Guide c07 740642
Guide c07 740642
Cisco public
Step 2: Management options Fixed, high-performance routers Cisco 1000 Series Integrated Services Routers
Step 4: Software subscription terms Modular, high-performance routers Cisco 4000 Series Integrated Services Routers
Step 5: Bandwidth Aggregation Services Routers for service Cisco ASR 1000 Series Aggregation Services
provider or enterprise network edge Routers
Step 6: Smart account and virtual account
Enterprise Network Compute System for Cisco 5000 Series Enterprise Network Compute
Step 7: Services virtualizing routers in branch System
Note: The 1000 and 4000 Series ISRs and the ASR 1000 Series include Network Essentials or Network
Advantage, depending on the tier purchased. DNA Essentials includes Network Essentials as the perpetual
element. Cisco ONE DNA and DNA Advantage include Network Advantage as the perpetual element.
The perpetual element is subscription neutral, meaning that it will continue to work regardless of the
subscription term.
Table 2 shows all the new Cisco DNA specific hardware product IDs. Refer to Customer A in the “Customer Ordering Scenarios” section for an example configuration.
Table 2. WAN platform part numbers for new deployments
4000 Series ISRs ISR4331-DNA 4331 ISR (3 GE, 2 NIM, 1 SM) with Cisco DNA support
4000 Series ISRs ISR4451-DNA 4451 ISR (4 GE, 3 NIM, 2 SM) with Cisco DNA support
1000 Series ISRs C1111-8P-DNA 1100 ISR, 8 Ports Dual GE WAN with Cisco DNA support
1000 Series ISRs C1111-8PLTEEA-DNA 1100 ISR, 8 Port Dual GE LTE EA with Cisco DNA support
1000 Series ISRs C1111-8PLTELA-DNA 1100 ISR, 8 Port Dual GE LTE LA with Cisco DNA support
ASR 1000 Series ASR1001-X-DNA ASR 1001-X Crypto, 6GE, Dual-PS with DNA Support
ASR 1000 Series ASR1002-HX-DNA ASR 1002-HX, 4x10GE+4x1GE, Dual PS with DNA Support
vEdge 100 VEDGE-100B-AC-K9 vEdge-100 AC chassis with 5 Ethernet ports, rack mount kit and cables
vEdge 100 VEDGE-100M-AC-K9* vEdge-100 AC chassis with single 4G/LTE SIM, integrated power supply, 5 Ethernet ports
vEdge 100 VEDGE-100WM- vEdge-100 AC chassis with single 802.11 radio and single 4G/LTE SIM, integrated power supply, 5
AC-K9* Ethernet ports and cables
vEdge 1000 VEDGE-1000-AC-K9 vEdge-1000 AC base chassis with 8x GE fixed ports, dual AC power adapters and cables
vEdge 2000 VEDGE-1000-AC-K9 vEdge-2000 AC base chassis with 4x GE fixed ports and dual Pluggable Interface Module
vEdge 5000 VEDGE-5000-AC-K9 vEdge-5000 AC router base chassis with 4x 10 GE, 8x 1 GE copper, 8x 1 GE fiber modular NIMs
* Please refer to the Cisco SD-WAN vEdge Ordering Guide for more information.
For additional platform information, please refer to the following ordering guides:
Cloud management Provides simplicity of management with Cisco vManage; recommended for all SD-WAN deployments.
Cloud management software part numbers follow the DNA-C- or C1DNA-C-XXX-X-XY construct.
On-premises management Manages WAN using DNA Center or vManage on-premises. On-premises management software part numbers follow
the DNA-P- or C1DNA-P-XXX-X-XY construct. DNA Center requires an additional appliance purchase.
Cisco DNA licenses for WAN provide you flexibility to move from cloud management to on-premises management, and across hardware platforms. There is
no charge for porting licenses within the same bandwidth tier. Device family classifications for Cisco ONE Software are available in the Cisco ONE Software
Device Tiering Guide.
Once you have selected the above product ID, select the license for the platform you have chosen (Table 5).
Table 5. Platform licenses for LIC-DNA-ADD for cloud or existing deployments
ASR1K ESP 40 ASR1K-ESP-40-DNA ASR 1000 Series platform with ESP40 for DNA
ASR1K ESP 100 ASR1K-ESP-100-DNA ASR 1000 Series platform with ESP100 for DNA
ASR1K ESP 200 ASR1K-ESP-200-DNA ASR 1000 Series platform with ESP200 for DNA
Step 5: Bandwidth
Table 6 lists all the software part numbers for ordering Cisco DNA Essentials, DNA Advantage, and Cisco ONE DNA for each bandwidth tier. Table 7 lists the
bandwidths available for each platform.
For example for the 4331 ISR, you can choose from 100, 50, 20, and 10 Mbps.
Table 6. Software part numbers for DNA Essentials, DNA Advantage, and Cisco ONE DNA for WAN
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
* Except for the 5412ENCS, other ENCS platforms currentlysupport vEdgeCloud VNF for SD-WAN and not Cisco IOS®XE SD-WAN.
** Use LIC-DNA-ADD for DNA subscription with the platform, as no DNA HW+ Subscription bundle is currently available.
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
© 2018 Cisco and/or its affiliates. All rights reserved.
Ordering guide
Cisco public
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
* Use LIC-DNA-ADD for DNA subscription with the platform, as no DNA HW+ Subscription bundle is currently available.
** Except for the 5412ENCS, other ENCS platforms currently support vEdge Cloud VNF for SD-WAN and not Cisco IOSXE SD-WAN.
