Contents
Key takeawaysHow licensing worksThe tiersThe device countChoosing the tierChecking your positionDiscounts and a worked dealWhat we have seenAnswering the account teamRenewal timelineWhat to do nextFAQCatalyst Center is licensed per managed device, at Essentials or Advantage, on 3, 5 or 7 year terms. Pick each device's tier by the features your team runs today, and true the count against inventory before Cisco quotes.
- Every device counts. Each managed Catalyst switch, access point and router needs its own subscription, and that count drives 20 to 35 percent of network spend.
- The rename is branding. DNA Center became Catalyst Center with the same code base, tiers and counting.
- Feature use picks the tier. In 6 of 10 networks we benchmarked, Essentials covered the features in use while Advantage was paid across the campus.
- Premier is retired. Test the Cisco DNA Expansion Pack offered in its place against how your SOC actually uses network telemetry.
- Term and bundle set the band. Longer terms and one ELA covering Catalyst Center, Cisco Security and ISE took our 5,200 device renegotiation to 38 percent off list.
- Negotiate True Forward early. Write 8 to 15 percent annual device growth headroom into the order before signature.
How does Cisco Catalyst Center licensing work?
You license the devices Catalyst Center manages, not the Catalyst Center server. The software runs on a Cisco hardware appliance or as a virtual appliance on VMware ESXi or AWS, and a switch, access point or router can only send it data once that device sits inside a Catalyst or Cisco DNA subscription.
Each device carries a subscription at a tier on a 3, 5 or 7 year term. Switching and wireless are sold on all three terms, routing stops at 5 years, and a 1 year term is offered only at renewal.
Every connected Catalyst switch, wireless access point and router carries its own subscription. Two counts matter: the inventory in Catalyst Center and the one in your asset system. The bill should follow the smaller, current figure, whatever the older purchase order says.
What happens to a switch when its subscription ends?
A Catalyst 9000 switch keeps forwarding traffic. It ships with a perpetual network stack license, Network Essentials or Network Advantage, and Cisco states the switch keeps every network stack feature when the subscription lapses. What goes away is the Catalyst Center automation, assurance and analytics for that device.
The first term is not optional, because Cisco sells Catalyst 9000 switch software only through the subscription model. The tier and the count at each renewal are yours to decide.
Did the rename from DNA Center change the licensing?
No. DNA Center became Catalyst Center on the same code base, with the same tiers and the same per device counting, and existing DNA Center licenses move to Catalyst Center subscriptions at renewal on the same tier mapping.
The product names did change. Switching tiers are now sold as Catalyst Essentials and Catalyst Advantage, while wireless keeps the Cisco DNA names. If a partner uses the rename to reopen tier or term, ask which clause changed.
Cisco Negotiations in 2026: How to Prepare, and the Tactics You Will Face
What do the Essentials, Advantage, Premier and Advisory tiers cover?
Essentials covers core management and monitoring, and Advantage adds automation and assurance. Premier, the security telemetry tier, is retired. Advisory appears on quotes beside the tiers but is a block of engagement hours.
| Tier | What it adds | Status in 2026 | Our view |
|---|---|---|---|
| Essentials | Core management and monitoring: Plug and Play, software image management, health dashboards, basic automation | Current; not offered on Catalyst 9600 | The right home for brownfield campuses and surplus devices |
| Advantage | Automation and assurance: SD-Access, full Assurance, AI Network Analytics, AI Endpoint Analytics; switching includes ISE Advantage licenses (not on Catalyst 9200) | Current, and Cisco's recommended tier | The partner default for every switch; justified only where the features are in daily use |
| Premier | Advantage plus ISE and Stealthwatch licenses: Encrypted Traffic Analytics, advanced security telemetry, Talos threat intelligence | End of sale March 9, 2022 | A 30 to 40 percent uplift over Advantage; only where the SOC consumes the network telemetry |
| Advisory | Engagement hours with Cisco or partner specialists | Services line | Bundle the hours at the Advantage tier rate inside the ELA |
Is Premier still worth paying for?
