Why did nothing break when we stopped renewing Cisco DNA?

Quick Take

Quick Take: Nothing broke because the features you use sit on a perpetual Network Stack, not on the DNA term that ended. Layer 2 and Layer 3 keep forwarding. What stopped is SD-Access, Assurance, ETA, and the TAC tied to that subscription. SD-WAN controller mode is the exception: management stops if you do not renew.

Published 2026-09-29. This page is for the person who runs the network, not for the person building the CCW cart.

For a China enterprise RFQ, TAOHAN issues a dated quote. Any channel price on that quote is pending confirmation. A 13% VAT special fapiao can be issued with the invoice. If the site will not use Catalyst Center or SD-Access, buy DNA Essentials for 3 years and do not renew. SD-WAN controller mode must renew. C9600 and C8500 have no Essentials tier.

Two licenses shipped on one order

Quick Answer: Cisco DNA is a term subscription stacked on top of a perpetual Network Stack. The stack is the switch. The subscription is the add-on term. When the term ends, the stack does not end with it, which is why a normal campus network looks unchanged on the morning after expiry.

Think of the chassis as a phone you already own. The DNA term is a service plan that was mandatory at purchase. When the plan ends, the phone still places calls. The plan's extras — here SD-Access, Assurance, and ETA — stop. Cisco's switching FAQ states the switch continues with all Network Stack features intact, and that Catalyst 9000 keeps software updates tied to the box, including major, minor, and maintenance releases.

The same FAQ answers the fear directly: Layer 2 and Layer 3 services continue, and updates for that function stay tied to the perpetual network OS, Network Essentials or Network Advantage. Updates that belong only to the DNA stack stop. You do not lose VLAN forwarding because a subscription date passed.

A mid-term move from Essentials up to Advantage credits 50 percent of the residual term. That credit is about changing tier while the term is alive. It is not a reason the network survives expiry. Survival comes from the perpetual layer. A renewal can be 1x a one-year term; the first purchase cannot. The subscription start may also slip by up to 60 days, so the calendar date on the purchase order is not always the day the clock started.

Treat this as perpetual Network Stack vs the DNA term. The quiet morning is the stack, not a vanished switch.

What is still on after you do not renew

Quick Answer: After a DNA term expires, forwarding, the CLI, and box-tied software updates remain. Network Essentials or Network Advantage stays at the level you bought with the hardware. Catalyst 9000 hardware remains under its extended limited lifetime warranty. You are not looking at a brick.

On wireless, the FAQ is just as plain. Customers who bought DNA Essentials keep Network Essentials after the term. Customers who bought DNA Advantage keep Network Advantage. The access point keeps serving clients. Software support that rode with the DNA license is a separate question from whether the radio still beacons. Access-point hardware support is its own contract, not a side effect of the DNA term.

If you open a session and the VLAN, the routing table, and the neighbor relationships look like last month, that is the expected result on a campus switch and on an autonomous router. Write that down before someone proposes a forklift replacement solely because a subscription date passed.

What actually ended

Quick Answer: The expired layer is the subscription stack: SD-Access, Assurance, ETA, DNA-stack feature updates, and the TAC entitlement that came with the subscription. If you never turned those on, the end date is invisible on the floor. The entitlement is still gone.

Cisco's wording is that you must renew the Catalyst software subscription to keep support and the features in the subscription stack. That is a support statement, not a forwarding statement. A quiet three years means those features were idle. It does not mean the subscription was free, and it does not mean a future design can turn SD-Access on without a live term.

Do not read "nothing changed" as "every support path is unchanged." If the only TAC you used was the one bundled in the DNA term, that path closed. Hardware warranty on Catalyst 9000 is a different instrument. Check which contract number your last case actually used before you tell leadership that support is identical.

The one design where silence would have been impossible

Quick Answer: SD-WAN controller mode is the design that feels the expiry. SD-WAN Manager management stops when the subscription is not renewed. Autonomous mode does not. If your sites kept passing traffic with no change in how they are managed, this box was not living in controller mode.

Campus switches, access points on a Catalyst 9800, and routers left in autonomous mode keep forwarding. A branch that is managed by SD-WAN Manager does not get that same quiet outcome. Management of that mode stops. Operators notice because the controller no longer runs the overlay, not because an access port went dark for no reason.

Use the quiet expiry as a classification, not as a universal promise. Ask the team that owns the WAN: is this router in controller mode or in autonomous mode? If they have to look it up, look it up before the next renewal decision. A typical scenario is a branch 8300 that was ordered "with DNA" and then run from the CLI only. That site can show the same calm expiry as a closet switch. A site whose change window is "we push from SD-WAN Manager" cannot.

How to confirm which layer you are living on

Quick Answer: Check whether daily forwarding is the Network Stack, then check whether SD-WAN Manager is in the path. If the stack is all you use, the expiry explains itself. If the controller is in the path, renewal is an operations decision, not a paperwork preference.

1. Step 1. List the features this site actually uses this month: VLANs, routing, stacking, or an SD-WAN controller.
2. Step 2. If the list is only switching and routing, you are on the perpetual Network Stack. The DNA term can end without a traffic event.
3. Step 3. If SD-WAN Manager manages the router, treat non-renewal as a management outage, not as a quiet expiry.
4. Step 4. Record whether subscription TAC was ever used. That entitlement ends even when traffic does not.

You do not need a lab to see this. The switching FAQ already states the outcome, and your own unchanged network is the confirmation. Keep the note next to the asset record so the next buyer does not pay for a seven-year term "just in case" after a three-year term that nobody used.

Typical scenario: a closet that never called Catalyst Center

Quick Answer: A typical scenario is a branch closet of Catalyst 9200 or 9300 switches that has forwarded traffic for three years with no Catalyst Center. The DNA term ends. Users do not call. That silence is the perpetual stack doing its job, not a sign that the subscription features were included for free.

Label this as a typical scenario, not as a named customer. The closet never joined a fabric, never opened Assurance, and never used ETA. On expiry morning the uplinks are up and the phones register. The subscription TAC path is what changed, and nobody notices until the next time they want Cisco to debug a software feature that lives only in the DNA stack.

The useful decision is the next order, not a retrofit of the old one. If the next closet will be run the same way, buy the shortest legal term and plan not to renew. That buying rule is a different page. This page only explains why the network you already have did not fall over.

FAQ

References

Quick Answer: Read Cisco's switching software FAQ for the line that the switch keeps working with Network Stack intact, and the wireless FAQ for controllers and access points that keep forwarding after the term. Those two answers are the whole story for an operator.

• Cisco Catalyst 9000 extended limited lifetime warranty bulletin — box-tied software updates after the term
• Cisco DNA software subscription FAQ themes for wireless — see the 9800 licensing note set; wireless FAQ states controllers and APs continue
• Cisco DNA access and wireless software FAQ — Network Essentials or Advantage continues after the term

Key Takeaway

Related