Introduction
This document describes the steps for configuring Specific License Reservation (SLR) in FMC.
Prerequisites
Requirements
Cisco recommends that you have knowledge of these topics:
- Firepower Threat Defense
- Firepower Management Center
Components Used
- Firepower Management CenterVirtual 7.4.1
- Firepower Threat DefenseVirtual 7.2.5
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.
Prepare FMC for SLR
- If you are currently using regular Smart Licensing, de-register theFMCbefore you implement Specific License Reservation.
Note: All Smart Licenses that are currently deployed to the FMC must be returned to the pool of available licenses in your account, and you can re-use them when you implement Specific License Reservation. This operation does not impact the traffic processed by FTD.
Specific License Reservation uses the same licenses as regular Smart Licensing.
(Recommended) If you deploy theFMCpair in a high availability configuration, note that you must:
Configure high availability before you assign licenses. If you already assigned licenses to devices on the secondaryFMC, be sure tounassign them.
Ensure tounassign license on the primary andsecondary FMC before proceeding with specific license reservation.
Verify Smart Account Readiness to Deploy Specific License Reservation
Step1 | Sign in to theSmart Software Manager: https://software.cisco.com/#SmartLicensing-Inventory |
Step2 | If applicable, select the correct account from the top right corner of the page. |
Step3 | If necessary, clickInventory. |
Step4 | ClickLicenses. |
Step5 | Verify that:
|
Step6 | If any of these items is missing or incorrect, contact your account representative to resolve the problem. |
Warning: Do not continue with this process until any problems are corrected.
Configure
Enable Specific Licensing on FMC via CLI
- Log into theFMCCLIadminaccount.Entertheexpertcommand to access the Linux shell.
Execute the command to access the Specific License Reservation options:sudo manage_slr.pl
- Enable Specific License Reservation by selecting option2. Select option1 to verify SLR status.
- Select option0to exit the manage_slr utility.Typeexitto exit the Linux shell.
- Refresh the FMC Web Page,Verify that you can access theSpecific License Reservationpage in theFMCweb interface by navigating toSystem>Licenses>Specific Licenses.
Enter the Specific License Reservation Authorization Code into theFMC
- Generate the reservation request code by navigating toSystem>Licenses>Specific Licenses. ClickGenerateand make a note of theReservation Request Code.
- Generate the reservation authorization code.Go to the Smart Software Manager.
- Navigate toInventory > Licenses > License Reservation, Enter the code that you generated from the FMC into theReservation Request Codebox. ClickNext.
- SelectReserve a specific license.Scroll down andenter the number of each platform and feature license needed for your deployment underQuantity To Reserve. ClickNext.
- ClickGenerate Authorization Code.Download the Authorization Code in preparation for entering it into theFMC.
- Enter the authorization code in theFMC.In theFMC, clickBrowseto upload the text file with the authorization code that you generated from the Smart Software Manager.
ClickInstall.
- Verify that theSpecific License Reservationpage shows theUsage Authorizationstatus as authorized.
- Click theReserved Licensetab to verify the licenses selected while generating theAuthorization Code.
Assign Specific Licenses to Managed Devices
- ChooseSystem>Licenses>Specific Licenses. ClickEdit Licenses.
- Assign licenses to devices as needed, click Apply.
- Click theAssigned Licensestab and verify that your licenses are correctly installed on each device.
Manage Specific License Reservation
- In theFMC, obtain the unique product instance identifier of thisFMC, navigate toSystem>Licenses>Specific Licenses.
- Make a note of theProduct Instancevalue.
- In the Smart Software Manager, identify theFMCto update.Go to the Smart Software Manager.
- Navigate to Inventory > Product Instances,Look for a product instance that hasFPin theTypecolumn and a generic SKU (not a hostname) in theNamecolumn.
- Click theName.On the page that shows the correct UUID, chooseActions>Update Reserved Licenses.
- Update the reserved licenses as needed, clickGenerate Authorization Codeand download the Authorization Code in preparation for entering it into theFMC.
Leave theUpdate Reservationpage open. You can return to it later in this procedure.
- Update the Specific Licenses in theFMC.ChooseSystem>Licenses>Specific Licenses,clickEdit SLR andbrowseto upload the newly generated authorization code.
- After successful installation of the authorization code, make a note of theConfirmation Code.
- Enter the confirmation code in the Smart Software Manager on theUpdate Reservationpage that is intentionally left open.
- In theFMC, verify that your licenses are reserved as you expect them.
Deactivate and Return the Specific License Reservation
If you no longer need a specific license, you must return it to your Smart Account. If you want to register your Smart Licensing account, you must disable the Specific License Reservation.
This procedure releases all license entitlements associated with theFMCback to your virtual account. After you de-register, no updates or changes on licensed features are allowed.
Warning: If you do not follow all of the steps in this procedure, the license remains in an in-use state and cannot be re-used.
- In theFMCWeb interface, selectSystem>Licenses>Specific Licenses.
- Make a note of theReturn Code.
- In the Smart Software Manager, identify theFMCto update, Go to the Smart Software Manager.
- Navigate to Inventory > Product Instances,Look for a product instance that hasFPin theTypecolumn and a generic SKU (not a hostname) in theNamecolumn.
- On the page that shows the correct UUID, chooseActions>Remove.
- Enter the reservation return code that you generated from theFMCinto theRemove Product Instancedialog box.
- The specific reserved licenses are returned to the available pool in your Smart Account and thisFMCis removed from the Smart Software Manager Product Instances list.
Disable the Specific License in theFMCLinux Shell
- Log into theFMCCLIadminaccount,Entertheexpertcommand to access the Linux shell.
Execute the command to access the Specific License Reservation options:sudo manage_slr.pl
- Disable Specific License Reservation by selecting option 3. Select option0to exit.
Enterexitto exit the Linux shell.
Enterexitto exit the command line interface.
Related Information
- Cisco Secure Firewall Management Center Feature Licenses
