This document discusses licensing for Cisco 2900/3500/3700 series switches. It describes the available feature sets (LAN Base, IP Base, IP Services), how to install and remove software licenses using the CLI, and license considerations for specific switch models including 2960/2960-S, 3560/3750, 3560E/3750E, and 3560X/3750X. It provides commands for checking licenses and guidelines for license installation on switch stacks.

1. LICENSING on Cisco 2900/3500/3700
Contents
 License
 Temporary License
 2960/2960-S
 3560/3750, 3560-G/3750-G, 3560-V2/3750-V2
 3560-E / 3750-E
 3560-X / 3750-X
 Installing Software Licenses Using CLI
 Removing Software Licenses Using CLI
 License Installation on Switch Stacks.
 List of Commands
License
These are the 3 feature sets available on 3K platform of switches
 LAN Base: Enterprise access Layer 2 switching features.
 IP Base: Enterprise access Layer 3 switching features.
 IP Services: Advanced Layer 3 switching (IPv4 and IPv6) features
(IP Services has all the feature sets that Advipservices had; advipservices is
End Of Sale:
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps7077/eol_c51
_519629.html)
-3560-E and 3750-E Series support the IP Base and IP Services feature sets
-3560-X and 3750-X Series support the LAN Base, IP Base, and IP Services
feature sets.
The software licenses are not affected by Cisco IOS software upgrades.
A software license applies only to a specific feature set. A switch can have
more than one software license, but you can enable only one license at a time.

2. -Software Activation is a feature that is preinstalled on the switch, which
allows you to install the software license for a feature set.
-This Software Activation License is unique to a specific device. In other
words, licenses are locked to the switch's unique device identifier(UDI).
-A unique device identifier is made up of two components: the product
ID (PID) and serial number (SN). Serial number is an 11-digit number that
uniquely identifies a device. The product ID identifies the type of device. This
information can be found using the "show license udi" command on the
switch CLI. So when you request for a license on the switch, the first thing
that you need to have is this "UDI" of the device
Switch# show license udi
Device# PID SN UDI
---------------------------------------------------------------------
--------------------------------------
*2 WS-C3750E-48PD-S CAT1033R1XU WS-C3750E-48PD-
S:CAT1033R1XU
5 WS-C3750E-48PD-S CAT1033R1KF WS-C3750E-48PD-
S:CAT1033R1KF
Temporary License
- A temporary software license is limited to a usage period (around 60
days). After the usage period expires, the switch continues to use the
temporary software license until it is restarted. Before it restarts, warning
messages state the switch is running the feature set without a valid license.
After the switch restarts, the switch uses a valid software license based on
the hierarchy (ipservices>ipbase>lanbase). If the switch does not have a
valid license, it uses the IP base software license.
Switch#show license
Index 1 Feature: ipservices
Period left: 8 weeks 4 days <<<<<<< Limited usage period
License Type: Evaluation

3. License State: Active, Not in Use, EULA not accepted
License Priority: None
License Count: Non-Counted
Index 2 Feature: ipbase
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Priority: Medium
License Count: Non-Counted
Here is the link that you could use to request for a temporary license:
https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys
=Y
Note: On this link you should give the correct UDI of the switch (use "show
license udi")
2960/2960-S
Catalyst 2960 and 2960S switches run one of these images:
1. The LAN base software image: which provides enterprise-class intelligent
services such as ACLs and QoS features. On a Catalyst 2960-S switch,
stacking is also supported.
2. The LAN Lite image: This image provides reduced functionality.
Catalyst 2960S image ships with universal image that includes cryptographic
functionality. The software image on the switch is either the LAN base or LAN
Lite image, depending on the switch model.
How to determine which image your switch is running on 2960?
i. Switches running the LAN Lite image do not support the FlexStack module.
They do not have a FlexStack module slot on the rear of the switch.(more on
FlexStack:
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps6406/white_
paper_c11-578928.html)

