topic Re: ACE license in Application Networking

ACE license

cfolkerts — Mon, 21 Jul 2008 18:47:38 GMT

Does anyone know if the ACE license needs to the upgraded if we are going to upgrade the version of code?

The reason I ask is because we have an old license for the ACE module and when I upgrade the code, I am unable to create more than two contexts (Admin and another). The ACE spits out an error that says the ACE has no more room.

Thanks for your replies.

Re: ACE license

sachinga.hcl — Tue, 29 Jul 2008 15:25:41 GMT

HI Clifton ,

Give me the details of the license using following commands in your admin context :

host1/Admin# show version

host1/Admin# show license brief

# show license status

# show license usage

Also tell me what is your current software version.

And which software version you are planning to upgrade.

I will come up with more specific answer then.

As per my understanding :

The ACE comes preloaded with the operating system software. To take advantage of new features and bug fixes, you can upgrade your ACE with a new version of software when it becomes available.

In the Admin context, you will use the copy command in Exec mode to manually upgrade the ACE software. After the software installation is finished, set the boot variable and configuration register to autoboot the software image. Then, reboot the appliance to load the new image.

To minimize any disruption to existing network traffic during a software upgrade or downgrade, deploy your ACE appliances in a redundant configuration

1. Changing the Admin Password

Before you upgrade to software version A1(8.0a) or higher, you must change the default Admin password if you have not already done so. Otherwise, after you upgrade the ACE software, you will only be able to log in to the ACE through the console port.

2. Changing the www User Password

Before you upgrade to software version A1(8.0a) or higher, you must change the default www user password if you have not already done so. Otherwise, after you upgrade the ACE software, the www user will be disabled and you will not be able to use Extensible Markup Language (XML) to remotely configure an ACE until you change the default www user password.

3. Creating a Checkpoint

I strongly recommend that you create a checkpoint in the running-configuration file of each context in your ACE. A checkpoint creates a snapshot of your configuration that you can later roll back to in case a problem occurs with an upgrade and you want to downgrade the software to a previous release. Use the checkpoint create command in Exec mode in each context for which you want to create a configuration checkpoint and name the checkpoint.

To display the software image on the ACE, use the show version command in Exec mode. The syntax for this command is:

show version

For example, enter:

host1/Admin# show version

TAC support: http://www.cisco.com/tac

The copyrights to certain works contained herein are owned by

other third parties and are used and distributed under license.

Some parts of this software are covered under the GNU Public

License. A copy of the license is available at

http://www.gnu.org/licenses/gpl.html.

Software

loader: Version 0.95

system: Version A1(7.0) [build 3.0(0)A1(7.999.31)

adbuild_22:46:11-2008/04/

07_/auto/adbure_nightly2/nightly_scimitar-a18-rib/REL_3_0_0_A1_7_999

system image file: (nd)/192.168.65.34/scimitar.bin

Device Manager version 1.0 (0) 20080408:0435

installed license: ACE-AP-VIRT-020 ACE-AP-OPT-LIC-K9

ACE-AP-SSL-10K-K9

Hardware

cpu info:

number of cpu(s): 1

cpu type: Pentium(R)

cpu: 0, model: Intel(R) Pentium(R) 4, speed: 3399.991 MHz

memory info:

total: 6226704 kB, free: 4638636 kB

shared: kB, buffers: 19300 kB, cached 0 kB

cf info:

filesystem: /dev/hdb2

total: 861668 kB, used: 348552 kB, available: 469344 kB

last boot reason: reload command by root

configuration register: 0x1

switch kernel uptime is 0 days 18 hours 52 minute(s) 58 second(s)

Re: ACE license

sachinga.hcl — Tue, 29 Jul 2008 15:26:57 GMT

By default, the ACE supports the following features and capabilities:

â€¢ Virtualization: 1 admin context and 5 user contexts

(by adding licence you cna upgrade cuser context upto 20)

â€¢ Hypertext Transfer Protocol (HTTP) compression: 100 megabits per second (Mbps)

You can increase the performance and operating capabilities of your ACE product by purchasing one of the licensing options.

There are two methods to order your ACE product:

â€¢ Ordering separate license options.

ACE demo licenses are available through your Cisco account representative. A demo license is valid for only 60 days. At the end of this period, you must update the demo license with a permanent license to continue to use the ACE software. To view the expiration of a demo license, use the show license usage command in Exec mode.

If you need to replace the ACE, you can copy and install the license file for the license onto the replacement appliance.

The ACE demo license is valid for only 60 days. Four weeks before the license expires, the ACE generates warning syslog messages once a day. During the final week, a warning syslog message occurs once an hour. Before this period ends, you must update the demo license with a permanent license. Otherwise, the ACE will revert to its previous throughout performance, SSL TPS, or number of contexts.

If you replace the context demo license with a permanent license, you can continue to use the configured user contexts on the ACE. However, if you allow a context license to expire, the ACE automatically removes all user contexts from the Admin running configuration and all configurations for the user contexts. Before a context license expires, save the Admin running configuration and the user context running configurations to a remote server.

