Cisco IOS LAN Base、IP Base 和IP Service的区别

Details: http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3560-x-series-switches/white_paper_c11-579326.html

The LAN Base feature set offers enhanced intelligent services that include comprehensive Layer 2 features, with up-to 255 VLANs.

The IP Base feature set provides baseline enterprise services in addition to all LAN Base features, with 1K VLANs. IP Base also includes the support for routed access, MACsec, and the new Cisco Service Module. 
IP Base特性除了支持基本的LAN Base特性外，还支持1K VLAN。并且，包含路由接入、macsec、新服务模块等特性。 
The IP Services feature set provides full 
enterprise services that include advanced Layer 3 features such as Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), Protocol Independent Multicast (PIM), and IPv6 routing such as OSPFv3 and EIGRPv6. All software feature sets support advanced security, QoS, and management features 
IP Service特性支持包含三层特性，如增强的内部网关协议、开放最短路径有先、边界网关协议、独立组播协议外，还有OSPFv3、EIGRPv6等IPv6路由特性。所有的软件特性集都支持先进的安全特性、QoS和管理特性。 
另外：LAN Base就是简单的二层特性。

The CiscoCatalyst 3750-E Series with StackWise Plus is an enterprise-class line of stackable wiring closet switches. The Cisco Catalyst 3560-E Series is an enterprise-class line of standalone access and aggregation switches. They combine 10/100/1000 and Power over Ethernet (PoE) configurations with upgradable Gigabit Ethernet to 10 Gigabit Ethernet uplinks to enable applications such as IP telephony, wireless, and video. They support two software feature sets: IP Base and IP Services.

The Cisco Catalyst 3750-E Series with StackWise Plus is an enterprise-class line of stackable wiring closet switches. The Cisco Catalyst 3560-E Series is an enterprise-class line of standalone access and aggregation switches. They combine 10/100/1000 and Power over Ethernet (PoE) configurations with upgradable Gigabit Ethernet to 10 Gigabit Ethernet uplinks to enable applications such as IP telephony, wireless, and video. They support two software feature sets: IP Base and IP Services.

The Cisco Catalyst 3750-X Series with StackWise Plus and the standalone Cisco Catalyst 3560-X Series are two new enterprise-class lines of access switches that support advanced capabilities such as Stack Power, field-replaceable hot-swappable uplink modules, full 802.3at PoE+ support, dual redundant power supplies and fans, and IEEE 802.1AE (MACsec) hardware-based encryption. They support three software feature sets: LAN Base, IP Base, and IP Services.

Feature Sets

The Cisco Catalyst 3K family of switches supports the following three feature sets depending on the specific model of switch:

●   LAN Base: Enterprise access Layer 2 switching features

●   IP Base: Enterprise access Layer 3 switching features

●   IP Services: Advanced Layer 3 switching (IPv4 and IPv6) features

As visually summarized in Figure 1, the Cisco Catalyst 3560-E and 3750-E Series support the IP Base and IP Services feature sets, whereas the Cisco Catalyst 3560-X and 3750-X Series support the LAN Base, IP Base, and IP Services feature sets.

Figure 1.      Feature Set Overview

In particular, Figure 2 shows the main differences between the three feature sets supported on the Cisco Catalyst 3K switch family.

Figure 2.      Feature Set Characteristics and Differences

Universal Image

Each Cisco Catalyst 3750-E/3560-E or 3750-X/3560-X system is loaded with a universal Cisco IOS Software image. Universal Cisco IOS Software images contain all Cisco IOS Software features. The level of Cisco IOS Software functionality available is determined by the combination of one (or more) licenses installed on the device. A specific license file stored in the flash memory of the switch can unlock a specific Cisco IOS Software feature set, from the smallest one to the largest one (Figure 3).

Figure 3.      Feature Set Activation in a Universal Image

For the Cisco Catalyst 3750-E/3560-E Series, there can be two versions of universal images: plain noncrypto universal images and universalk9 images (which offer all the Cisco IOS Software features, including strong crypto features).