You can no longer buy Premier itself. Cisco stopped selling it on March 9, 2022, the last switching renewal date was March 8, 2024, and support ended March 31, 2025.
Cisco points former Premier buyers to Advantage plus the Cisco DNA Expansion Pack, an add on that bundles ISE, Secure Network Analytics (formerly Stealthwatch), DNA Spaces and ThousandEyes. It pays back only where network security telemetry is core to security operations, and AI Endpoint Analytics is already in Advantage.
Where does Meraki fit?
Meraki sits outside Catalyst Center licensing. Meraki devices run from the Meraki Dashboard on their own per device subscription, with three tiers of their own under the older models (Enterprise, Advanced and Plus), even inside the same ELA paperwork.
Cisco Networking Subscription now puts newer Catalyst and Meraki hardware under shared Essentials and Advantage tiers with a 36 month minimum, so check which model each quote line uses. Our Meraki Dashboard tier guide covers the Meraki side.
Cisco ELA Guide 2026
How to structure a Cisco ELA that bundles Catalyst Center, Security and ISE, with the True Forward clauses to ask for.
Get the white paper →How much of the network budget does the device count drive?
In the networks we benchmark, the per device count drives 20 to 35 percent of network spend. Purchase order history records what you bought, and the inventory records what you manage. The gap is spend with no return, and it compounds because subscriptions renew on the stated count unless someone restates it.
Worked example: what a stale count costs
Take the 5,200 device network from the renegotiation below, which works out at about $248 per device a year at list. Assume, for illustration, that inventory and the asset system agree on 4,900 managed devices, because 300 retired switches and access points were never removed from the order.
| Price basis | Per device | Annual cost of 300 devices | Over a 5 year term |
|---|---|---|---|
| List | $248 | $74,400 | $372,000 |
| ELA net rate | $154 | $46,200 | $231,000 |
The discount shrinks that waste. Only a count restated before signature removes it.
Which Catalyst Center tier does your network actually need?
Buy the tier your team operates today, decided device by device. In six of ten networks we benchmarked, Essentials covered the features in use, while Advantage billed across the campus for automation and assurance that never went into operation. Map features to devices before you talk price:
- SD-Access. Which switches sit in provisioned fabric sites? Devices outside the fabric do not need Advantage for this reason.
- Assurance and AI Network Analytics. Does operations use these views every week, beyond the basic health dashboards in Essentials?
- AI Endpoint Analytics and ISE. Is endpoint profiling feeding ISE policy today? If so, count the ISE Advantage licenses already included with Catalyst Advantage switches (all models except Catalyst 9200) before buying more ISE.
- Automation. Do templates or policy automation run on these devices, or does the team still configure them by CLI?
Why we disagree with Advantage on every switch "for future proofing"
The partner advice is to put Advantage on every campus switch so the network is ready for whatever comes later. We disagree, because that advice replaces a question you can measure today, which features you run, with a future one procurement cannot argue with, and tiers get chosen at deployment, when the team knows least about what it will operate.
In the over tiered networks, the assurance dashboards went unwatched, the automation runbooks were never built, and the premium billed on every switch for every year of the term. Buy Advantage where the features run now, keep the rest on Essentials, and write a mid term upgrade right at the agreement's discount into the contract.
How do you check your own license position before the renewal?
Start in Catalyst Center under Tools, then License Manager. It shows purchased against in use licenses by device type, and it can change a device's license level between Essentials and Advantage.
- Licenses tab. Totals purchased through Cisco Smart Software Manager (CSSM), licenses about to expire, and out of compliance details.
- Devices tab. License type, expiry, virtual account and site for every device. Export it and match it against your asset system.
- CSSM Smart Account. The entitlements Cisco believes you own. Any difference from Catalyst Center is the first item to raise with the partner.
- Refresh records. Devices retired, replaced or moved to Meraki that still hold a subscription.
See our guides to CSSM compliance reporting and DNA license rightsizing.
What discounts are realistic, and what did a 5,200 device renegotiation achieve?