The following advanced security features require a minimum of 8-GB memory and 8-GB boot flash on all platforms:
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Advantage
DNA Essentials
DNA Essentials
The Cisco ISRv and Cisco CSR 1000V need four vCPU and a minimum of 8-GB RAM and 8GB bootflash.
For the Cisco SD-WAN solution, Virtual Accounts are aligned to a customer overlay and the devices that should be associated with the overlay. Failure to
provide a Virtual Account during ordering will result in a delay in device provisioning.
Each Smart Account can have multiple Virtual Accounts. If the customer has two customer overlays, they would have two different Virtual Accounts. Managed
Services Providers (MSPs) will create a Smart Account and be the Smart Account owner. The MSP would then need to create a Virtual Account for every end
customer (or tenant), assuming that each end customer has a specific overlay.
When ordering in Cisco Commerce Workspace (CCW), the end customer’s The end customer’s email address is essential for Cisco SD-WAN orders.
Smart Account and Virtual Account can be added at the line level or at the In the case of cloud deployments, details on vManage will be sent to this
header level and applied to all applicable Smart items on the order. email address.
Partners who have placed the order using a holding account can add the end Step 7: Services
customer’s Smart Account and Virtual Account details after order submission.
Please click here for a training video on reassigning an order from a partner Cisco Technical Services for SD-WAN
holding account to the end customer’s smart account.
We recommend that Cisco SD-WAN customers purchase Cisco Solution
Support for both hardware and SD-WAN license support.
Cisco Embedded Support is included with the purchase of the Cisco SD-
WAN software subscription. Cisco Embedded Support provides access to
Cisco technical support online or by phone.
Cisco Embedded Support includes: Understanding the Cisco DNA and Cisco IOS product part codes
• Access to support and troubleshooting via online tools and web case The Cisco IOS and subscription product part codes have a built-in structure
submission. Case severity or escalation guidelines are not applicable. as described below.
• Cisco Technical Assistance Center (TAC) access 24 hours per day, 7 days Structure of product ID for Cisco IOS XE image
per week to assist by telephone, or web case submission and online tools
with application software use and troubleshooting issues.
• Entitlement to maintenance releases and software updates for SD-WAN
software and the hardware operating system.
• Access to www.cisco.com this system provides the customer with helpful
technical and general information on Cisco products, as well as access to
Cisco’s online Software Center library.
No additional products or fees are required to receive these services with a
Structure of product ID for XE-SDWAN image
software subscription.
Refer to the service description for more detailed information regarding Cisco
Solution Support.
• Cisco Solution Support with Cisco Smart Net Total Care® Service
• Cisco Solution Support with Software Support Service
You can learn more about Cisco Solution Support at www.cisco.com/go/
solutionsupport.
Modules supported on the 4000 Series ISRs and ASR 1000 • DNA Essentials, Advantage, or Premier with bandwidth, no additional
Series routers Technology Packages need to be ordered.
The following modules are supported for the 4000 Series ISRs: • Unified Communications and associated add-on licenses are NOT
supported and hence need not be ordered or purchased.
• NIM-1GE-CU-SFP • NIM-2MFT-T1/E1 • NIM-ES2-4
When the customer wishes to subscribe to a SD-WAN with Viptela® and
• NIM-2GE-CU-SFP • NIM-4MFT-T1/E1 • NIM-ES2-8 orders
• NIM-1MFT-T1/E1 • NIM-8MFT-T1/E1 • NIM-LTEA-EA
• DNA Essentials, Advantage, or Premier with bandwidth less than or equal
• NIM-LTEA-LA • NIM-VAB-M • SM-X-6X1G
to the factory default of the platform,4 no performance license need to be
• NIM-VAB-A • SM-X-4X1G-1X10G ordered for the platform. No IP Base license or Technology Packages (or
The following crypto modules are required for the ASR 1000 Series routers: add-on licenses) need to be purchased.
• DNA Essentials, Advantage, or Premier with bandwidth greater than
• ASR1001HX-IPSECHW, for the ASR 1001-HX the factory default but less than the bandwidth provided by the
• ASR1002HX-IPSECHW, for the ASR 1002-HX High-Performance license of the platform,5 a performance license is
automatically added at the time of order and the customer does not need
Cisco DNA ordering and license management on the 4000 Series to order it. Additionally, if the bandwidth (post-encryption) is greater than
ISRs 250 Mbps, the HSEC license for the relevant platform is automatically
When the customer wishes to subscribe to a DNA Center and orders added. No IP Base license or Technology Packages (or add-on licenses)
need to be purchased.
• DNA Essentials, Advantage, or Premier with bandwidth less than or equal
• DNA Essentials, Advantage, or Premier with bandwidth greater than the
to the factory default of the platform,1 no performance license need to be
High-Performance license of the platform6 but less than or equal to the
ordered for the platform.
maximum subscription bandwidth permitted for the platform, a BOOST
• DNA Essentials, Advantage, or Premier with bandwidth greater than license is automatically added to the order and the customer does not
the factory default but less than the bandwidth provided by the need to order it. Additionally, if the bandwidth (post-encryption) is greater
High-Performance license of the platform,2 a performance license is than 250 Mbps, the HSEC license for the relevant platform is automatically
automatically added at the time of order and the customer does not added. No IP Base license or Technology Packages (or add-on licenses)
need to order it. Additionally, if the bandwidth (post-encryption) is need to be purchased.
greater than 250 Mbps, the HSEC license for the relevant platform is
automatically added.
