C9800 Licensing: Smart Licensing, DNA Advantage, and Network Advantage
C9800 Licensing: Smart Licensing, DNA Advantage, and Network Advantage
When you deploy a Catalyst 9800 wireless controller, one of the first operational decisions you'll face involves licensing. Unlike older Cisco access point licensing models that relied on device-level entitlements, the C9800 uses a pool-based approach that simplifies procurement, tracking, and renewal. This article walks you through the three core licensing mechanisms you need to understand: Smart Software Licensing (SSL), Smart Licensing Using Policy (SLUP), DNA Advantage, and Network Advantage.
Understanding the C9800 Licensing Landscape
The C9800 wireless controller requires two licenses for basic operation: one AIR Network License and one AIR DNA License. Both licenses can be configured at the Essential or Advantage level, depending on your deployment needs. No licenses are required to boot the device itself—you can power on a controller and have it fully functional—but each access point connecting to the controller consumes one Network License and one DNA License. If insufficient DNA licenses exist to cover all connected APs, an out-of-compliance notification is displayed. This message is purely informational and does not impact the functionality of the wireless deployment.
This shift from device-level to pool-based licensing reflects Cisco's broader strategic move toward simplifying software license management. Rather than tracking individual AP entitlements, you provision a pool of licenses that can be shared across multiple controllers, removing the friction of traditional device-entitlement enforcement.
Why licensing matters for your deployment
Licensing is not just a compliance box—it directly affects which features your network can use. DNA Advantage and Network Advantage licenses unlock different capabilities. Understanding these differences early in your design phase prevents surprises during pilot and production phases. Additionally, the shift from traditional Smart Software Licensing (SSL) to Smart Licensing Using Policy (SLUP) has streamlined how you acquire, renew, and report on license usage.
Smart Licensing Using Policy (SLUP)
Starting with software release 17.3.2a, the C9800 supports Smart Licensing Using Policy (SLUP), an enhanced version of traditional Smart Licensing. SLUP simplifies the licensing experience with these key benefits:
| Capability | Benefit |
|---|---|
| Seamless Day 0 operations | No preliminary steps such as registration or key generation required unless you use an export-controlled or enforcement license. No evaluation licenses needed; features can be configured immediately. |
| Consistency across IOS-XE | Campus and industrial Ethernet switching, routing, and wireless devices running Cisco IOS-XE software have a uniform licensing experience. |
| Visibility and manageability | Tools, telemetry, and product tagging are available on the customer Smart Licensing Portal, offering real-time visibility into your license pool. |
| Flexible time-series reporting | Easy reporting options are available whether you are directly or indirectly connected to Cisco Smart Software Manager (CSSM) or operating in an air-gapped network. |
SLUP is the licensing framework you should assume for any C9800 deployment running 17.3.2a or later. It removes the complexity of registration and key management, allowing you to focus on your wireless deployment rather than licensing administration.
AIR Network License vs. AIR DNA License
When you provision licenses for your C9800, you need to allocate both an AIR Network License and an AIR DNA License for each access point that will connect to the controller. These two licenses serve different purposes:
| License Type | Purpose | Availability Levels | When Required |
|---|---|---|---|
| AIR Network License | Entitles each AP to connect to the controller and participate in the wireless network. Covers fundamental connectivity and basic wireless LAN features. | Essential, Advantage | For every access point connecting to the C9800 |
| AIR DNA License | Enables Cisco DNA Center integration, advanced analytics, policy-driven security, and DNA-based intelligence features. Covers the integration with the broader Cisco DNA ecosystem. | Essential, Advantage | For every access point if you want DNA features; optional if using basic networking only |
Both licenses are pool-based, meaning they are drawn from a shared pool managed by Cisco Smart Software Manager. You do not assign licenses to individual APs; instead, your C9800 pulls licenses from the pool as APs join.
Essential vs. Advantage Licensing Tiers
Each license family (Network and DNA) is available in two tiers: Essential and Advantage. The tier you choose determines which advanced features are enabled on your access points and controller.
| Feature / Capability | AIR Network Essential | AIR Network Advantage | DNA Essential | DNA Advantage |
|---|---|---|---|---|
| Basic WLAN connectivity | Yes | Yes | Yes | Yes |
| WPA2/WPA3 security | Yes | Yes | Yes | Yes |
| Guest and wireless network management | Yes | Yes | Yes | Yes |
| Advanced RF features (beam steering, band steering) | Yes | Yes | ||
| Cisco DNA Center integration | Yes | Yes | Yes | |
| Advanced policy enforcement and segmentation | Yes | Yes | ||
| Site-based analytics and location services | Yes | Yes | ||
| Mobility and roaming optimization | Yes | Yes |
Choosing between Essential and Advantage
If your deployment is primarily focused on providing basic wireless connectivity—think a small office or branch location—Essential licensing is sufficient and offers cost savings. However, if you are building a campus network that leverages DNA Center for policy management, requires advanced RF features, or needs analytics-driven insights, Advantage licensing is the right choice. Most enterprise deployments benefit from Advantage licensing given the additional RF optimization and policy capabilities it unlocks.
