Do You Need a DNA License for Basic Switching? The Straight Answer

Can You Run a Cisco Switch Without a DNA License? 

This question fills Cisco Community threads, and the answer is a "no, but", where the "but" is exactly where people get confused. So let's separate the two things being asked, because they have different answers. 

Do You Need a DNA License for Basic Switching? 

No. Basic switching does not need an active DNA subscription. Once you own a Catalyst 9000, its perpetual Network licence runs Layer 2 and Layer 3 switching, VLANs and routing on its own. The DNA, now Catalyst, subscription adds controller features and support, not basic forwarding, and if it lapses, the switch keeps switching. 

That's the straight answer. Now, the nuance that trips people up. 

Do You Have to Buy a DNA License With a New Catalyst 9000? 

Yes. Here's the catch that makes people think DNA is required for switching. When you buy a new Catalyst 9000 switch, Cisco requires you to order a DNA or Catalyst subscription with it, in a three, five or seven-year term, alongside the perpetual Network licence (Cisco Catalyst 9300 ordering guide). 

So you cannot buy a new 9000 without the subscription. That's a purchasing rule. 

It is not a running rule. Buying the subscription and needing it to switch packets are two different things, and conflating them is the whole source of the confusion. 

What Happens When the DNA License Expires? 

The switch keeps working. Basic switching and routing run on the perpetual Network Stack licence, which never expires, so the hardware does not become unusable when the subscription term ends. 

What you lose is the subscription layer: the Cisco Catalyst Center automation and assurance, the advanced analytics and controller-driven workflows, and the software updates and TAC support that ride with the subscription. 

In plain terms: your switch still switches. It just stops getting the controller features, the updates and the support. The data plane runs; the value-added software layer goes quiet. 

Can You Run a Cisco Switch Without a DNA License, Then? 

For the switching itself, yes, once you own the switch. The perpetual Network licence, Essentials or Advantage, is what enables the actual switching and routing features, and it is permanent. A Catalyst 9000 with an expired or unused DNA subscription still forwards traffic, runs VLANs and routes. 

Under Smart Licensing Using Policy, a lapsed subscription shows up as an out-of-compliance status in Cisco's portal, not as an outage on your network. Nothing stops. 

The honest caveat is that "can" and "should" differ. Running production switches without current software support and security updates is a risk, even though the switch works. So while you don't need DNA to keep switching, you do want current support on anything carrying real traffic. 

What Does the DNA License Actually Give You? 

The controller and software layer, not the basic switch. The subscription powers Cisco Catalyst Center: automation such as plug-and-play provisioning and image management, assurance and analytics, and on the Advantage tier, SD-Access and group-based segmentation. It also carries the embedded software support and TAC access. 

So the subscription is far from nothing. It is the automation, assurance and support layer of a modern campus. It just is not what makes a switch a switch. If you don't use Catalyst Center and don't need the fabric, the subscription is doing less for you, which is a reason to size its tier carefully, not to imagine you can buy a new 9000 without it. 

Do Older Cisco Switches Need a DNA License? 

No. DNA and Catalyst subscriptions apply to the Catalyst 9000 family and other current platforms. Older switches, such as the Catalyst 2960 generation, don't use the DNA licensing model at all, so the question doesn't arise for them. The confusion is specific to the current 9000-series two-layer licensing. 

The Short Version 

Two rules, kept separate, answer everything. To buy a new Catalyst 9000, the DNA or Catalyst subscription is mandatory. To run basic switching, it is not the perpetual Network licence that handles that, and a lapsed subscription costs you controller features, updates and support, not the switching. 

Proactive Data Systems, a Cisco Preferred Partner with 35 years of experience and more than 1,500 customers, sizes the subscription tier to what you'll actually use and keeps your licensing and support in order, so you neither over-buy features you won't touch nor run production switches unsupported. If your DNA licensing or renewals are a tangle, send us the details, and we'll sort them.