How to Activate the PLR license on Cisco Security Products?

Understanding Cisco PLR Licensing: A Guide for Secure Environments

The Cisco Permanent License Reservation (PLR) option is a powerful feature for customers with highly secure networks and limited internet access. This guide explains what the Cisco PLR license is, how to apply for it, and how it compares to Cisco’s other licensing options.

What is the Cisco PLR License?

Cisco PLR licensing provides a long-term solution for secure networks with minimal external connections. It allows you to register all product instances with exclusive features indefinitely and permanently, eliminating the need for renewal. The Cisco PLR license is available for Cisco NXOS, IOS XE/XR-based devices, and Cisco Secure product lines.

For clients uncomfortable with Cisco’s smart licensing methods, or those operating in environments without internet access, the PLR license is a straightforward alternative. It offers a single authorization number to enable all premium capabilities, simplifying licensing management.

How to Apply for a Cisco PLR License

To apply for a Cisco PLR license, follow these steps depending on your device:

Cisco Firepower Device Manager (FDM):

1. Initial Setup:
   • Turn on your device and connect via the Console Port.
   • Accept the End User License Agreement (EULA) and configure your IP address and gateway.
   • Choose to administer the device locally.
2. Access Web Interface:
   • Open a web browser and enter the IP address assigned to the device.
   • Complete the initial configuration, including Output interface IP and NTP Server settings.
3. License Activation:
   • During the configuration, you’ll be prompted to activate a 90-day evaluation period or register with Cisco Smart Software Manager (CSSM). Choose the 90-day evaluation option.
   • In the Smart License tab, select “Switch to Universal PLR.”
   • Obtain the Request Code and send it to your Cisco supplier to receive the Cisco FDM PLR license.
   • Apply the PLR license code in the device’s web interface to activate all functionalities permanently.

Cisco Identity Services Engine (ISE):

1. Initial Deployment:
   • After completing Cisco ISE’s first deployment, enter Setup on the CLI to start the basic configuration.
   • Access the Web interface using the administration IP.
2. Generate and Apply License:
   • Log in with your new username and password.
   • Navigate to the Hamburger menu, select “Administration,” then “Licensing.”
   • Click “Generate code” and choose PLR.
   • Send the generated code to Cisco sales to get the authorization code.
   • Enter the authorization code into the device to activate the PLR license.

Applying for PLR Licenses in Air-Gapped Networks

For networks without internet access, also known as air-gapped networks, you cannot use Cisco Smart Software Manager. Instead, you must use the PLR mode to apply for licenses. Here’s how:

1. Switch to PLR Mode:
   • Go to the Device section and select “View Configuration.”
   • Unregister the device from Smart Licensing if it was previously registered.
   • Choose “Switch to Universal PLR” and confirm your selection.
2. Complete PLR Registration:
   • Save the request code displayed in the Universal Permanent License Reservation dialog box.
   • Log into CSSM, navigate to “Smart Software Licensing” > “Inventory,” and click on “Licenses.”
   • Use the License Reservation button to enter the request code and generate an authorization code.
   • Download or copy the authorization code and apply it to your device’s interface.
3. Activate Features:
   • Enable specific features on your device as needed. The universal license registers the base license only, so additional features must be enabled separately.

Cancelling PLR Registration

If you need to switch back to Smart Licensing or reapply for PLR, follow these steps to cancel PLR registration:

1. Initiate Cancellation:
   • Navigate to “Device” and “View Configuration.”
   • Select “Cancel PLR” and choose an option based on whether you have a license in CSSM.
2. Generate Release Code (if applicable):
   • For licenses reserved in CSSM, enter the authorization code to generate a release code.
   • Use CSSM to remove the product from your inventory.
3. Finalize Cancellation:
   • Confirm the cancellation in your system. The device will revert to Smart License mode.

Wrapping Up

PLR licenses are node-locked and cannot be transferred between platforms. Each authorization number is unique to your product, ensuring security and preventing unauthorized use. By using PLR licenses, you can effectively manage licensing in secure, air-gapped environments, avoiding complications associated with internet-dependent smart licensing methods.

Author: TechBlonHub

As a passionate blogger, I'm thrilled to share my expertise, insights, and enthusiasm with you. I believe that technical knowledge should be shared, not hoarded. That's why I take the time to craft detailed, well-researched content that's easy to follow, even for non-tech. I love hearing from you, answering your questions, and learning from your experiences. Your feedback helps me create content that's tailored to your needs and interests