Cisco DNA Software for SD-WAN and Routing
The bridge to possible
Introduction
Cisco SD-WAN and Routing subscriptions offer flexibility to consume the latest technology on the Cloud or On-Premises across the entire routing stack. The Cisco DNA subscription license tiers include 3Y and 5Y term options, and all available tiers include Cisco Software Support Service.
Cisco DNA Subscription PID Nomenclature
The Cisco DNA Subscription Product part codes have a built-in structure indicating:
- Management options
- Bandwidth entitlement
- Subscription tier
- Subscription term
Structure of Product ID for Cisco DNA subscription: DNA-C(P)-50M-E(A/P)-3Y
Management: C = Cloud Managed, P = On-Premise Managed
Bandwidth: e.g., 50M = 50Mbps, Aggregate of 100Mbps
Subscription Term: 3Y = 3 Years, 5Y = 5 Years
Subscription Tier: E = Essentials, A = Advantage, P = Premier
Ordering Process Overview
To order Cisco DNA Software Subscriptions for SD-WAN and Routing, follow these steps:
- Step 1: Platforms
- Step 2: Software Type
- Step 3: Cisco DNA Software Subscription
- Step 4: Smart account and Virtual account
- Step 5: Services
Note: If ordering hardware with subscriptions, follow Steps 1-5. If ordering subscriptions for existing hardware, start from Step 3.
Step 1: Platforms
Select the platform most appropriate for your WAN. Cisco offers various hardware, virtual, and cloud options.
Table 1: WAN Platform Summary
| Category | Platforms |
|---|---|
| Fixed chassis Branch Routers | Cisco 1000 Series Integrated Services Routers, Cisco vEdge Router (vEdge-100 and vEdge-1000) |
| Modular chassis Branch Routers | Cisco 4000 Series Integrated Services Routers, Cisco Catalyst 8300/8200 Series Edge Platforms |
| Aggregation Services Routers | Cisco 1000 Series Aggregation Services Routers, Cisco Catalyst 8500 Series Edge Platforms |
| Universal CPE Routers | Cisco 5000 Series Enterprise Network Compute System, Cisco Catalyst 8200-UCPE Edge platforms |
| Virtualized Routers | Cisco Cloud Services Router 1000v, Cisco Catalyst 8000v Edge Software Router |
Platforms can be ordered for Cisco SD-WAN deployment or Traditional Routing with Cisco DNA Software Subscriptions.
Table 2 & 3: Platform Product IDs for Cisco SD-WAN DNA Bundles and a la carte
These tables list various Product IDs for different Cisco platforms that can be ordered with Cisco DNA Software Subscriptions.
Step 2: Software Type
Cisco DNA delivers consistent routing and security features across multiple operating systems. Choose from:
- Cisco IOS XE for traditional WAN deployments (managed via Cisco DNA Center).
- Cisco IOS XE SD-WAN for SD-WAN deployments (managed via Cisco vManage).
- Viptela OS for SD-WAN deployments (managed via Cisco vManage).
Note: vEdge devices and ISR 1100-4G/6G devices use Viptela OS, which is factory pre-installed.
Product ID Structure for Cisco IOS XE and IOS XE SD-WAN Images
The document details the structure of product IDs for both Cisco IOS XE and IOS XE SD-WAN images, including universal images and encryption usage.
Step 3: Cisco DNA Software Subscription
Cisco DNA Software Subscription is constructed with four elements:
- Management option
- Bandwidth entitlement
- Subscription tier
- Subscription term
Management Options
Choose between Cloud management (via vManage console) or On-premises management (via Cisco DNA Center or vManage). Part numbers follow the DNA-C or DNA-P construct.
Bandwidth Entitlement
Cisco offers various bandwidth options (Nominal and Aggregate). The Product ID is based on Nominal bandwidth, which is half the Aggregate bandwidth. For example, a 100 Mb/s PID provides 200 Mb/s of aggregate bandwidth.
Subscription Tiers
Three tiers are available:
- Cisco DNA Premier (DNA-<>-<>-P-<>)
- Cisco DNA Advantage (DNA-<>-<>-A-<>)
- Cisco DNA Essentials (DNA-<>-<>-E-<>)
Note: Cisco 1000 and 4000 Series ISRs include Network Essentials or Network Advantage stack. ASR 1000 Series include Network Advantage only.
Subscription Term
Choose from 3Y, 5Y, or 7Y (for Advantage) subscription terms.
Ordering Cisco Software Subscription
Step-1: Select the Cisco Router of your choice:
- A. Cisco DNA Bundle: Order with built-in Cisco DNA subscription SKUs. Skip Step 2.
- B. Ala-carte Router hardware: Select Cisco IOS type, Network Modules, and add L-LIC-DNA-ADD SKU.
