最近要实施的一个小项目，客户采购了3945的路由器，将公司的VPN全部做到路由器上，然后打算用防火墙作为纯粹的上网出口来用。远程接入这块买了AnyConnect 的Plus的License，但是眼看要去实施了，我这边却犯了难，查找了很多资料，除了在AnyConnect的Ordering Guide中提到了对ISR的支持外，其他地方都找不到AnyConnect的License在ISR上到底要怎么用的信息……
-------------AnyConnect Ordering Guide中的描述-------------------------------------
2.1 Servers/Platforms
AnyConnect services are used in conjunction with numerous Cisco head server platforms, including but not limited to the Cisco Adaptive Security Appliance (physical and virtual), Identity Services Engine, Cisco IOS® Software on the Integrated Services Routers, Cisco Aggregation Services Routers, and Cisco Cloud Web Security. Headend termination devices and cloud services and associated service costs and support contracts are purchased separately.
但是，在AnyConnecct的Q&A中，涉及IOS Router的部分却是这么说的：
-------------AnyConnect Q&A 中的描述-------------------------------------
Q. I am using AnyConnect for a non-VPN service or a Cisco IOS® head-end. What licenses do I need to purchase?A. License requirements are determined by head-end used and the services available in that head end. For example, AnyConnect Plus is required for VPN service to Cisco IOS® head-ends though you could also use AnyConnect Apex. To use AnyConnect's posture capabilities with ISE 1.3 you must order AnyConnect Apex as well as ISE Apex. For other use cases including Network Access Manager, Cisco Cloud Web Security (CWS), etc. you must have AnyConnect Plus but again they could also use AnyConnect Apex. Please note that the physical Product Activation Key (PAK) registration on the Cisco licensing portal is only applicable to the ASA. For ASAv and IOS head-ends as well as non-VPN use cases, please store the PAK in a safe place as proof or purchase. You will still need to complete Contract registration for SW Center access and TAC support
如红色部分所说，PAK只能注册到ASA上的话，那IOS Router要怎么去使用AnyConnect的License呢(或者根本就不能使用？)
路过的朋友又知道的话，还请指点一二……急死了- -