For the Cisco Catalyst 3750-X/3560-X Series, in addition to the aforementioned universalk9 images, there are also images with the universalk9-npe designation in the image name. The reason for this alternate image type is that some countries have import regulations that require that the device does not support any strong data-plane crypto functionality, such as IEEE 802.1AE, in any form. To satisfy the import requirements of those countries, this universal image does not support any strong payload encryption (that is, it is of the nonpayload encryption type).

Note that for the aforementioned platforms “nonuniversal” IP Base images are still available and posted on the cisco.com guest page. This is done so that those who have not purchased a Cisco SMARTnet contract can still get software updates for their LAN Base or IP Base images (or downgrade from IP Services to IP Base and get software updates). LAN Base or IP Base updates are offered as part of the software update policy (see Updating Software on the Cisco Catalyst 3750-E, 3560-E, 3750, and 3560 Series Switches).

Software Activation Overview

Cisco Catalyst 3750-E/3560-E and 3750-X/3560-X switches each have a specific universal Cisco IOS Software image installed encompassing all Cisco IOS Software functionality. This means that for each series of switches a common image is deployed.

A software activation license (SAL) is also preinstalled on the device, which activates the specific functionality that the user procures. Each software activation license is unique to a specific device and functions only with that device. In other words, licenses are locked to the switch’s unique device identifier (UDI).

A unique device identifier is made up of two components: the product ID (PID) and serial number (SN). Serial number is an 11-digit number that uniquely identifies a device. The product ID identifies the type of device. This information can be found using the “show license udi” command on the switch CLI or Simple Network Management Protocol (SNMP). This information is also present on a label found on the device. (Cisco recommends recording this information when the switch is first received and storing it in a safe location. In case of issues, the TAC should be contacted for assistance.)

New devices are shipped with software activation licenses preinstalled for feature sets ordered with the switches. A new license is needed only when adding new feature sets. For example, advancing a device from the IP Base feature set to the IP Services feature set requires a new software activation license. However, migrating software images from one release to another (for example, from 12.2(52)SE to 12.2(53)SE) does not require a new license.

A new feature set can be enabled with a new SAL, which can be generated after the purchase of a so-called product activation key (PAK).

So, when customers need to activate a different Cisco IOS Software feature set, they can purchase a product activation key for a desired feature set and obtain the UDI(s) for the device(s) to upgrade. UDI and PAK information are passed to Cisco’s license portal, which generates the licenses and sends them electronically to the customer.

The final result of the above process is a software activation license file, which is an XML text file with a .lic extension (Figure 4).

Figure 4.      Software Activation License File

After installing a license file in the flash memory of a switch (for example, member of a stack), one can show it with the following command:

3750E# show license file switch 1

License Store: lic0:/lservrc.pri > Special storage location in flash

Store Index: 0

License: 11 ipservices 1.0 LONG NORMAL STANDALONE EXCL INFINITE_KEYS INFINITE_KEYS NEVER NEVER NiL SLM_CODE CL_ND_LCK NiL *14B4M28DGGM3VN64 00 NiL NiL NiL 5_MINS <UDI><PID>WS-C3750-E-48PD0S</PID><SN>CAT1033R1FS</SN></UDI>

NSIAm82zIB1QOfAcCodkf1TJKrQ:m5tyO,IrR4FV5a37oPLG7DOOw3ayRBgpdFOjLx9L7mgHEW7ADvb8P9hY5afwc5vPWVA4H6WdL10JhZanVlEZ,OkEEdrfoeZwkhq7nmfZ$

<WLC>AQEBIQAB///lwoROBCuPuXBm1TPEs2A0sPqCVLnnY N3y2qyqf2+n6H1utLAyWThtGSiqJMZADywcqvPiAmWSaEmUT56rstk6gvmj+EQKRf D9A0ime1czrdKxfILT0LaXT416nwmfp92Tya6vIQ4FnlBdqJ1sMzXeSq8PmVcTU9A 4o9hil9vKur8N9F885D9GVF0bJHciT5M=</WLC>

Comment:

Hash: xlpqb43M0JXXvZ8usNuRrchVEwo=

When a device is powered on, the software activation license file is examined by the Cisco IOS Software, which activates the appropriate feature sets. Unlike previous right-to-use licenses, this flexible approach helps users simplify deployment of new switches and maintain an accurate record of the specific image, functionality, and additional features that are activated on each device by providing a definitive mechanism that helps ensure the correct software features are licensed on every device.