Note: For Cisco DNA Center deployments, no additional Technology Package license is needed (except IP Base for ASR 1000 platforms). Performance or Boost licenses are included with Essentials or Advantage.
Step-2: Select the L-LIC-DNA-ADD SKU:
This SKU is used for adding subscriptions to existing routers or for routers without a Cisco DNA bundle. It also applies to Software WAN routers for Private or Public Cloud deployments.
Tables 7 and 8 provide Product IDs and Platform licenses for cloud or existing deployments.
Cisco SD-WAN Security Applicability Matrix
Core security features like Enterprise Firewall, Application Awareness, and DNS Security Monitoring are supported across platforms. Advanced security features (Intrusion Prevention, URL Filtering, Advanced Malware Protection) require 8-GB memory and 8-GB boot flash.
The matrix details the support for these features across various platforms like vEdge, CSR 1000V, ISRV (ENCS), ISR 4000, ISR 1100, ISR 1000X, and ASR1K.
Step 4: Smart Account and Virtual Account
An end-user smart account and virtual account are mandatory for Cisco SD-WAN ordering. These provide a unique identifier for auto-provisioning devices.
- Create a Smart Account: Go to Cisco Software Central. Use a descriptive name (e.g., <MSP>_SD-WAN).
- Create Virtual Accounts: Go to Manage Smart Accounts. Create a Virtual Account for each tenant or overlay (e.g., <END-CUSTOMER>_PROD).
- Ordering: Go to Cisco Commerce Workspace (CCW) and ensure Smart Account and Virtual Account details are populated.
Partners using a holding account can reassign orders to the end customer's smart account.
Step 5: Services
Cisco recommends Cisco Solution Support for both hardware and SD-WAN license support.
Cisco Embedded Support is included with the software subscription and provides:
- Access to support via online tools and web case submission.
- 24/7 access to Cisco Technical Assistance Center (TAC).
- Entitlement to maintenance releases and software updates.
- Access to technical and general information on Cisco products via www.cisco.com.
Hardware support must be purchased separately.
Recommended: Cisco Solution Support with Smart Net Total Care
Cisco Solution Support is key for maintaining performance, reliability, and ROI. It offers centralized support, priority access, and coordination with support partners.
Learn more at www.cisco.com/go/solutionsupport.
Steps for ordering a WAN subscription on the Cisco Enterprise Network Compute System (ENCS)
The ENCS solution is ordered via term-based subscription licenses (3 or 5-year). The Cisco DNA Licensing for SD-WAN and Routing start date is independent of the hardware ship date.
Use the NFV-BRANCH-MLB top-level part number for the SD-Branch solution. Tables 10, 11, 12, 13, 14, 15, and 16 provide details on sub options, throughputs, and supported hardware and NIMs for ENCS platforms.
Ordering Enforced Encryption (HSEC) License
Federal regulations require a separate HSEC License for encrypted traffic greater than 250 Mbps. This license is for crypto throughput and tunnel scale, regardless of SD-WAN or Traditional routing.
Scenario 1: Cisco DNA bundles include HSEC if the subscription exceeds 250 Mbps.
Scenario 2: For existing routers, the HSEC license is available at $0 if the subscription throughput exceeds 250 Mbps.
Appendix-A: Cisco SD-WAN Subscription Opt-out
Cisco DNA bundled routers typically require a subscription. Exceptions include customers with a valid Enterprise License Agreement (EA) or Managed Service Providers (MSPs) using MSLA. Use the DNA-OPTOUT SKU for these cases.
Appendix-B: Modules supported in SD-WAN on the 4000 Series ISRs
Lists supported modules for the 4000 Series ISRs, including crypto modules for ASR 1000 Series routers.
Appendix-C: Ordering the new Cisco Catalyst 8000 series Edge Platforms
Cisco Catalyst 8000 series Edge platforms require mandatory Cisco DNA subscriptions for SD-WAN or Traditional Routing deployments. Refer to provided links for ordering details.
Appendix-D: Ordering SD-WAN subscriptions on ASR1006-X
Starting with Cisco IOS-XE 17.5.1, ASR1006-X supports SD-WAN Cisco DNA subscriptions (Tiered-Subscription T3-Advantage or T3-Premier). Tables compare aggregation routers and their subscriptions.
Two ordering methods are available: ASR1006-X-DNA (greenfield) and using L-DNA-TIER-ADD for existing hardware.
Appendix-E: Cisco DNA ordering and license management on the 4000 Series ISRs
Details on how Cisco DNA Essentials, Advantage, or Premier subscriptions interact with platform defaults, performance licenses, and HSEC licenses for the 4000 Series ISRs.