DNA Advantage vs. Network Advantage Licensing
Cisco occasionally uses the terms "DNA Advantage" and "Network Advantage" to describe bundled license offerings. It is important to clarify what these represent:
DNA Advantage refers to the AIR DNA License at the Advantage tier. This enables DNA Center integration, advanced analytics, and DNA-driven policies on your access points.
Network Advantage refers to the AIR Network License at the Advantage tier, which unlocks advanced RF management, band steering, and mobility optimization.
In practice, for enterprise deployments you will license both. A typical enterprise purchase order would include:
- AIR Network License – Advantage (for RF optimization and advanced wireless features)
- AIR DNA License – Advantage (for DNA Center and analytics integration)
This pairing is sometimes referred to as a "full Advantage stack" or simply "Advantage licensing." If you purchase only one, you have a hybrid setup—for example, Network Advantage + DNA Essential would give you advanced RF but limited DNA Center features.
License Management on the C9800
Once licenses are provisioned in Cisco Smart Software Manager, you need to verify they are properly registered and being consumed by your C9800 controller. Here are the key CLI commands for license management:
Show license summary
Device# show license summary
License Summary
===============
Smart Licensing is ENABLED
License Usage
=============
License Entitlement Tag Count Status
------------------------------------------------------------------
air-network-lic AIR-NETWORK-LIC 20 In Compliance
air-dna-lic AIR-DNA-LIC 20 In Compliance
This command gives you an overview of how many licenses you have and whether you are in compliance. The count represents the total entitlements available in your pool.
Show license detail
Device# show license
Chassis Number : FCW2222A1234
Device Identifier : 9C89B4D5E6F7G8H9I0J1
License Information :
--------------------------
Smart Licensing is ENABLED
Licensing Status : AUTHORIZED
Last Sync with Cisco : 2026-04-03 14:22 UTC
Product Information :
---------------------------
UDI : PID:C9800-L-F-K9,SN:FCW2222A1234
Registered Features :
----------------------------
air-network-lic (Count: 20)
air-dna-lic (Count: 20)
This detailed output shows your device's unique identifier, registration status, and which licenses are registered on the device.
Show license usage
Device# show license usage
License Type Total Licenses Remaining
------------------------------------------------------------
AIR-NETWORK-LIC 20 5
AIR-DNA-LIC 20 3
This command shows real-time consumption. In this example, you have 20 Network Licenses with 5 remaining (meaning 15 are in use) and 20 DNA Licenses with 3 remaining (17 in use). If the numbers for remaining licenses drop to zero, you will receive out-of-compliance notifications but the network continues to operate.
Show license all
Device# show license all
License Information
===================
Smart Licensing Status : ENABLED
Connection Status : Connected
Last Sync Time : 2026-04-03 14:22:03 UTC
Registration Status : REGISTERED
Feature Licenses
================
Feature Name Purchased Consumed Remaining Status
------------------------------------------------------------------------
AIR-NETWORK-LIC 20 15 5 IN USE
AIR-DNA-LIC 20 17 3 IN USE
A comprehensive view combining registration status, feature availability, and consumption metrics in one output.
Licensing Architecture and Compliance Behavior
Understanding how the C9800 behaves when licenses are insufficient is critical for production readiness. When an AP connects to the C9800, the controller attempts to assign both a Network License and a DNA License from the available pool. If insufficient licenses exist for either license type, an out-of-compliance notification is logged and optionally sent to Cisco Smart Software Manager for reporting. Critically, the AP does not disconnect, and wireless functionality is not impaired. The controller simply marks the state as out-of-compliance.
This design reflects Cisco's philosophy: licensing is a business control mechanism, not a technical enforcement gate. You can run your wireless network in an out-of-compliance state indefinitely if necessary. However, this is not recommended for production because:
- You lose visibility into your license consumption via CSSM reporting.
- Out-of-compliance status may trigger audit notifications or contractual obligations.
- You lose access to support and updates if your license expires while out-of-compliance.
- Advanced features tied to Advantage licensing may not fully activate.
Best practice is to monitor license remaining counts regularly (weekly or monthly) and pre-purchase additional licenses before you reach zero remaining. CSSM provides alerts and reporting to help with this.
License Reporting and Visibility
With SLUP, all license consumption and compliance data is reported to Cisco Smart Software Manager in near real-time (if connected) or batch mode (if air-gapped). You can access this information through:
- Cisco Smart Licensing Portal – A web-based dashboard showing all registered devices, license pools, consumption trends, and compliance status across your organization.
- C9800 CLI commands – Direct queries for immediate status and troubleshooting (shown above).
- Cisco DNA Center – If integrated, DNA Center can display license consumption and recommend license adjustments based on your deployed AP count and growth projections.
For air-gapped deployments (networks without outbound internet connectivity), Cisco Smart Software Manager on Premises (CSSM-OP) allows you to collect and manage licenses locally. License files are manually imported and exported, but the reporting and visibility mechanisms remain the same.
