Cisco Integrated Services Routers Licensing - 3945E as example - NETSEC

Latest

Learning, Sharing, Creating

Cybersecurity Memo

Friday, March 28, 2014

Cisco Integrated Services Routers Licensing - 3945E as example

1. Situation

My work environment has a Cisco Route 3945E which is running following IOS:

Cisco IOS Software, C3900e Software (C3900e-UNIVERSALK9-M), Version 15.1(4)M4, RELEASE SOFTWARE (fc1)
ROM: System Bootstrap, Version 15.1(1r)T5, RELEASE SOFTWARE (fc1)

Technology Package License Information for Module:'c3900e' 

-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot  
------------------------------------------------------------------
ipbase        ipbasek9      Permanent      ipbasek9
security      None          None           None
uc            None          None           None
data          None          None           None

I will need to figure out how to enable IP SLA feature. 

2. Research

Based Cisco IOS Packaging Model, Data IOS will be the rightt package if IP SLA feature will need for our environment.
 IOS Packaging Model for 1900, 2900 and 3900 ISRs


Technology Package

Details

Software Activation Feature Licenses

Right to Use Feature Licenses

IPBaseK9

Offers features found in IPBase IOS image on ISR 1800,2800 and 3800 + Flexible Netflow + IPV6 parity for IPV4 features present in IPBase. Some of the key feature are AAA BGP, OSPF, EIGRP, ISIS, RIP PBR IGMP, Multicast DHCP HSRP, GLBP NHRP HTTP HQF QoS ACL, NBAR GRE CDP, ARP NTP PPP PPPoA PPPoE RADIUS TACACS SCTP SMDS SNMP STP VLAN DTP IGMP Snooping SPAN WCCP ISDN ADSL over ISDN NAT-Basic X.25, RSVP, NTP, Flexible Netflow etc.

None

None

SECK9

Offers the security features found in Advanced Security IOS image on ISR 1800,2800 and 3800 e.g. IKE v1 / IPsec / PKI, IPsec/GRE, Easy VPN w/ DVTI, DMVPN, Static VTI, Firewall, Network Foundation Protection,GETVPN etc.

SSLVPN 

Intrusion Prevention 

Content Filtering 

None

UC

Offers the UC Features found in IPVoice IOS image on ISR 1800,2800 and 3800 e.g. TDM/PSTN Gateway, Video Gateway[H320/324],Voice Conferencing, Codec Transcoding, RSVP Agent (voice), FAX T.37/38, CAC/QOS, Hoot-n-Holler etc.

Gatekeeper

Land Mobile Radio

CME: Voice & Video 

SRST: Voice & Video 

VXML/IVR Gateway 

CUBE [IPIP Gateway] 

DATA

Data features found in SP Services and Enterprise Services IOS image on ISR 1800,2800 and 3800 e.g. MPLS, BFD, RSVP ,L2VPN, L2TPv3 ,Layer 2 Local Switching , Mobile IP, Multicast Authentication,FHRP-GLBP ,IP SLAs, PfR ,DECnet, RSRB, BIP, DLSw+, FRAS, Token Ring ,ISL, IPX ,STUN, SNTP, SDLC, QLLC etc.

SNA Switching

None

3. Solution

PO has been created with our network device vendor. After a couple of days, received Cisco email forwarded from our supplier.

 go to http://www.cisco.com/go/license

Log in with your CCO account

Product License Registration page will be shown up:

Enter your PAK (Product Authorization Key) got from Cisco's email:

Choose Quantity and also Router 3945E's info from show version command:

Last step is to download the license. At the same time you will get the email with license in it.

4. Useful Commands

copy ftp://test:[email protected] flash:

license install flash:license.lic

more flash:license.lic

reload

5. Verify

show license
Index 1 Feature: ipbasek9                       
        Period left: Life time
        License Type: Permanent
        License State: Active, In Use
        License Count: Non-Counted
        License Priority: Medium
Index 2 Feature: securityk9                     
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 3 Feature: uck9                           
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 4 Feature: datak9                         
        Period left: Life time
        License Type: Permanent
        License State: Active, Not in Use
        License Count: Non-Counted
        License Priority: Medium
Index 5 Feature: gatekeeper                     
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 6 Feature: LI                             
Index 7 Feature: SSL_VPN                        
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: 0/0  (In-use/Violation)
        License Priority: None
Index 8 Feature: ios-ips-update                 
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 9 Feature: SNASw                          
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 10 Feature: hseck9                         
Index 11 Feature: cme-srst                       
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: 0/0  (In-use/Violation)
        License Priority: None
Index 12 Feature: UCVideo                        
        Period left: Not Activated
        Period Used: 0  minute  0  second  
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None

After system reloaded, license will be used in IOS. You will see it is in use from Show license command:
Index 4 Feature: datak9                         
        Period left: Life time
        License Type: Permanent
        License State: Active, In Use
        License Count: Non-Counted
        License Priority: Medium

Show version:
-----------------------------------------------------------------
Technology    Technology-package           Technology-package
              Current       Type           Next reboot  
------------------------------------------------------------------
ipbase        ipbasek9      Permanent      ipbasek9
security      None          None           None
uc            None          None           None
data          datak9        Permanent      datak9

No comments:

Post a Comment