To view the expiration of the demo license, use the show license usage command in Exec mode from the Admin context.

After you copy the permanent license file to the ACE, you can install it. To replace a demo license with a permanent license, use the license update disk0: command in Exec mode from the Admin context. The syntax of this command is:

license update disk0:[path/]permanent_filename demo_filename

The keyword and arguments are:

â€¢ demo_filename-Filename for the demo license file that the permanent license file is replacing.

For example, enter:

host1/Admin# license update disk0:ACE-AP-VIRT-020.lic

ACE-AP-VIRT-020-DEMO.lic

(But please dont execute any of the configutration upgrade commands until you know about all the steps regarding the upgradation process.)

When you enter the clear startup-config or the write erase command, the ACE does not remove license files from the startup-configuration file. You must use the license uninstall command to remove license files from the ACE.

Re: ACE license

sachinga.hcl — Tue, 29 Jul 2008 15:27:32 GMT

The show commands that you can use to display license information about your ACE. To display license information, use the show license command in Exec mode from the Admin context. The syntax for this command is:

1. host1/Admin# show license brief | file filename | internal event-history | status | usage

The options and arguments for this command are:

â€¢ file filename-Displays the file contents of the specified license

â€¢ status-Displays the status of licensed features

â€¢Usage-Displays the usage table for all licenses

Entering the show license command without any options and arguments displays all installed ACE license files and their contents.

For example, to display a list of the current installed licenses, enter

2. host1/Admin# show license brief

ACE-AP-VIRT-020.lic

ACE-AP-OPT-LIC-K9.lic

ACE-AP-SSL-10K-K9.lic

You can also use the two command given below to see more details regarding license:

3.host1/Admin# show license status

4. host1/Admin# show license usage

You can also view the ACE license by using the show version command in Exec mode on the ACE.

Hope it will bring something useful information for you.

I am just sharing my vision with you. Correct me if I am wrong. Also looking forward to speak more regarding this for you after knowing which version of software you are using currently.

Till then ,

Kind Regards,

Sachinga@hcl.in

Re: ACE license

cfolkerts — Tue, 29 Jul 2008 18:27:44 GMT

Below is the output from my primary ACE.

MP-ACE-1/Admin# show ver

Cisco Application Control Software (ACSW)

TAC support: http://www.cisco.com/tac

The copyrights to certain works contained herein are owned by

other third parties and are used and distributed under license.

Some parts of this software are covered under the GNU Public

License. A copy of the license is available at

http://www.gnu.org/licenses/gpl.html.

Software

loader: Version 12.2[120]

system: Version 3.0(0)A1(6.2) [build 3.0(0)A1(6.2) adbuild_23:41:40-2007/10/18_/auto/adbure-rel2/ws/REL_3_0_0_A1_6_2]

system image file: [LCP] disk0:c6ace-t1k9-mz.3.0.0_A1_6_2.bin

installed license: ACE-VIRT-020 ACE-SEC-LIC-K9 ACE-SSL-10K-K9

Hardware

Cisco ACE (slot: 7)

cpu info:

number of cpu(s): 2

cpu type: SiByte

cpu: 0, model: SiByte SB1 V0.2, speed: 700 MHz

cpu: 1, model: SiByte SB1 V0.2, speed: 700 MHz

memory info:

total: 957652 kB, free: 335560 kB

shared: 0 kB, buffers: 2536 kB, cached 0 kB

cf info:

filesystem: /dev/cf

total: 1000512 kB, used: 417264 kB, available: 583248 kB

last boot reason: reload command by admin

configuration register: 0x1

MP-ACE-1 kernel uptime is 12 days 1 hours 47 minute(s) 0 second(s)

MP-ACE-1/Admin# show license brief

ACE20071213084951175.lic

MP-ACE-1/Admin# show license status

Licensed Feature Count

------------------------------ -----

SSL transactions per second 10000

Virtualized contexts 20

Module bandwidth in Gbps 4

MP-ACE-1/Admin# show license usage

License Ins Lic Status Expiry Date Comments

Count

--------------------------------------------------------------------------------

ACE-08G-LIC No - Unused -

ACE-16G-LIC No - Unused -

ACE-UPG1-LIC No - Unused -

ACE-UPG2-LIC No - Unused -

ACE-VIRT-020 Yes 1 In use never -

ACE-VIRT-050 No - Unused -

ACE-VIRT-100 No - Unused -

ACE-VIRT-250 No - Unused -

ACE-VIRT-UP1 No - Unused -

ACE-VIRT-UP2 No - Unused -

ACE-VIRT-UP3 No - Unused -

ACE10-16G-LIC No - Unused -

ACE-SEC-LIC-K9 Yes 1 Unused never -

ACE-SSL-05K-K9 No - Unused -

ACE-SSL-10K-K9 Yes 1 In use never -

ACE-SSL-15K-K9 No - Unused -

ACE-SSL-20K-K9 No - Unused -

ACE-SSL-UP1-K9 No - Unused -

ACE-SSL-UP2-K9 No - Unused -

ACE-SSL-UP3-K9 No - Unused -

--------------------------------------------------------------------------------

MP-ACE-1/Admin#

Re: ACE license

cfolkerts — Tue, 29 Jul 2008 18:46:06 GMT

And here is the license I am trying to upgrade to along with the error.