4. ii. On the front of the switch, the label in the top right corner ends in –S if the
switch model runs the LAN Lite image.
iii. Enter the show version privileged EXEC command. The line that shows
the product ID also ends in either –L (if running the LAN base image) or –S (if
running the LAN Lite image). For example, WS-C2960S-48PD-L is running LAN
base; WS-C2960S-24TS-S is running LAN Lite image.
3560/3750, 3560G/3750G, 3560V2/3750V2
Catalyst 3750 and 3560 switches run feature-specific software releases and
do not support software activation. The Catalyst 3560 switch is supported by
either the IP base image or the IP services image. Hence the show license
command doesn't work.
3560G#show license
^
% Invalid input detected at '^' marker.
3560G#show license ?
% Unrecognized command
3560E/3750E
Catalyst 3750-E and 3560-E switches run the universal software image that
has the Cisco IOS code for multiple feature sets (ipbase & ipservices). To
enable a specific feature set, you must use the software activation feature
to install the software license for that feature set. Catalyst 3750-E and
3560-E switches support either the noncryptographic or the cryptographic(k9
image) universal software image.
They support two software feature sets: IP Base and IP Services
Beginning with Cisco IOS Release 12.2(46)SE, the switches support these
features:
- Temporary software licenses
- Rehosting a software license
- Cisco License Call Home
Note:

5. If the switch is running a software image earlier than Cisco IOS 12.2(46)SE,
to run IP base feature - remove the IP services license from the switch, save
the switch running configuration, and reload the switch. If the switch is
running Cisco IOS Release 12.2(46)SE or later, enter thelicense boot level
ipbase privileged EXEC command, save the switch running configuration, and
reload the switch.
- If all the licenses are installed on the switch, the switch uses the highest
license level, the IP services feature set.
3560X / 3750X
Catalyst 3750-X/3560-X system is also loaded with a universal Cisco IOS
Software image. Universal Cisco IOS Software images contain all Cisco
IOS Software features. The level of Cisco IOS Software
functionality available is determined by the combination of one (or more)
licenses installed on the device. They support three software feature sets:
LAN Base, IP Base, and IP Services.
Note:
For the Cisco Catalyst 3750-X/3560-X Series, in addition to universalk9
images, there are also images with the universalk9-npedesignation in the
image name. The reason for this alternate image type is that some countries
have import regulations that require that the device does not support any
strong data-plane crypto functionality, such as IEEE 802.1AE, in any form. To
satisfy the import requirements of those countries, this universal image does
not support any strong payload encryption (that is, it is of the nonpayload
encryption type).
Installing Software Licenses Using CLI
Step1: Log in to the switch by using the console port, the Ethernet
management port, or a Telnet session.
Step2: copy license file onto the flash: device from the tftp server.
Step3: Install the license on the switch with the following command in the
privilege mode:
license install file-sys:file-sys//lic-location

6. Once the license gets installed a log message similar to this should be seen:
"%IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL:Next reboot
level = ipservices and License = ipservices"
Example:
Switch#license install flash:FDO1229V28R_20100704203238635.lic
Installing licenses from
"flash:FDO1229V28R_20100704203238635.lic"
Extension licenses are being installed in the device with
UDI "WS-C3560E-48PD-S:FDO1229V28R" for the following features:
Feature Name: ipservices
PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE
LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO PRODUCT FEATURE OR
USING SUCH
PRODUCT FEATURE CONSTITUTES YOUR FULL ACCEPTANCE OF THE
FOLLOWING
TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO
BE BOUND
BY ALL THE TERMS SET FORTH HEREIN.
You hereby acknowledge and agree that the product feature
license
is terminable and that the product feature enabled by such
license
may be shut down or terminated by Cisco after expiration
of the
applicable term of the license (e.g., 30-day trial period).
Cisco
reserves the right to terminate or shut down any such product
feature
electronically or by any other means available. While alerts
or such
messages may be provided, it is your sole responsibility to
monitor

7. your terminable usage of any product feature enabled by the
license
and to ensure that your systems and networks are prepared for
the shut
down of the product feature. You acknowledge and agree that
Cisco will
not have any liability whatsoever for any damages, including,
but not
limited to, direct, indirect, special, or consequential damages
related
to any product feature being shutdown or terminated. By
clicking the
"accept" button or typing "yes" you are indicating you have
read and
agree to be bound by all the terms provided herein.
ACCEPT? (yes/[no]): yes
Installing...Feature:ipservices...Successful:Supported
1/1 licenses were successfully installed
0/1 licenses were existing licenses
0/1 licenses were failed to install
Switch#
5w2d: %LICENSE-6-EULA_ACCEPTED: EULA for feature ipservices 1.0
has been accepted. UDI=WS-C3560E-48PD-S:FDO1229V28R; StoreIndex=-
1:UNKNOWN License Store
5w2d: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module
name = c3560e Next reboot level = ipservices and License =
ipservices
Step4: The license is installed once you have accepted the EULA, but to
enable the feature set after installing the license, you need to reload