• DNA Essentials, Advantage, or Premier with bandwidth greater than the 1
For platform positioning, please refer to https://www.cisco.com/c/en/us/products/
High-Performance license of the platform3 but less than or equal to the collateral/routers/4000-series-integrated-services-routers-isr/white-
maximum subscription bandwidth permitted for the platform, a BOOST paper-c11-734550.html (Table 1) ISR 4000 Performance Levels.
license is automatically added to the order and the customer does 2
As an example for the 4351 ISR, the High-Performance license allows a customer to go up
not need to order it. Additionally, if the bandwidth (post-encryption) is to a bandwidth of not more than 400 Mbps. For a C1111-8P, the VPERF license allows the
greater than 250 Mbps, the HSEC license for the relevant platform is customer to go up to a bandwidth of not more than 250 Mbps.
automatically added.
3
The 4331 ISR provides up to 500 Mbps of encrypted performance per direction (incoming and • DNA Advantage or Cisco ONE DNA, encrypted bandwidth is allowed up to
outgoing), aggregating to 1 Gbps of platform performance.
the bandwidth provided by the DNA subscription throughput license.
4
For platform positioning, please refer to https://www.cisco.com/c/en/us/products/
collateral/routers/4000-series-integrated-services-routers-isr/white-
Selecting a Cisco IOS type for the router
paper-c11-734550.html (Table 1) ISR 4000 Performance Levels. For a router with a DNA Bundle (for example, ISR4331-DNA or ASR1001-
X-DNA) or for an ISR/ASR series router (for example, ISR4331/K9 or
5
As an example, for the 4331 ISR, the High-Performance license allows a customer to go up to
a bandwidth of not more than 300 Mbps. Hence (as an SD-WAN subscription license provides ASR1001-X), the Cisco IOS type is chosen as below:
a customer with an entitlement for the purchased bandwidth in each direction), the 4331 ISR
supports a bandwidth of 100 Mbps (allowing for 100 Mbps up and 100 Mbps down). • The customer selects the Cisco IOS type under the Option class “IOS
Software and Version Type.”
6
The SD-WAN software on the 4331 ISR can provide for 500 Mbps of performance in
each direction. • If the customer prefers the XE-SDWAN image, they will choose from
the available versions under the Option subclass “SDWAN Image with
Cisco DNA ordering and license management on the ASR 1000 Payload Encryption.”
Series routers • If the customer prefers the Cisco IOS XE image, they will choose from
Before attaching DNA licenses to the ASR 1000 Series, you will need an IP the available versions under the Option subclass “Image with Payload
Base technology license with base ASR 1000 Series hardware. Encryption” or “Image with No Payload Encryption.”
When the customer wishes to subscribe to DNA Center and orders
• DNA Advantage or Cisco ONE DNA with bandwidth less than or equal to
the factory default of the platform, no performance license needs to be
ordered for the platform.
• DNA Advantage or Cisco ONE DNA, nonencrypted bandwidth is allowed
up to the bandwidth provided by the Performance license of the platform.
• DNA Advantage or Cisco ONE DNA, encrypted bandwidth is allowed up to
the bandwidth provided by the DNA subscription throughput license.
• DNA Advantage or Cisco ONE DNA, Advanced Enterprise Services, Zone-
Based Firewall, and IPsec feature licenses are included. Other licenses, Working with LIC-DNA-ADD
such as Broadband, Carrier-Grade NAT, port enablement licenses, etc.
Customers may seek to add a Cisco DNA or SD-WAN subscription to
need to be ordered separately.
When the customer wishes to subscribe to SD-WAN with Viptela and orders • A router that has already been deployed in the field
• A router that the customer intends to purchase that does not have a
• DNA Advantage or Cisco ONE DNA with bandwidth less than or equal to
DNA bundle associated with it (for example, ISR4321/K9, ISR4351/K9, or
the factory default of the platform, no performance license needs to be
ASR1001-X)
ordered for the platform.
In these scenarios, the customer will configure the router and the
• DNA Advantage or Cisco ONE DNA, nonencrypted bandwidth is allowed
subscription independently. The customer configures the router (for example,
up to the bandwidth provided by the Performance license of the platform.
© 2018 Cisco and/or its affiliates. All rights reserved.
Ordering guide
Cisco public
the ISR4321/K9, ISR4351, or ASR1002-X) and selects the relevant Cisco IOS
type. They then choose Cisco IOS XE for a DNA Center-based subscription
or XE-SDWAN for an SD-WAN-based subscription, as described in the
section “Selecting a Cisco IOS Type for the Router.” Finally, the customer
chooses LIC-DNA-ADD, which provides various subscription options for each -- Select the appropriate bandwidth for the product family chosen.
platform family as described below.
-- Select the intended subscription reason for SD-WAN or for DNA Center
• Step 1: Select the router. deployment. This helps Cisco manufacturing prepare the infrastructure for
cloud or for on-premises deployment.
-- Select the relevant router platform to order (ISR4351/K9, ISR4321/K9,
ASR1002-X, etc. but NOT platform bundles such as ISR4321-SEC/K9, -- When selecting SDWAN-ONPREM, the intended reason is for on-premises
ISR4351-AX/K9 etc.). implementation of SD-WAN functionality.
-- Select the relevant Cisco IOS type and its version, using the section “Selecting -- When selecting SDWAN-CLOUD, the intended reason is for cloud
a Cisco IOS Type for the Router.” implementation and management of SD-WAN functionality.