MP-ACE-1/Admin# show ver

Software

loader: Version 12.2[120]

system: Version 3.0(0)A1(6.3c) [build 3.0(0)A1(6.3c) adbuild_18:08:08-2008/06/17_/auto/adbu-rel3/ws/rel_3_0_0_a1_6.3-throttle/R

EL_3_0_0_A]

system image file: [LCP] disk0:c6ace-t1k9-mz.3.0.0_A1_6_3c.bin

installed license: ACE-VIRT-020 ACE-SEC-LIC-K9 ACE-SSL-10K-K9

Hardware

Cisco ACE (slot: 7)

cpu info:

number of cpu(s): 2

cpu type: SiByte

cpu: 0, model: SiByte SB1 V0.2, speed: 700 MHz

cpu: 1, model: SiByte SB1 V0.2, speed: 700 MHz

memory info:

total: 957628 kB, free: 352220 kB

shared: 0 kB, buffers: 1096 kB, cached 0 kB

cf info:

filesystem: /dev/cf

total: 1000512 kB, used: 417264 kB, available: 583248 kB

last boot reason: reload command by cfolkerts

configuration register: 0x1

MP-ACE-1 kernel uptime is 0 days 0 hour 4 minute(s) 32 second(s)

MP-ACE-1/Admin# show context

Number of Contexts = 1

Name: Admin , Id: 0

Config count: 35

Description:

Resource-class: RC1

FT Auto-sync running-cfg configured state: enabled

FT Auto-sync running-cfg actual state: enabled

FT Auto-sync startup-cfg configured state: enabled

FT Auto-sync startup-cfg actual state: enabled

MP-ACE-1/Admin# config t

Enter configuration commands, one per line. End with CNTL/Z.

MP-ACE-1/Admin(config)# context WWW

MP-ACE-1/Admin(config-context)# member RC1

MP-ACE-1/Admin(config-context)# context OWA

Context creation failed : No space left on device

MP-ACE-1/Admin(config)# do show license brief

ACE20071213084951175.lic

MP-ACE-1/Admin(config)# do show license usage

License Ins Lic Status Expiry Date Comments

Count

--------------------------------------------------------------------------------

ACE-08G-LIC No - Unused -

ACE-16G-LIC No - Unused -

ACE-UPG1-LIC No - Unused -

ACE-UPG2-LIC No - Unused -

ACE-VIRT-020 Yes 1 In use never -

ACE-VIRT-050 No - Unused -

ACE-VIRT-100 No - Unused -

ACE-VIRT-250 No - Unused -

ACE-VIRT-UP1 No - Unused -

ACE-VIRT-UP2 No - Unused -

ACE-VIRT-UP3 No - Unused -

ACE10-16G-LIC No - Unused -

ACE-SEC-LIC-K9 Yes 1 Unused never -

ACE-SSL-05K-K9 No - Unused -

ACE-SSL-10K-K9 Yes 1 In use never -

ACE-SSL-15K-K9 No - Unused -

ACE-SSL-20K-K9 No - Unused -

ACE-SSL-UP1-K9 No - Unused -

ACE-SSL-UP2-K9 No - Unused -

ACE-SSL-UP3-K9 No - Unused -

--------------------------------------------------------------------------------

MP-ACE-1/Admin(config)# do show license status

Licensed Feature Count

------------------------------ -----

SSL transactions per second 10000

Virtualized contexts 20

Module bandwidth in Gbps 4

MP-ACE-1/Admin(config)#

Re: ACE license

Syed Iftekhar Ahmed — Tue, 29 Jul 2008 18:54:14 GMT

AS per the licensing details. You should be able to create 20 contexts.

What are the exact Wordings of the error you are getting?

Syed Iftekhar Ahmed

Re: ACE license

cfolkerts — Tue, 29 Jul 2008 19:05:54 GMT

From the above output, below is the error I receive.

MP-ACE-1/Admin(config-context)# context OWA

Context creation failed : No space left on device

Re: ACE license

Syed Iftekhar Ahmed — Tue, 29 Jul 2008 20:31:55 GMT

I have seen this error before. (Not for context creation but while doing some other config).

It means that ACE's Linux file system has no more space left. Cisco TAC can help you clean up the stuck temporary files.

You can also try to reload ACE (If its possible).This may remove the temp/stuck files from the file system.

Syed Iftekhar Ahmed

Re: ACE license

cfolkerts — Wed, 30 Jul 2008 18:30:48 GMT

There was no space left on my disk0: which caused the issue. Thanks