Hi all,
We have a new ISR4331 (16.12.4) that was mistakenly enrolled with the CiscoOne FoundationSuiteK9 and AdvUCSuiteK9 suites (license boot suite <suite>) by our partner. Subsequently it has been moved to SLR as it's in an uber-secure part of our network and now has valid sec-k9, performance and hsec licences all "Authorized" through the reservation:
<device>#sh lic summ
Smart Licensing is ENABLED
License Reservation is ENABLED
Registration:
Status: REGISTERED - SPECIFIC LICENSE RESERVATION
Export-Controlled Functionality: ALLOWED
License Authorization:
Status: NOT AUTHORIZED
License Usage:
License Entitlement tag Count Status
-----------------------------------------------------------------------------
(ISR_4331_FoundationSuite) 1 NOT AUTHORIZED
(ISR_4331_AdvancedUCSuite) 1 NOT AUTHORIZED
ISR_4331_300M_Perfor... (ISR_4331_300M_Performance) 1 AUTHORIZED
(ISR_4331_Application) 1 NOT AUTHORIZED
(ISR_4331_UnifiedCommun...) 1 NOT AUTHORIZED
ISR_4331_Security (ISR_4331_Security) 1 AUTHORIZED
hseck9 (ISR_4331_Hsec) 1 AUTHORIZED
So from a feature point of view, we are ok as we have what we need enabled and licensed. But we still have those pesky Suites and other features from them (appxk9, uck9 etc) kicking around as NOT AUTHORIZED. A "sh ver" shows that they are enabled and will be a next reboot:
<device>#sh ver
Cisco IOS XE Software, Version 16.12.04
Cisco IOS Software [Gibraltar], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.12.4, RELEASE SOFTWARE (fc5)
<snip>
Suite License Information for Module:'esg'
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 FoundationSuiteK9 Smart License FoundationSuiteK9
securityk9
appxk9
AdvUCSuiteK9 AdvUCSuiteK9 Smart License AdvUCSuiteK9
uck9
cme-srst
cube
It should be a simple process to disable them right? I've tried to "no boot license suite ..." and "boot license suite ... disable" them and both commands throw the same error that they are not licensed in the SLR - which they are not as we don't want to use them so haven't bought them!
<device>(config)#no license boot suite FoundationSuiteK9
License Configuration for suite feature FoundationSuiteK9 not accepted due to unavailability of the license in SLR mode
<device>(config)#license boot suite FoundationSuiteK9 disable
License Configuration for suite feature FoundationSuiteK9 not accepted due to unavailability of the license in SLR mode
So, do we need to be licensed for the features that we want to disable as we're not licensed for them - chicken and egg...
Anyone got a solution/ideas?
JB.