Term and bundling set the discount band. A 5 year term typically opens 35 to 45 percent off list and a 7 year term 40 to 50 percent, the latter for switching and wireless only. Bundling Catalyst Center with Cisco Security and ISE in one ELA adds the volume band.
In our worked renegotiation, a retail network ran Catalyst Center across 5,200 devices: 3,800 switches, 1,200 wireless access points and 200 routers. Advantage sat on the switches and APs and Essentials on the routers. A 5 year ELA restructured the same network:
| Element | What the ELA wrote in |
|---|---|
| Annual cost | $800K against $1.29M at list, 38 percent off |
| Cost over the 5 year term | $4.0M against $6.45M at list |
| Scope | Catalyst Center, Cisco Security and ISE in one agreement |
| Growth allowance | 8 percent annual device growth before True Forward triggers |
| Advisory | 80 hours a year at the Advantage tier rate |
Every element was in the order language, with no side promises. The work ran count first, tier second, bundle third and term last, using the buyer's own numbers assembled before the renewal call.
A Catalyst Center renewal is won in the inventory export, weeks before anyone opens the partner's quote.
How much does True Forward headroom save?
True Forward is how a Cisco EA trues the subscription up to actual device growth at each anniversary, billing added devices forward for the rest of the term. Negotiate 8 to 15 percent annual device growth headroom before it triggers.
Say the 5,200 device network grows 10 percent in year one, and the excess bills at the ELA net rate of about $154 for 4 remaining years.
| Headroom in the order | Devices covered | Devices billed | True Forward cost over 4 years |
|---|---|---|---|
| None | 0 | 520 | $320,300 |
| 8 percent | 416 | 104 | $64,100 |
| 15 percent | 780 | 0 | $0 |
Size the ask from the past 12 months of device growth and your 5 year projection. Our ELA true up guide covers the milestone mechanics.
What have we seen in recent Catalyst Center renewals?
Three patterns recur across the networks we benchmark:
- Advantage everywhere by default, billing across the campus where Essentials would cover the features the team runs.
- Counts inherited from purchase orders instead of the devices Catalyst Center actually manages.
- Scattered renewal dates, so no single conversation ever carries the whole network.
Co terming fixes the third and makes the other two easier to correct. With scattered dates, every true up is a small negotiation you cannot win; with one date, the whole device count is on the table at once. The wider Cisco library sits in the Cisco practice.
What will the Cisco account team say, and how should you answer?
- "Advantage on every switch future proofs the network." We will buy Advantage for devices running SD-Access, Assurance or AI Endpoint Analytics today, with a mid term upgrade right at this discount for the rest.
- "The renewal carries forward your installed base." Our installed base is what Catalyst Center manages, and here is the License Manager export matched to our asset records.
- "The ELA discount needs Webex, Splunk and Meraki inside." Quote each standalone first, and we will add them where the bundle beats that price.
- "You lose the Premier security features unless you add the Expansion Pack." Show us which SOC workflows use Encrypted Traffic Analytics or Secure Network Analytics data today, and quote the Expansion Pack as its own line so we can price it separately.
- "The 7 year term gets you the best rate." Quote 5 and 7 years side by side for switching and wireless, and show us the rate on each device class, since routing cannot go past 5 years.
Contract wording to ask for
- Tier mix by device class. Essentials and Advantage quantities listed separately, so a later shift to Essentials is a quantity change.
- Growth headroom. The annual device allowance before True Forward applies, stated as a percentage in the order.
- Price hold on additions. New devices and Essentials to Advantage upgrades at the original discount off list.
- Retired device removal. The right to take retired devices off the count at each anniversary.
- Co termination. One end date for every Catalyst and DNA subscription in scope.
Which mistakes raise the bill most often?
- Paying for ISE twice. Switching Advantage includes ISE Advantage licenses, the quantity depending on switch model and none on Catalyst 9200, so check before the ELA adds a separate ISE line.
- Modeling the 7 year band on routers. Routing stops at 5 years, so the deeper band cannot apply to that part of the count.