-- When purchasing a new router, if the intended use is to deploy the subscription -- When selecting Cisco ONE DNA-ONPREM the intended reason is for on-
through DNA Center, no additional Technology Package license7 needs to premises implementation and management using DNA Center functionality.
be purchased. All necessary feature licenses required for a subscription are
included when DNA Essentials or DNA Advantage licenses are procured Customer ordering scenarios
(through step 2). Scenario: Customer A’s network requirement
-- Similarly all Performance or Booster licenses are included when DNA Essentials
or DNA Advantage licenses are procured (through step 2). Customer FaceMart wants to refresh its network. It has 1 data center and 50
• Step 2: Select the SKU for the subscription LIC-DNA-ADD. branches. The data center has 2 routers for redundancy. Each branch has a
single router. The customer needs 2 Gbps in the data center and 100 Mbps
-- Select the platform family (under Option Class: Platform License) against which
in each branch. The customer requires higher network availability, direct
the subscription is expected to be purchased.
Internet access for SaaS applications, segmentation, and a simple way to
manage the network.
1. 4331 ISR for the branches and vEdge 2000 for the data center
2. Tier: DNA Advantage for SD-WAN capabilities (for higher network
availability, direct Internet access for SaaS applications, segmentation,
and a simple way to manage the network)
3. Bandwidth: 100 Mbps for the 50 branches and 1 Gbps for each device in
the data center
4. Term: 5 years
-- The warnings indicate the supported bandwidths for the chosen
platform family.
7
At this time the Unified Communications Technology Package and its supported feature
licenses are not supported when a DNA subscription is purchased.
Part number Description Quantity Reason for the SKU Extended net price
ISR4331-DNA 4331 ISR (3 GE, 2 NIM, 1 SM) with 50 The 4331 ISR has a DNA bundle. Hence we select Contact Cisco for
DNA support this for the customer. details
CON-SSS2P- SOLN SUPP 24X7X2 4331 ISR (3 GE, 2 50 4331 ISR support.
ISR433DL NIM, 1 SM)
PNP-CAP-VBOND Network Plug-and-Play license optional 50 This SKU triggers the back-end process for
zero-touch device creating the back end overlay.
FL-4330-PERF-K9 Performance on Demand license for 50 The bandwidth chosen provides the customer with
4330 Series entitlement for bandwidth per direction. The 4331
ISR provides for 100 Mbps default and 300 Mbps
with the Performance license. To account for 100
Mbps up and 100 Mbps down = 200 Mbps, a
Performance license is added.
Part number Description Quantity Reason for the SKU Extended net price
NETWORK-PNP- Network Plug-and-Play license for 50 This SKU triggers the PNP process at the back
LIC zero-touch device deployment end, helping ensure that zero-touch deployment
happens seamlessly.
SISR4300U 4300 Series ISR SD-WAN IOS XE 50 This is the SD-WAN Image on the 4300 ISR. Cisco
CMK9-169 Universal. IOS version 16.9.
DNA-C-100M- DNA Advantage cloud license, 50 This provides a cloud-based subscription of 100
A-3Y 100M, 3Y Mbps to the 4331 ISR. Here a DNA Advantage
subscription has been provisioned.
SVS-DNA-C-ADV Embedded Support - DNA Essentials 50 Embedded Advantage Support for the subscription
cloud license
VEDGE- 2000-AC- vEdge-2000 AC router base chassis 2 The vEdge has a DNA bundle. Hence we select
K9 with 4x1GE fixed ports this for the customer.
Part number Description Quantity Reason for the SKU Extended net price
Customer Bank of the Crown (BoC) wants to refresh its network. It has 1 data center and 50 branches deployed with 4331 and 4351 ISRs. The customer
also wants to open another 50 branches with new routers. BoC also is planning to open 10 new ATMs at remote offsite locations. The data center has 2
ASR routers for redundancy – one of them is already installed in the field and the other is proposed to be purchased. Each branch and each ATM has a
single router.
The customer believes that it needs VDSL (Annex A) for connectivity at 20 branches. It needs LTE at the ATM sites. The data center will need
Ethernet connectivity.
The customer needs 2 Gbps in the data center and 100 Mbps in each branch. The customer indicates that it has 10 Mbps incoming and 10 Mbps outgoing
on the LTE connection. The customer requires higher network availability, direct Internet access for SaaS applications, segmentation, and a simple way to
manage the network.
1. 4331 (25 routers) and I4351 (25 routers) ISRs for the new branches and ASR 1000 for the data center. 1100 ISR with LTE is positioned for the 10
new ATMs
2. Tier: DNA Advantage for SD-WAN capabilities (for higher network availability, direct Internet access for SaaS applications, segmentation, and a simple way
to manage the network)
3. Bandwidth: 100 Mbps for all the branches and 1 Gbps for each device in the data center. For the 1100 ISR, although the customer has a need for 10 Mbps
up and 10 Mbps down, the account team still positions 10 Mbps bandwidth, as it entitles the customer to 10 Mbps (across all incoming circuits) and 10
Mbps (across all outgoing circuits)
4. Term: Customer has a combination of 3 and 5 years
ISR4351/K9 4351 ISR (3GE, 3NIM, 2SM, 4G FLASH, 25 This includes the platform as suggested. Contact Cisco for details
4G DRAM, IPB)
CON-SSS2P- SOLN SUPP 24X7X2 4351 ISR (3GE, 25 These are the Solution Support services. Contact Cisco for details
ISR4351K 3NIM, 2SM, 4G FLASH, 4G DR
NETWORK-PNP- Network Plug-and-Play license for 25 This SKU triggers the PNP process at the Contact Cisco for details
LIC zero-touch device deployment back end, helping ensure that zero-touch
deployment happens seamlessly.
