Upgrading your Cisco Catalyst switch license is not just a formality—it unlocks advanced features, enhances security, and ensures full compatibility with modern network deployments. Whether you are managing a Catalyst 9000 Series, upgrading a 9200 or 9300 stack, or transitioning from legacy Product Activation Keys (PAK), understanding Cisco switch license upgrades and Smart Licensing is essential for maintaining a high-performing, secure enterprise network.
This guide provides a comprehensive roadmap for network engineers and IT administrators, including step-by-step instructions, CLI examples, compatibility considerations, and best practices to simplify licensing management.
Table of Contents
- Part 1: Understanding Cisco License Models and Smart Licensing
- Part 2: Executing the License Upgrade
- Part 3: Managing Advanced and Subscription Licenses
- Part 4: Frequently Asked Questions (FAQ)
Part 1: Understanding Cisco License Models and Smart Licensing
Cisco has evolved its software licensing from legacy PAK-based activation to the modern Smart Licensing (SL) model, now streamlined with Smart Licensing Using Policy (SLP). This shift simplifies management, centralizes license tracking through Cisco Software Manager (CSSM), and allows immediate feature consumption (Day 0 operations).
License Tiers and Feature Sets
Cisco Catalyst switches, especially the 9000 Series, utilize a dual-layer licensing approach:
- Base Licenses (Perpetual): Network Essentials or Network Advantage—enable foundational switching features and core IOS XE functionality.
- Add-On Licenses (Subscription): DNA Essentials or DNA Advantage—provide advanced security, telemetry, automation, and integration with Cisco DNA Center.
For older platforms such as Catalyst 3850:
- LAN Base: Layer 2 switching
- IP Base: Entry-level Layer 3 and mobility features
- IP Services: Full enterprise routing services (BGP, OSPF)
Part 2: Executing the License Upgrade
Upgrading the feature level on a modern Catalyst switch involves checking current licenses, configuring the desired license, and performing a reload.
Step 1: Check Current License Status
Use privileged EXEC commands:
show version– Displays the currently configured technology package.show license summary– Provides an overview of licenses in use and status.show license authorization– Shows detailed authorization status, confirmation codes, and license enforcement.
Step 2: Configure the New License Level
Use the license boot level command in global configuration mode. Example:
Device# configure terminal
Device(config)# license boot level network-advantage add-on dna-advantage
Device(config)# exit
Device# copy running-config startup-configCompatibility Note: Ensure permitted combinations. For example, Network Advantage and DNA Essentials may have restrictions on initial purchase versus renewal.
Step 3: Validate and Reload
The license change requires a device reload to take effect:
Device# reloadAfter reload, confirm with show version that the Technology-package reflects the new license (e.g., network-advantage and dna-advantage).
Part 3: Managing Advanced and Subscription Licenses
Subscription Expiry (DNA Licenses)
Add-on DNA licenses are subscription-based. Renew before expiry to maintain features. If discontinued, deactivate the Add-on license and reload; the switch continues with Base License capabilities.
Export-Controlled Features (HSECK9)
High-security features like IPsec (Catalyst 9300X/9400X) or WAN MACsec (9500X/9600) require an HSECK9 key, obtained via Cisco Smart Software Manager (CSSM). DNA Advantage license must be active to use HSECK9. Verify status using show license summary.
Part 4: Frequently Asked Questions
Q1.How to check Cisco switch license?
Use commands in privileged EXEC mode:
show license summary– Displays Base, DNA, HSECK9 licenses and status.show license status– Details Smart Licensing status, compliance, and reporting.show license authorization– Confirms installation of authorization codes, including SLAC for export-controlled features.
Q2.Can you stack Cisco 9200 switches?
Yes. Catalyst 9200 Series switches support StackWise-160 (or StackWise-80 for 9200L), allowing up to eight switches to operate as a unified system. StackWise adapters and cables are usually required.
Q3.How to upgrade Cisco 9200 switch stack license?
Ensure all switches in the stack run the same license. Use license boot level on the Active switch, save configuration, and reload the stack. The new license applies across all members.
Q4.What are the levels of ISE licensing?
Catalyst 3850 supports downloadable policy names from Cisco Identity Services Engine (ISE). Specific tiers (Base, Plus, Apex) are referenced in ISE documentation.
Ready to optimize your network's feature set? Understanding Smart Licensing and performing proper reloads ensures a successful Cisco switch license upgrade, minimizing downtime and enabling next-generation capabilities.
Expertise Builds Trust
20+ Years • 200+ Countries • 21500+ Customers/Projects
CCIE · JNCIE · NSE7 · ACDX · HPE Master ASE · Dell Server/AI Expert