8. the device. Before reloading the device, the next license boot level of
the switch has to be changed, use the following command to do so:
(In config mode) - license boot level license-level [switch switch-
num]
If the show license all command displays the license as "Active, Not in Use,
EULA not accepted," you can use the license boot level command to enable
the license and accept the end-user license agreement (EULA).
Step5: Verify if the new license was installed:
- show version | in License|license
Switch#show ver | in license|License
License Level: ipservices
License Type: Evaluation
Next reload license Level: ipservices
- show license detail (it’s very important to check if the EULA is accepted
or not from the command).
Switch#show license det
Index: 1 Feature: ipservices Version:
1.0
License Type: Evaluation
License State: Active, In Use
Evaluation total period: 8 weeks 4 days
Evaluation period left: 8 weeks 3 days
Expiry date: Apr 30 1993 00:00:25
License Priority: Low
License Count: Non-Counted
Store Index: 0
Store Name: Evaluation License Storage
Index: 2 Feature: ipbase
Version: 1.0

9. License Type: Permanent
License State: Active, Not in Use
License Priority: Medium
License Count: Non-Counted
Store Index: 0
Store Name: Primary License Storage
The above mentioned commands are sufficient for troubleshooting
purposes, however there are other commands as well that might help under
different circumstances:
- show license feature
Switch#show license feature
Feature name Enforcement Evaluation Clear Allowed
Enabled
advipservices yes yes yes
yes
ipservices yes yes
yes no
ipbase no no
yes no
(use this command to check the allowed features on the switch, as you can
see this command gives you some more detail about what you could do with
these features on the switch & each feature's its status)
- show license udi .
Switch#show license udi
Device# PID SN
UDI
---------------------------------------------------------------------
---------------------------------------------------------------
*0 WS-C3560E-48PD-S FDO1229V28R WS-C3560E-48PD-
S:FDO1229V28R

10. (this command displays the Unique Device Identifier for each switch - which
can be used during license generation. If you do not provide the correct UDI
while requesting for a license (from TAC OR from the license portal), then you
will not be able to install that license on the switch)
Removing Software Licenses Using CLI
In software releases earlier than Cisco IOS Release 12.2(46)SE, you have the
license clear license-level [switch switch-num] privileged EXEC command.
Use the license-level parameter to specify the software license to remove. Use
the switch switch-num parameter to specify the stack member. The switch
switch-num option is supported only on Catalyst 3750-E switches.
In Cisco IOS Release 12.2(46)SE or later, if the software license is in use
(active):
 •a. Enter the “license boot level license-level” global configuration
command to specify a license level different from the current one.
 •b. Restart the switch to enable new software license.
 •c. Enter the license clear license-level [switch switch-num]
privileged EXEC command to remove previous software license.
 Switch#license clear ipservices

 Feature: ipservices

 1 License Type: Evaluation
 License State: Active, Not in Use, EULA accepted
 Evaluation total period: 8 weeks 4 days
 Evaluation period left: 0 minute 0 second
 License Addition: Additive
 License Count: Non-Counted
 Comment:
 Store Index: 1
 Store Name: Primary License Storage
 Are you sure you want to clear? (yes/[no]): yes

 Switch#


11.  5w2d: %LICENSE-6-REMOVE: Feature ipservices 1.0 was removed
from this device. UDI=WS-C3560E-48PD-S:FDO1229V28R;
StoreIndex=1:Primary License Storage

 Backing up and saving software license information—Enter the
license save {credential url | url} privileged EXEC command.
License Installation on Switch Stack
https://supportforums.cisco.com/docs/DOC-16501
https://supportforums.cisco.com/thread/2080956
List of Commands
 Show license [all/detail]
 Show license udi
 Show version | in license|License
 Show license feature
 License install flash:filename.lic
 License boot level feature-set
 License clear license-level (ex: license clear ipservices)
Feel free to add any comments or post your questions, I shall try my best to
answer those queries.
Reference from https://supportforums.cisco.com/document/69361/licensing-
290035003700
More about Cisco’s Licensing
Cisco ONE Software Licensing Program
How to Upgrade the License from IP Base to IP Services on 3750-X Stack?
Cisco Licenses on Cisco ISR G2
Cisco 800 Series Licensing Options

12. Cisco SEC-K9 License vs. HSEC-K9 License