MEM-4300-4GU8G 4G to 8G DRAM upgrade (4G+4G) for 25 Additional memory is suggested to Contact Cisco for details
ISR 4330 and 4350 ISRs accommodate future feature and
memory needs
MEM-FLSH-4U8G 4G to 8G eUSB flash memory upgrade 25 Additional flash is suggested to Contact Cisco for details
for 4300 Series ISR accommodate future feature and
memory needs.
NIM-VA-B Multimode VDSL2/ADSL/2/2+ NIM 25 This provides the DSL module support Contact Cisco for details
Annex B along with the VDSL support.
PWR-4450-AC AC power supply for 4450 and 4350 25 This provides the DSL module support Contact Cisco for details
ISRs along with the VDSL support.
CAB-NONE Eco friendly green option. No power 25 Contact Cisco for details
cable will be shipped.
PNP-CAP-VBOND Network Plug-and-Play license optional 25 This SKU triggers the back-end process Contact Cisco for details
zero-touch device for creating the back-end overlay.
POE-COVER-4450 Cover for empty PoE slot on 4450 ISR 25 Contact Cisco for details
SISR4300U 4300 Series ISR SD-WAN Cisco IOS XE 25 This is the SD-WAN Image on the 4300
CMK9-169 Universal Series ISR. Cisco IOS version 16.9.
NIM-BLANK Blank faceplate for NIM slot on 4400 50 Contact Cisco for details
Series ISR
This part provides the 100 Mbps subscription for the 4351 ISR
LIC-DNA-ADD DNA Subscription license for router 25 The 4351 ISR does not have a DNA
bundle. This SKU provides for an option
to add a subscription to any platform that
does not have a DNA bundle.
ISR4300-DNA 4300 Series ISR platform for DNA 25 Selected under LIC-DNA-ADD, this SKU
indicates that the 4300 Series ISR has
been chosen.
SL-4330-NE-E 4300 Series ISR Network Stack 25 As the LIC-DNA-ADD SKU may be used
Essentials license with any ISR or vEdge in a DNA or SD-
WAN scenario, this SKU provides an
SL-4300-PAK Network Stack license 4300 Series ISR 25 entitlement to the customer for using in a
PAK container DNA or SD-WAN world.
DNA-C-100M- DNA Advantage Cloud License, 100M, 25 This provides a cloud-based subscription
A-3Y 3Y of 100 Mbps to the 4351 ISR. Here
an Advantage subscription has been
provisioned.
SVS-DNA-C-ADV Embedded Support - DNA Advantage 25 This is the Embedded Support provided
cloud license for the subscription.
This part provides the bill of materials for the 4331 ISR with DNA bundle
ISR4331-DNA 4331 ISR (3 GE, 2 NIM, 1 SM) with 25 The 4331 ISR has a DNA bundle. Hence
DNA Support we select this for the customer.
CON-SSS2P- SOLN SUPP 24X7X2 4331 ISR (3 GE, 2 25 4331 ISR support.
ISR433DL NIM, 1 SM)
PNP-CAP-VBOND Network Plug-and-Play license optional 25 This SKU triggers the back-end process
zero-touch device for creating the back-end overlay.
FL-4330-PERF-K9 Performance on Demand license for 25 The bandwidth chosen provides the
4330 Series ISR customer with entitlement to Bandwidth
per Direction. The 4331 ISR provides
for 100Mbps default and 300Mbps with
a Performance license. To account for
100Mbps + 100Mbps = 200Mbps, a
Performance license is added.
NETWORK-PNP- Network Plug-and-Play license for 25 This SKU triggers the PNP process at the
LIC zero-touch device deployment backend, helping ensure that zero-touch
deployment happens seamlessly.
SISR4300 4300 Series ISR SD-WAN Cisco IOS XE 25 This is the SD-WAN image on the 4300
UCMK9-169 Universal Series ISR. Cisco IOS version 16.9.
SVS-DNA-C-ADV Embedded Support - DNA Essentials 25 Embedded Advantage Support for the
cloud license subscription
This part provides the bill of materials for the ASR 1002-HX with DNA bundle that the customer proposes to buy
ASR1002-HX-DNA ASR 1002-HX, 4x10GE+4x1GE, Dual 1 The ASR1002-HX has a DNA bundle.
PS with DNA Support Hence we select this for the customer.
NETWORK-PNP- Network Plug-and-Play license for 1 This SKU triggers the PNP process at the
LIC zero-touch device deployment back end, helping ensure that zero-touch
deployment happens seamlessly.
PNP-CAP-VBOND Network Plug-and-Play license optional 1 This SKU triggers the back-end process
zero-touch device for creating the back-end overlay.
SASR1KHXUC ASR1000-HX Series SD-WAN Cisco 1 This is the SD-WAN image on the
MK9-169 IOS XE Universal ASR1002-HX router. Cisco IOS version
16.9.
SVS-DNA-C-ADV Embedded Support - DNA Advantage 1 Embedded Advantage Support for the
cloud license subscription
DNA-C-2.5G-A-5Y DNA Advantage cloud license, 2.5G, 5Y 1 This provides a cloud-based subscription
of 100Mbps to the ASR1002-HX. Here
an Advantage subscription has been
provisioned
This part provides the subscription for the existing (already deployed) ASR 1002-HX that the customer will use for high availability
LIC-DNA-ADD DNA Subscription license for router 1 The existing ASR1002-HX needs a
subscription. This SKU provides for that
subscription.
ASR1002HX-DNA ASR1002-HX platform selection for 1 Under LIC-DNA-ADD, this SKU indicates
SD-WAN the choice that ASR1002-HX needs a
subscription.
SL- Network Advantage license for 1 As the LIC-DNA-ADD SKU maybe used
ASR1002HX-NA ASR1002HX-DNA with any ISR or vEdge in a DNA or SD-
WAN scenario, this SKU provides an
entitlement to the customer for use in a
DNA or SD-WAN world.