Licensing Migration and Upgrades
If you are upgrading from older APs with device-level licenses to a C9800 with pool-based licensing, you may be able to migrate some or all of your existing entitlements. Cisco provides a license migration service through CSSM. Contact your Cisco account team to evaluate which licenses are eligible for migration. Typically, enterprise agreements and software subscriptions offer more flexibility for migration than perpetual licenses.
Additionally, if you upgrade from Essential to Advantage licensing, the C9800 detects the new tier and activates additional features without requiring a controller restart. The feature activation is tied to license registration, not device registration.
Common Licensing Scenarios
Scenario 1: Small branch with 5 APs
You deploy 5 Catalyst 9120 APs in a branch office using a single C9800-L controller. You purchase 5 AIR-NETWORK-LIC and 5 AIR-DNA-LIC licenses at the Essential tier to save cost. As APs join the controller, licenses are consumed from the pool. If you add a 6th AP later, you will receive an out-of-compliance notification for the DNA license until you purchase an additional license.
Scenario 2: Campus network with growth plan
Your campus has 200 APs deployed today but you plan to grow to 250 APs within 18 months. Rather than purchasing exactly 200 licenses, you purchase 250 AIR-NETWORK-LIC and 250 AIR-DNA-LIC at the Advantage tier. This provides headroom for growth and ensures you do not hit out-of-compliance status during expansion. Additionally, with pool-based licensing, any new APs (whether deployed in campus A, campus B, or a remote site) automatically consume from the same license pool, simplifying cross-site management.
Scenario 3: Hybrid Essential and Advantage
You have a small remote site with 10 APs that only needs basic connectivity, and a headquarters campus with 50 APs that uses DNA Center extensively. You could license the remote site with 10 AIR-NETWORK-LIC Essential and 10 AIR-DNA-LIC Essential, and the HQ site with 50 AIR-NETWORK-LIC Advantage and 50 AIR-DNA-LIC Advantage. The C9800 at each site consumes from its designated pool, and compliance is tracked separately per location.
Troubleshooting Licensing Issues
Common licensing problems and their resolutions:
| Problem | Cause | Resolution |
|---|---|---|
| Controller shows "License Status: Unregistered" | Device has never registered with CSSM or registration has lapsed. | Verify network connectivity to license servers. Check firewall rules. Review license registration credentials in CSSM. Run show license all to see the specific error. |
| Remaining licenses stuck at zero; controller out-of-compliance | You have more APs than licenses, or license pool is exhausted. | Purchase additional licenses via your Cisco account. Once purchased and synced to CSSM, logs into the device to pull the new pool. Run show license usage to confirm. |
| Advanced features not working despite Advantage license | License not fully activated, or AP software version does not support the feature. | Verify show license shows Advantage licenses in use. Check AP software version matches or exceeds the feature requirement. Restart the AP or controller to force license re-evaluation. |
| CSSM shows old device no longer in use but license still counted | Device was retired but license pool was not updated; ghost license remains allocated. | Remove the old device from CSSM inventory. Return the license to the active pool. The next sync cycle will free the license for reuse. |
Best Practices for C9800 Licensing
- Plan for growth – Purchase 20–30% more licenses than your current AP count to accommodate growth and avoid compliance gaps during expansion.
- Use CSSM reporting – Review license consumption monthly in the Cisco Smart Licensing Portal. Set up alerts for when remaining licenses fall below a threshold (e.g., less than 10% remaining).
- Align with DNA Center – If you use DNA Center, enable license integration so DNA Center can track consumption and recommend license adjustments based on your deployment.
- Document your licensing tier – Maintain a spreadsheet or configuration document listing which APs are under Essential vs. Advantage licensing. This simplifies audits and compliance reviews.
- Test compliance before production – In your pilot, intentionally test out-of-compliance behavior to confirm that wireless still functions and that your compliance notification process is working.
- Automate license synchronization – Ensure your C9800 has reliable outbound connectivity to Cisco Smart Software Manager for license syncs. For air-gapped networks, establish a regular manual sync schedule (e.g., monthly).
- Consider multi-year agreements – Multi-year software subscriptions offer better pricing than annual licenses and provide more flexibility for license migration and upgrades.
Key Takeaways
Smart Licensing Using Policy (SLUP) is the licensing model for C9800 controllers on 17.3.2a and later. It eliminates registration and key management complexity, allowing immediate feature activation and seamless Day 0 operations.
Every access point requires one AIR Network License and one AIR DNA License. Both are pool-based and drawn from a shared pool managed by Cisco Smart Software Manager. There is no per-AP license binding; licenses are consumed on-demand as APs connect.
Essential and Advantage tiers unlock different capabilities. Essential provides basic wireless connectivity; Advantage adds advanced RF features, DNA Center integration, analytics, and policy enforcement. Most enterprise deployments benefit from Advantage licensing.
Out-of-compliance status is informational, not enforcement. If you run out of licenses, wireless continues to function, but you lose visibility and support benefits. Monitor license remaining counts regularly and pre-purchase licenses before hitting zero.
Use Cisco Smart Licensing Portal and CLI tools to track consumption and compliance. Set up alerts in CSSM, review license trends monthly, and align license purchases with your deployment roadmap to avoid surprise out-of-compliance incidents.