- Outlasting the hardware. A 7 year subscription on switches you plan to refresh in 4 years pays for 3 years on devices that will be gone. Match each device class's term to its refresh plan.
- Renewing on the old count. Devices retired, replaced or moved to Meraki stay billed until someone removes them, as the stale count example above shows.
- Carrying Premier line items forward. Premier support ended in 2025, so any quote that still lists Premier PIDs needs to be rebuilt on current tiers.
When should you start preparing for a Catalyst Center renewal?
Start 12 months out for a network of a few thousand devices. A smaller network may not justify an ELA at all, and there co terming the subscriptions and fixing the tier mapping deliver most of the savings.
| Before renewal | What to do |
|---|---|
| 12 months | Export License Manager and CSSM data, match it to asset records, start the feature to tier mapping |
| 6 months | Model True Forward exposure, fix the bundle scope, get standalone quotes for Webex, Splunk and Meraki |
| 3 months | Send the partner your trued count, tier mix and terms, and ask for quotes on 5 and 7 year terms |
| 1 month | Check the order language for tier mix, headroom, price holds and Advisory hours, and sign only what is written |
What to do next
- Count the managed devices. Every switch, AP, controller and router, cross checked between Catalyst Center inventory and the asset management system.
- Map enabled features to tiers. Move every device whose feature use fits Essentials out of Advantage.
- Model True Forward exposure. Use the past 12 months of device growth and the 5 year projection, then size the headroom ask from that growth.
- Price the ELA bundle both ways. Catalyst Center plus Security plus ISE inside, and each candidate addition (Webex, Splunk, Meraki) priced standalone first.
- Open with your own numbers. The trued count, the right sized tier mix, the term discount, headroom and Advisory hours, all in the order language. The Cisco practice runs this sequence with you.
Frequently asked questions
What are the Cisco Catalyst Center licensing tiers?
Cisco now sells two software tiers per device, Essentials and Advantage, on 3, 5 or 7 year terms. Premier, which added Encrypted Traffic Analytics, advanced security telemetry and Talos threat intelligence, is end of sale, and Advisory covers engagement hours. Older contracts often still list all four.
Did the DNA Center to Catalyst Center rename change licensing?
No. The licensing model, tier structure and device counting carried over, and existing DNA Center licenses transition to Catalyst Center subscriptions at renewal on the same tier mapping. Refuse any uplift justified by the rename alone.
How does Catalyst Center device count licensing work?
Pricing follows managed devices. Each connected Catalyst switch, wireless access point and router carries its own tier license, and a device outside the subscription cannot send telemetry to Catalyst Center. The appliance itself does not drive the cost.
Is the Premier tier worth the uplift?
Only where network security telemetry is core to the security operations program. Premier carried a 30 to 40 percent uplift over Advantage, and for most enterprise networks Advantage delivers the required automation. Apply the same test to the Cisco DNA Expansion Pack that replaced it.
What discounts are realistic on Catalyst Center licensing?
Roughly 35 to 45 percent off list on a 5 year term and 40 to 50 percent on 7, with ELA bundling of Catalyst Center, Cisco Security and ISE adding volume. Our worked renegotiation cut the annual cost from $1.29M at list to about $800K.
What is True Forward and how should it be negotiated?
True Forward is Cisco's mechanism for truing an EA subscription up to actual device growth at each anniversary. Size a growth allowance from your own recent device additions, get it into the order before signature, and confirm the price for devices above it.
Is Meraki licensed under Catalyst Center?
No. The Meraki Dashboard is a separate cloud managed platform with its own per device per year subscription and, under its older licensing models, its own three tiers: Enterprise, Advanced and Plus. Treat it as a separate licensing conversation even inside the same ELA.
Should I renew the subscription on switches I plan to replace soon?
Usually not for a full term. A switch keeps its perpetual network stack features if the subscription lapses, and Cisco offers a 1 year term at renewal, so devices due for refresh within a year need not carry 3 more years of subscription.