SVS-DNA-C-ADV Embedded Support - DNA Advantage 1 Embedded Advantage Support for the
cloud license subscription.
DNA-C-2.5G-A-3Y DNA Advantage cloud license, 2.5G, 3Y 1 This provides a cloud-based subscription
of 100Mbps to the ASR1002-HX.
Here an Advantage subscription has
been provisioned.
This part provides the subscription for the existing (already deployed) 4331 ISR that the customer will use at the branches
LIC-DNA-ADD DNA Subscription license for router 1 The 4351 ISR does not have a DNA
bundle. This SKU provides for an option
to add a subscription to any platform that
does not have a DNA bundle.
ISR4300-DNA 4300 Series ISR platform for DNA 1 Selected under the LIC-DNA-ADD, this
SKU indicates that the 4300 Series ISR
has been chosen.
SL-4330-NA-A 4300 Series ISR Network Stack 1 As the LIC-DNA-ADD SKU maybe used
Advantagelicense with any ISR or vEdge in a DNA or SD-
WAN scenario, this SKU provides an
entitlement to the customer for use in a
SL-4300-PAK Network Stack License 4300 Series ISR 1 DNA or SD-WAN world.
PAK container
Customer Bank of the Crown sees the success story in the 4331 ISRs deployed in its network. As traffic grows in its network, it has plans to have bandwidths
of 350Mbps on its existing 4331 ISRs. Additionally, it wants to have 20new 4331 ISRs with 350Mbps bandwidth.
• Do I need any additional license on the existing or new router,as I hear that the 4331 ISR has a maximum performance of 300Mbps?
• I want to implement the new 4331 units in Europe with LTE, DSL, and serial, where the LTE is backup and the serial/ DSL is primary.
1. 4331 ISRs (20 routers) for the new branches. An HSEC license is added to the existing 4331 ISRs to permit the customer to expand its encryption
bandwidth to 350Mbps.
Provision DSL and LTE modules on the 4331 ISR. Serial is not a supported module currently.
2. Tier: DNA Advantage for SD-WAN capabilities (for higher network availability, direct Internet access for SaaS applications, segmentation, and a simple
way to manage the network). The customer is not very concerned if this is on a Cisco cloud or at its own premises. Hence a DNA-C SKU is positioned,
whereas the DNA-P SKUs maybe used when the customer wishes to use it at its own premises.
Part number Description Quantity Reason for the SKU Extended net price
ISR4331-DNA 4331 ISR (3 GE, 2 NIM, 1 SM) with 20 The 4331 ISR has a DNA bundle. Hence Contact Cisco for details
DNA support we select this for the customer.
Part number Description Quantity Reason for the SKU Extended net price
FL-4330-HSEC-K9 U.S. Export Restriction Compliance 20 The bandwidth chosen provides the
license for 4330 Series ISRs customer with entitlement to Bandwidth
per Direction. The 4331 ISR provides for
100Mbps default and 300Mbps with a
Performance license, to account for the
350Mbps encrypted bandwidth need.
PNP-CAP-VBOND Network Plug-and-Play license optional 20 This SKU triggers the back-end process
zero-touch device for creating the back-end overlay.
NETWORK-PNP- Network Plug-and-Play license for 20 This SKU triggers the PNP process at the
LIC zero-touch device deployment backend, helping ensure that zero-touch
deployment happens seamlessly.
SISR4300UC 4300 Series ISR SD-WAN Cisco IOS XE 20 SD-WAN Universal image.
MK9-169 Universal
Part number Description Quantity Reason for the SKU Extended net price
NIM-LTEA-EA CAT6 LTE Advanced NIM for Europe 20 LTE module for the Europe and North
and North America America.
FW-7455-LTE-GN FW switching load for 7455 generic 20 This provides a cloud-based subscription
- Europe of 100Mbps to the 4331 ISR. Here
an Advantage subscription has been
provisioned.
SVS-DNA-C-ADV Embedded Support - DNA Advantage 20 Embedded Advantage Support for the
cloud license subscription.
FL-4330- U.S. Export Restriction Compliance 20 The HSEC license on the 4331 ISR helps
HSEC-K9= license for 4330 Series ISRs enhance encryption capability to upgrade
from 250Mbps to 500Mbps.
Customer Very Sick Hospitals has tested DNA Center for wireless and switching products. Now it wishes to add routers to the same branches and DNA
Center infrastructure. The bandwidth needs to be 500Mbps Ethernet for the hospitals. There will be two Ethernet links (one copper and one fiber), active-
active together at 500Mbps. About five rural clinics will connect to the data center of the hospital and will look for an Ethernet connection with LTE as backup.
The customer plans to move to SD-WAN in about 18 to 24months. However, as its hospitals serve defense personnel, it is constrained by the fact that
everything has to be administered and managed by and on its private cloud or its own data center. The customer standardizes on inventory across all of its
locations with 4331/K9 across all 25hospitals and C1111-8PLTEEA with LTE at the clinics.
• Do I need any additional license, as I hear that the 4331 ISR has a maximum performance of 300Mbps?
• I want to implement the new 4331 units with LTE and DSL, where the LTE is backup.
• I see subscriptions with DNA-P and DNA-C. Which should I use?
The Cisco sales team positions the following:
1. 4351 ISRs (20 routers) for the new branches. An HSEC license is added to the 4351 ISRs to permit the customer to expandits encryption bandwidth to
500Mbps. The C1111-8P with LTE helps with the clinics.
2. Tier: DNA Advantage for advanced DNA capabilities. DNA Center is always at the customer premises. The customer wishes to use SD-WAN later, but
again at the customer premises. Hence a DNA-P SKU is positioned, whereas the DNA-C SKUs maybe used when the customer is comfortable with having
SD-WAN from the cloud.
ISR4331/K9 4331 ISR (3GE, 2NIM, 1SM, 4G FLASH, 25 This includes the platform as suggested. Contact Cisco for details
4G DRAM, IPB)
CON-SSS2P- SOLN SUPP 24X7X2 4331 ISR (3GE, 25 These are the Solution Support services. Contact Cisco for details
ISR4331K 2NIM, 1SM, 4G FLASH, 4G DR)
SL-4330-IPB-K9 IP Base license for 4330 Series ISR 25 Contact Cisco for details
SL-4330-APP-K9 AppX License for 4330 Series ISR 25 Contact Cisco for details
SL-4330-SEC-K9 Security license for 4330 Series ISR 25 Contact Cisco for details
FL-4330-HSEC-K9 U.S. Export Restriction Compliance 25 This provides for encryption performance Contact Cisco for details
license for 4330 Series ISR greater than 250Mbps in each direction.
FL-4330- Booster Performance license for 4330 25 This ensures that the CEF performance Contact Cisco for details
BOOST-K9 Series goes beyond the normal performance of
the 4331 ISR.
NIM-1GE-CU-SFP 1-port GE WAN NIM, dual-mode RJ45 25 Contact Cisco for details
and SFP
PWR-4330-AC AC power supply for 4330 ISR 25 Contact Cisco for details
ISRWAAS- ISRWAAS 750 conns RTU for 4300 25 Contact Cisco for details
RTU-750 Series ISRs
VWAAS-RTU-1300 VWAAS 1300 conns RTU for Cisco 25 Contact Cisco for details
UCS-E on single ISR only
SISR4300UK9-169 4300 Series ISR Cisco IOS XE Universal 25 Any Cisco IOS version with 16.9 or later
maybe used
This part provides the 500Mbps subscription for the 4331 ISR
LIC-DNA-ADD DNA Subscription license for router 25 The 4331 ISR does not have a DNA
bundle. This SKU provides for an option
to add a subscription to any platform that
does not have a DNA bundle.
ISR4300-DNA 4300 Series ISR platform for DNA 25 Selected under the LIC-DNA-ADD, this
SKU indicates that the 4300 Series ISR
has been chosen.
SL-4330-NA-A 4300 Series ISRNetwork Stack 25 Network Essentials and Advantage are
Advantage license added to the 4331 for DNA licenses.
PAK provides support for Advantage and
SL-4330-NE-E 4300 Series ISR Network Stack 25
Essentials.
Essentials license
The PNP process (an additional separate
SKU if required) at the backend maybe
SL-4300-PAK Network Stack license 4300 Series ISR 25
added with the SKU, helping ensure
PAK container
that zero-touch deployment happens
seamlessly.
DNA-P-500M- DNA Advantage on-premises license, 25 This provides for 500M of subscription
A-3Y 500M, 3Y license.
SDWAN-DNA-A DNA Advantage for DNA Center 25 Provides for connection to DNA Center.
Bills of materials for the rural clinics with C1111-8P with LTE
C1111-8PLTEEA- 1100 ISR 8-Port Dual GE LTE EA with 5 Router platform with Ethernet WAN
DNA DNA Support and LTE.
EM7455-LTEA-EA LTE Advanced EM7455 Europe and 5 LTE module for Europe and Americas
North America
SISR1100N 1100 Series ISR IOS XE 5 Cisco IOSXE Software, as the customer
PEUK9-169 UNIVERSAL-NO PAYLOAD is not yet ready for SD-WAN.
ENCRYPTION
SDWAN-DNA-A DNA Advantage for DNA Center 5 DNA Center license for Network
Advantage
DNA-P-20M-A-3Y DNA Advantage on-premises license, 5 20Mbps DNA Advantage license for
20M, 3Y Network Advantage
Steps for ordering a WAN subscription on the Cisco Enterprise Network Compute System (ENCS)
In this section we will go over the subscription ordering process for the ENCS. The Enterprise NFV solution is ordered through term-based subscription
licenses that may be purchased with a 3- or 5-year duration. At the time of ordering, you may choose a software subscription start date that is independent
of the hardware ship date.
The ordering process for routing subscriptions on the ENCS hardware is structured using a multiline bundle. This bundle provides the flexibility to choose the
appropriate software stack and the corresponding hardware stack to run it on.
To order the SD-Branch solution, use the NFV-BRANCH-MLB top-level part number, as shown in Table 6.
Table 6. Enterprise NFV solution top-level part numbers
NFV-BRANCH-MLB is the top-level multiline part number and can be used as the starting point for both the software subscription licenses and the Cisco
ENCS hardware options. Table 7 covers the suboptions under NFV-BRANCH-MLB.
Table 7. Suboptions under NFV-BRANCH-MLB
Software licenses
Hardware
ENCS5412/K9 5412 Enterprise Network Compute System (12-core, 1.5 GHz Intel® CPU, 16 GB DRAM)
ENCS5408/K9 5408 Enterprise Network Compute System (8-core, 2.0 GHz Intel CPU, 16 GB DRAM)
ENCS5406/K9 5406 Enterprise Network Compute System (6-core, 1.9 GHz Intel CPU, 16 GB DRAM)
ENCS5104-400/K9 5104 Enterprise Network Compute System (4-core, 3.4 GHz AMD CPU, 16 GB DRAM, 400G SSD)
ENCS5104-200/K9 5104 Enterprise Network Compute System (4-core, 3.4 GHz AMD CPU, 16 GB DRAM, 200G SSD)
ENCS5104-64/K9 5104 Enterprise Network Compute System (4-core, 3.4 GHz AMD CPU, 16 GB DRAM, 64G SSD)
Ordering software subscription licenses for the Cisco 5000 Series ENCS
LIC-DNA-ADD is a container for all of the term subscription licenses for the 5000 Series ENCS solution. These software licenses are common to all ENCS
platforms. The ENCS platforms have been grouped together under the Hardware category.
The WAN licenses include choices along four main dimensions: preferred Table 8. Throughputs supported on the ENCS platforms
choice of management, performance, term, and feature tiers.
Platform Throughputs supported
For ENCS deployments, choosing on-premises or cloud SKUs will entitle
the end user to DNA Center licenses, as the instantiation of virtual network 5400ENCS 20, 50, 100, and 500Mbps
functions on the ENCS is orchestrated via DNA Center.
5100ENCS 20, 50, and 100Mbps
Performance options on the ENCS range from 20Mbps to 500Mbps. This
selection maps to the Cisco Integrated Services Virtual Router (ISRv) and
XE-SDWAN throughput licenses. When using LIC-DNA-ADD, you Subscription terms on the ENCS platforms are limited to 3 or 5years.
must choose the platform license. The platform license determines the
ENCS platforms support DNA Advantage and Cisco ONE DNA feature tiers.
throughputs supported on the underlying hardware. Table 8 lists the
Table 9 summarizes the part numbers supported on the ENCS platforms.
throughput licenses supported on the ENCS platforms.
DNA Advantage and Cisco ONE DNA product IDs supported on the ENCS
Ordering ENCS hardware options Table 10 lists the supported ENCS platforms.
Table 7 lists the various hardware options available for the Enterprise NFV Table 10. Hardware platforms supported on the ISRv 16.9 – SDWAN XE.
solution for deployment at the branches or remote sites. The hardware
platform requirements must be derived from the software components that Model Description
it hosts. Its resources must not only exceed the sum of the individual VNF
requirements, but also leave room for future growth. While each hardware ENCS5412/K9 5412 Enterprise Network Compute System
platform is unique in its own way, each has three basic common resources – (12-core, 1.5 GHz Intel CPU, 16 GB DRAM)
CPU cores, memory, and disk capacity – that must be considered individually.
ENCS5408/K9 5408 Enterprise Network Compute System
The ordering tool does not verify the VNF requirements at this time. For the
(8-core, 2.0 GHz Intel CPU, 16 GB DRAM)
purposes of sizing in this document, the terms “core,” “vCPU,” and “physical
CPU core” are considered equivalent.
ENCS5406/K9 5406 Enterprise Network Compute System
(6-core, 1.9 GHz Intel CPU, 16 GB DRAM)
Software selection choices on the ENCS
Software subscription licenses are ordered via LIC-DNA-ADD, as described
in the previous section. On the ENCS hardware you will have to select either NIMs on the ENCS with ISRv 16.9.1 XE-SDWAN
the ISRv (non-SD-WAN) or ISRvXE-SDWAN image binary and version. A limited number of Network Interface Modules (NIMs) are supported on
Note: the ENCS when using ISRvXE-SDWAN 16.9 on the ENCS. Table 11 lists the
modules supported on the 5400 ENCS.
1. Selecting this instance does not license the VNF. This ensures only that
Table 11. NIMs supported with ISRvXE-SDWAN 16.9 on the 5400 ENCS
the right code is loaded onto the hardware.
4G-LTE NIM-LTEA-EA
NIM-LTEA-LA
T1/E1 NIM-1MFT-T1/E1
NIM-2MFT-T1/E1
NIM-4MFT-T1/E1
NIM-8MFT-T1/E1
ISRv 16.9.1(non-SD-WAN) is supported on all ENCS platforms. Table 12 lists the supported ENCS platforms.
Table 12. Hardware platforms supported on the ISRv 16.9.1
Model Description
ENCS5412/K9 5412 Enterprise Network Compute System (12-core, 1.5 GHz Intel CPU, 16 GB DRAM)
ENCS5408/K9 5408 Enterprise Network Compute System (8-core, 2.0 GHz Intel CPU, 16 GB DRAM)
ENCS5406/K9 5406 Enterprise Network Compute System (6-core, 1.9 GHz Intel CPU, 16 GB DRAM)
ENCS5104-400/K9 5104 Enterprise Network Compute System (4-core, 3.4 GHz AMD CPU, 16 GB DRAM, 400G SSD)
ENCS5104-200/K9 5104 Enterprise Network Compute System (4-core, 3.4 GHz AMD CPU, 16 GB DRAM, 200G SSD)
ENCS5104-64/K9 5104 Enterprise Network Compute System (4-core, 3.4 GHz AMD CPU, 16 GB DRAM, 64G SSD)
Table 13. NIMs supported with ISRv 16.9 on the 5400 ENCS
4G-LTE NIM-4G-LTE-NA
NIM-4G-LTE-VZ
NIM-4G-LTE-GA
NIM-4G-LTE-ST
NIM-4G-LTE-LA
NIM-LTEA-EA
NIM-LTEA-LA
T1/E1 NIM-1MFT-T1/E1
NIM-2MFT-T1/E1
NIM-4MFT-T1/E1
NIM-8MFT-T1/E1
NIM-1CE1T1-PRI
NIM-2CE1T1-PRI
NIM-8CE1T1-PRI
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/go/
trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) C07-740642-02 10/18