Product Activation Key (PAK)

A PAK is an 11-digit alphanumeric key created by Cisco manufacturing that identifies a specific software purchase—in other words, it is a short alphanumeric string provided by Cisco as a “proof of purchase” when a software feature set is purchased.

PAKs are not tied to a specific device until they are used to generate a software activation license. They do not have an expiration date and can be redeemed at any time after purchase.

PAKs are ordered using part numbers on the Cisco price list (see also the tables below), as there are different PAKs for different types of switches. A PAK can generate multiple licenses before it is fully redeemed (similarly to a debit card).

The Cisco License Manager tool can be used to automate the generation of licenses from PAKs for a large number of devices. It is also meant to optimize the license deployment for multiple devices connected in a stack.

Delivery of PAKs can be paper-based or electronic (eDelivery). In the former case, they are sent by postal mail to customers. Customers ordering paper-based PAKs are sent a software claim certificate by regular mail identifying their PAK string.

Electronic PAKs can be ordered by using special SKUs starting with the “L-“ prefix. Customers ordering an electronic PAK receive an email that points to a secure portal where they can download a pdf file containing the PAK information. This information is sent to the customer in a matter of minutes after purchase. (Note that “L-” SKUs are different from the “LL-” SKUs. The latter are relicensing for used equipment SKUs. See the Q&A section for more details.)

To order the appropriate PAKs, specific part numbers are available for each series of switches:

●   3750E-LIC= and L-3750E-LIC= (eDelivery type) are the orderable SKUs for the Cisco Catalyst 3750-E Series’ PAKs. Table 1 shows the upgrade options associated with each type of orderable SKU.

Table 1.       Cisco Catalyst 3750-E Regular and eDelivery Upgrade Options

●   3560E-LIC= and L-3560E-LIC= (eDelivery type) are the orderable SKUs for the Cisco Catalyst 3650-E Series PAKs, except for two models which have their own specific SKUs: 3560E-12D-LIC=, L-3560E-12D-LIC= (eDelivery type), 3560E-12SD-LIC2=, and L-3560E-12SD-LIC2= (eDelivery type). Table 2 shows the upgrade options associated with each type of orderable SKU.

Table 2.       Cisco Catalyst 3560-E Regular and eDelivery Upgrade Options

●   C3750X-LIC= is the orderable SKU for the Cisco Catalyst 3750-X Series. Table 3 shows the upgrade options associated with the orderable SKU.

Table 3.       Cisco Catalyst 3750-X Regular and eDelivery Upgrade Options

●   C3560X-LIC= is the orderable SKU for the Cisco Catalyst 3560-X Series. Table 4 shows the upgrade options associated with the orderable SKU.

Table 4.       Cisco Catalyst 3560-X Regular and eDelivery Upgrade Options

Available License Types

Permanent Licenses

A permanent license is valid for the life of the device on which it is installed (examples of permanent licenses are LAN Base, IP Base, and IP Services).

Temporary Licenses

Temporary licenses are used for evaluating new capabilities or in emergency situations. A temporary license allows a feature set to be used for 60 days of actual usage. When the 60-day period expires, the device will continue to operate normally until reloaded. After the reload, the device will default to the original functionality before the temporary license was enabled. Only the actual time that the temporary license is enabled counts towards the 60-day limit. The Cisco Technical Assistance Center (TAC) can provide an extension license for longer trials or other circumstances.

A temporary license for the Cisco Catalyst 3750-E/3560-E and 3750-X/3560-X switches can be obtained here: https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys=Y.

Feature Licenses

Some individual features can be enabled or disabled by license keys. These features check for their licenses before enabling themselves. A feature license will typically have a prerequisite before it will function, such as a requirement for a certain base license.

As of Cisco IOS Software Release 12.2(53)SE there are no feature licenses available.