07-17-2018 09:14 AM - edited 02-21-2020 07:59 AM
I have a pair of FPR2110 running ASA 9.9(2)1. I configured the ASA HA first, then tried to register smart license. The 2 instance registered OK and shown up on Cisco smart license portal, however there are only 1 ASA standard license and 1 3DES license, I expect 2 of each. Both ASA are OUT OF COMPLIANCE. The secondary/standby ASA shows the same serial number as the primary ASA. Is this the reason that only 1 ASA standard license triggered on Cisco portal? If yes, how to activate the secondary ASA license to compliance? I've tried to failover the HA, but no help.
FP2110-FW-01/pri/act# show license all
Smart Licensing Status
======================
Smart Licensing is ENABLED
Registration:
Status: REGISTERED
Smart Account: <snip>
Virtual Account: <snip>
Export-Controlled Functionality: Allowed
Initial Registration: SUCCEEDED on May 14 16:54:25 2018 UTC
Last Renewal Attempt: None
Next Renewal Attempt: Nov 10 17:00:10 2018 UTC
Registration Expires: May 14 16:48:21 2019 UTC
License Authorization:
Status: OUT OF COMPLIANCE on Jul 12 22:37:21 2018 UTC
Last Communication Attempt: SUCCESS on Jul 17 10:38:20 2018 UTC
License Usage
==============
Firepower 2100 ASA Standard (FIREPOWER_2100_ASA_STANDARD):
Description: Firepower 2100 ASA Standard
Count: 1
Version: 1.0
Status: OUT OF COMPLIANCE
Cisco Firepower 2K Series ASA Strong Encryption (3DES/AES) (FPR2K-ASA-ENC):
Description: Cisco Firepower 2K Series ASA Strong Encryption (3DES/AES)
Count: 1
Version: 1.0
Status: OUT OF COMPLIANCE
Product Information
===================
UDI: PID:FPR-2110,SN:JAD221406GL
-----------------------------------------------------------------------------
FP2110-FW-01/sec/stby# show license all
Smart Licensing Status
======================
Smart Licensing is ENABLED
Registration:
Status: REGISTERED
Smart Account: <snip>
Virtual Account: <snip>
Export-Controlled Functionality: Allowed
Initial Registration: SUCCEEDED on May 14 17:22:25 2018 UTC
Last Renewal Attempt: None
Next Renewal Attempt: Dec 09 23:10:47 2018 UTC
Registration Expires: Jun 12 23:04:43 2019 UTC
License Authorization:
Status: OUT OF COMPLIANCE on May 14 17:22:35 2018 UTC
Last Communication Attempt: FAILED on May 24 18:55:52 2018 UTC
Failure reason: Communication message send error
Next Communication Attempt: None
Communication Deadline: None
License Usage
==============
No licenses in use
Product Information
===================
UDI: PID:FPR-2110,SN:JAD221406GU
09-06-2018 01:08 PM
This is expected behavior on FPR2100. I tested to failover ASA, the active-secondary ASA then consume 1 license and the passive-primary became no license. They still just consume 1 license.
I assume the logic is like this: on FPR2100 running ASA w/HA, the smart license is configured on ASA and only 1 node is active to Cisco Smart License; on FPR4100 running ASA /w HA, the smart license is configured on each chassis FXOS, thus two nodes are active.
11-26-2019 07:54 PM
Hi
I have the same issue, i had 2 smart license for 3 boxes as we are doing HA for 1 box the license should have been transferred to secondary box and it didnt.
When we check the show license it was not registered and we registered it went to -1 and out of compliance.
Can you please help, the best way for same.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide