Connected Directly To Cssm - Cisco Catalyst 9400 System Management Configuration Manual

Connected Directly to CSSM

Figure 5: Topology: Connected to CSSM Through CSLU
Considerations or Recommendations:
Choose the method of communication depending on your network's security policy.
Where to Go Next:
To implement this topology, see
Connected Directly to CSSM
Overview:
This topology is available in the earlier version of Smart Licensing and continues to be supported with Smart
Licensing Using Policy.
Here, you establish a direct and trusted connection from a product instance to CSSM. The direct connection,
requires network reachability to CSSM. For the product instance to then exchange messages and communicate
with CSSM, configure one of the transport options available with this topology (described below). Lastly, the
establishment of trust requires the generation of a token from the corresponding Smart Account and Virtual
Account in CSSM, and installation on the product instance.
You can configure a product instance to communicate with CSSM in the following ways:
• Use Smart transport to communicate with CSSM
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
98
Workflow for Topology: Connected to CSSM Through CSLU, on page
Smart transport is a transport method where a Smart Licensing (JSON) message is contained within an
HTTPs message, and exchanged between a product instance and CSSM, to communicate. The following
Smart transport configuration options are available:
• Smart transport: In this method, a product instance uses a specific Smart transport licensing server
URL. This must be configured exactly as shown in the workflow section.
• Smart transport through an HTTPs proxy: In this method, a product instance uses a proxy server to
communicate with the licensing server, and eventually, CSSM.
Smart Licensing Using Policy
110.