FAQ on Catalyst Routing Essentials License?
Who Should Consider the Catalyst Routing Essentials License?
Catalyst Routing Essentials is designed for customers who need standard routing deployments for secure branch connectivity. It’s perfect for those who don’t require a controller-based SD-WAN environment and previously used the ISR4k platform cisco catalyst routing license.
How Does Catalyst Routing Essentials Compare to the ISR4k IP Base License?
While it targets the same customer segment as the ISR4k IP Base, Catalyst Routing Essentials includes additional features like point-to-point IPsec, MACsec, and an application-based firewall—features that would otherwise require separate licenses.
What Are the Key Features of the Catalyst Routing Essentials License?
It includes standard routing features, point-to-point IPsec, basic application firewall, and on-premise SD-routing. This package also unlocks throughput capabilities for IP-CEF and Crypto traffic up to 2Gbps.
Is High-Security Framework Support Available?
Catalyst Routing Essentials supports basic security features like IPsec but does not include higher security functions like SASE/SSE. For these, you’ll need Cisco DNA Essentials or Advantage.
Does Catalyst Routing Essentials Include Advanced VPN Features?
No, it only supports point-to-point IPsec. For DMVPN, FlexVPN, and GetVPN, you’ll need Cisco DNA Essentials.
How Much IPsec Traffic Can I Use with Catalyst Routing Essentials?
You can use up to 2Gbps aggregated IPsec traffic over point-to-point tunnels, provided the platform supports this throughput.
Do I Need an Additional HSEC License for IPsec Traffic Above 250 Mbps?
No, HSEC is included automatically with the Catalyst Routing Essentials license, allowing for higher IPsec throughput.
Is Intrusion Prevention (IPS) Supported?
No, IPS is not supported on Catalyst Routing Essentials. For IPS and other advanced security services, you’ll need Cisco DNA Essentials or Advantage.
Can I Host Applications with Catalyst Routing Essentials?
You can host generic container-based applications, but advanced Cisco Security apps like AMP and ThreatGRID are only available with Cisco DNA Essentials or higher.
Is Cloud Delivered SD-Routing Available?
No, Catalyst Routing Essentials supports only on-prem SD-routing. For cloud-managed SD-routing, you’ll need to upgrade to Cisco DNA Essentials or Advantage.
Does Catalyst Routing Essentials Support Voice Services?
No, voice services and voice gateway functionality are not included. For these features, choose Cisco DNA Advantage.
Can I Use Catalyst Routing Essentials for SD-WAN Deployments?
If you need SD-WAN functionality, you’ll need to migrate to Cisco DNA Essentials or Advantage. Catalyst Routing Essentials is focused on routing and basic security, not SD-WAN.
How Do I Order Catalyst Routing Essentials?
You can purchase it along with your Catalyst 8300 or 8200 series hardware or as a separate subscription using the L-DNA-C8xxx PIDs, depending on the platform.
How Do I Activate Catalyst Routing Essentials?
No additional CLI commands are required beyond the existing “license boot level network-essentials” command.
Why Is Catalyst Routing Essentials Only Available as a 7-Year Subscription?
It’s designed to provide lower total cost of ownership (TCO) for customers focused purely on routing, without plans to migrate to SD-WAN.