Cisco Network vs DNA Licensing: Catalyst 9000 Comparison

For decades, buying a Cisco switch was straightforward: you bought the hardware and selected a feature set like LAN Base or IP Services. However, with the introduction of the Catalyst 9000 family (Browse C9200 | Browse C9300), Cisco completely overhauled this model.

Introduction: The “Hardware” vs. “Software” Split

If you are upgrading from legacy Cisco switches (like the 2960-X or 3750-X), you are used to buying a single feature set like IP Base or IP Services. With the Catalyst 9000 family (C9200, C9300, C9500), Cisco has separated the licensing into two distinct layers:

1. Network Stack (Perpetual): The foundational capabilities of the hardware (switching, routing).
2. DNA Stack (Subscription): The intelligent management and automation capabilities.

This guide clarifies exactly what you get in each stack so you don’t overspend on features you don’t need.

What is “Hardware” License (Network Essentials & Advantage)

The first component of your license is the Network Stack.

Crucial Concept: This is a Perpetual License. Once you purchase it, you own these features for the life of the hardware. It does not expire, and it does not require renewal to keep the switch switching and routing.

Network Essentials vs. Network Advantage

Think of this as the engine of the car. It dictates how fast and how complex the packet forwarding can be.

1. Network Essentials (The Access Layer Standard):
   • Legacy Equivalent: LAN Base / Basic IP Base.
   • Capabilities: Layer 2 switching, routed access, and basic security (ACLs).
   • Best for: Branch offices or Catalyst 9200 deployments where complex routing is handled by the core.
2. Network Advantage (The Core/Advanced Standard):
   • Legacy Equivalent: IP Services / Enterprise Services.
   • Capabilities: Full Layer 3 routing (BGP, OSPF, IS-IS), advanced segmentation (VRF, VXLAN, MPLS*), and High Availability (StackWise Virtual).
   • Best for: Core/Distribution layers, or networks requiring complete segmentation.

Comparison Table: Network Stack (Perpetual)

Note: MPLS support depends on the hardware model (e.g., supported on C9300, not on C9200).

What is Catalyst DNA Center License

The second component is the DNA Stack.

Crucial Concept: This is a Subscription License (Term-based). It is mandatory to purchase with the hardware (usually a 3, 5, or 7-year term). It unlocks automation, analytics, and management via the Cisco Catalyst Center (formerly DNA Center).

Based on the detailed offer charts you provided, here are the “What is” introduction sections for the three Cisco DNA subscription tiers. These are optimized for your article to clearly distinguish the value of each package.

What is Cisco DNA Essentials?

Cisco DNA Essentials is the entry-level subscription designed to enable base automation and monitoring with centralized management. It is available in 3, 5, or 7-year terms and is typically paired with the Network Essentials hardware stack.

• Core Capabilities: It focuses on Basic Automation, such as Network Plug and Play (PnP) for zero-touch provisioning and LAN Automation.
• Management & Visibility: It includes Element Management features like Software Image Management (SWIM) for automated updates and Basic Assurance via Network, Client, and Application Health Dashboards.
• Telemetry: It provides Full Flexible NetFlow for traffic monitoring.

What is Cisco DNA Advantage?

Cisco DNA Advantage is the mainstream subscription tier that is inclusive of all Cisco DNA Essentials features but adds critical capabilities for advanced automation and AI-driven analytics.

• Advanced Automation: This tier unlocks SD-Access (Software-Defined Access), Encrypted Traffic Analytics (ETA)*, and the embedded wireless controller feature for Catalyst 9800 Series.
• Assurance & Analytics: It provides deep visibility through Device 360 and Client 360 views, along with compliance reporting and Network Health Insights.
• Advanced Telemetry: It adds visibility tools like ERSPAN, AVC (NBAR2), and Wireshark integration.
• Important Note: While this package supports advanced features like ETA, the customer needs to buy ISE (Identity Services Engine) and Stealthwatch licenses separately to enable the full capability.

What is Cisco DNA Premier?

Cisco DNA Premier is the top-tier “all-in-one” bundle. It is a single SKU that includes the complete Cisco DNA Advantage package plus integrated security licenses to enable all use cases immediately.

• Inclusive Security: Unlike Advantage, Premier automatically includes ISE Base + ISE Plus licenses (25 Endpoints) and Stealthwatch licenses (25 flows).
• Full Use Case Enablement: Because it bundles the security licenses, it fully enables SD-Access and Encrypted Traffic Analytics (ETA) without needing additional line items on the Bill of Materials.
• Subscription Terms: Like the other tiers, it is available in 3, 5, and 7-year subscriptions.

DNA Essentials vs. Advantage vs. Premier

1. Cisco DNA Essentials:
   • Provides basic automation (PnP – Plug and Play) and basic health monitoring.
   • Limitation: Dashboard visibility is often limited to real-time or 24-hour history.
2. Cisco DNA Advantage:
   • The standard for modern enterprises.
   • Unlocks SD-Access (Software-Defined Access), AI/ML analytics, Encrypted Traffic Analytics (ETA), and full historical reporting.
3. Cisco DNA Premier:
   • The “All-Inclusive” bundle.
   • Includes everything in Advantage PLUS licenses for Cisco ISE (Identity Services Engine) and Stealthwatch.

Real-World SKU Examples (The “1+1” Logic)

When quoting or purchasing, you cannot buy the hardware “naked.” The hardware SKU usually indicates the Network License level, which is then paired with a matching DNA subscription SKU.

The Formula:

Hardware (Network License) + DNA Subscription = Operational Switch

Example 1: A Standard Access Switch (Network Essentials)

• Hardware SKU:C9200-24T-E
  • (Note the “-E” suffix, indicating Network Essentials)
• Mandatory DNA SKU:C9200-DNA-E-3Y
  • (DNA Essentials, 3-Year Term)

Example 2: A Core Switch (Network Advantage)

• Hardware SKU:C9300-24T-A
  • (Note the “-A” suffix, indicating Network Advantage)
• Mandatory DNA SKU:C9300-DNA-A-3Y
  • (DNA Advantage, 3-Year Term)

Feature Comparison Matrix

Here is a quick reference matrix to help you decide which tier meets your technical requirements.

How to Choose Cisco DNA?

Scenario A: The “Connectivity Only” User

• Profile: Simple branch office, no complex routing, no plans for SD-Access or Catalyst Center automation.
• Recommendation: Network Essentials + DNA Essentials (3 Year).
• Why: Lowest Total Cost of Ownership (TCO). When the 3-year subscription expires, the switch continues to function as a standard Layer 2 switch.

Scenario B: The Core Network / Power User

• Profile: Core/Distribution layer requiring BGP, OSPF, VRF segmentation.
• Recommendation: Network Advantage + DNA Essentials.
• Why: You get the robust hardware routing (Network Advantage), but you don’t pay extra for the AI/Automation features of DNA Advantage if you aren’t using the controller.

Scenario C: The Innovator (SD-Access)

• Profile: Enterprise deploying SD-Access, requires deep visibility into application health (Cisco Assurance).
• Recommendation: Network Advantage + DNA Advantage.
• Why: SD-Access is a “better together” story. You need the VXLAN capability from the Network stack and the Controller capability from the DNA stack.

FAQ – About Cisco Catalyst 9000 License and DNA