip route vrf OOB-Management 0.0.0.0 0.0.0.0 192.168.0.254
end
rd 1:1
is important. IT will not work without it.
DNS
ip name-server vrf OOB-Management 8.8.8.8 8.8.4.4
Call-home
service call-home
call-home
contact-email-addr [email protected]
sender from [email protected]
site-id "NEVERLAND"
source-interface GigabitEthernet4
vrf OOB-Management
profile "Smart"
reporting smart-licensing-data
destination transport-method http
no destination transport-method email
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
diagnostic-signature
profile "Smart"
Some strange syslog
%SMART_LIC-3-COMM_FAILED: Communications failure with the Cisco Smart Software Manager (CSSM) : Fail to send out Call Home HTTP message.
%CALL_HOME-5-SL_MESSAGE_FAILED: Fail to send out Smart Licensing message to: https://tools.cisco.com/its/service/oddce/services/DDCEService (ERR 205 : Request Aborted)
Funny enough it is caused by expired CA bundle. To fix run
crypto pki trustpool import ca-bundle
If it fails, download file manually, transfer to router flash and install using
crypto pki trustpool import url flash:????.pfx
Useful commands.
- force refresh
license smart renew auth