cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3789
Views
5
Helpful
2
Replies

FirePower 2100 with ASA in HA, smart license registration issue

fraserC
Level 1
Level 1

I have a pair of FPR2110 running ASA 9.9(2)1.  I configured the ASA HA first, then tried to register smart license. The 2 instance registered OK and shown up on Cisco smart license portal, however there are only 1 ASA standard license and 1 3DES license, I expect 2 of each. Both ASA are OUT OF COMPLIANCE.  The secondary/standby ASA shows the same serial number as the primary ASA.  Is this the reason that only 1 ASA standard license triggered on Cisco portal?  If yes, how to activate the secondary ASA license to compliance?  I've tried to failover the HA, but no help.

 

FP2110-FW-01/pri/act# show license all

 

Smart Licensing Status

======================

 

Smart Licensing is ENABLED

 

Registration:

  Status: REGISTERED

  Smart Account: <snip>

  Virtual Account: <snip>

  Export-Controlled Functionality: Allowed

  Initial Registration: SUCCEEDED on May 14 16:54:25 2018 UTC

  Last Renewal Attempt: None

  Next Renewal Attempt: Nov 10 17:00:10 2018 UTC

  Registration Expires: May 14 16:48:21 2019 UTC

 

License Authorization:

  Status: OUT OF COMPLIANCE on Jul 12 22:37:21 2018 UTC

  Last Communication Attempt: SUCCESS on Jul 17 10:38:20 2018 UTC

License Usage

==============

 

Firepower 2100 ASA Standard (FIREPOWER_2100_ASA_STANDARD):

  Description: Firepower 2100 ASA Standard

  Count: 1

  Version: 1.0

  Status: OUT OF COMPLIANCE

 

Cisco Firepower 2K Series ASA Strong Encryption (3DES/AES) (FPR2K-ASA-ENC):

  Description: Cisco Firepower 2K Series ASA Strong Encryption (3DES/AES)

  Count: 1

  Version: 1.0

  Status: OUT OF COMPLIANCE

 

Product Information

===================

UDI: PID:FPR-2110,SN:JAD221406GL

 

-----------------------------------------------------------------------------

FP2110-FW-01/sec/stby# show license all

 

Smart Licensing Status

======================

 

Smart Licensing is ENABLED

 

Registration:

  Status: REGISTERED

  Smart Account: <snip>

  Virtual Account: <snip>

  Export-Controlled Functionality: Allowed

  Initial Registration: SUCCEEDED on May 14 17:22:25 2018 UTC

  Last Renewal Attempt: None

  Next Renewal Attempt: Dec 09 23:10:47 2018 UTC

  Registration Expires: Jun 12 23:04:43 2019 UTC

 

License Authorization:

  Status: OUT OF COMPLIANCE on May 14 17:22:35 2018 UTC

  Last Communication Attempt: FAILED on May 24 18:55:52 2018 UTC

    Failure reason: Communication message send error

  Next Communication Attempt: None

  Communication Deadline: None

 

License Usage

==============

 

No licenses in use

 

Product Information

===================

UDI: PID:FPR-2110,SN:JAD221406GU

2 Replies 2

fraserC
Level 1
Level 1

This is expected behavior on FPR2100.  I tested to failover ASA, the active-secondary ASA then consume 1 license and the passive-primary became no license.  They still just consume 1 license.

 

I assume the logic is like this:  on FPR2100 running ASA w/HA, the smart license is configured on ASA and only 1 node is active to Cisco Smart License;  on FPR4100 running ASA /w HA, the smart license is configured on each chassis FXOS, thus two nodes are active.

Hi

 

I have the same issue, i had 2 smart license for 3 boxes as we are doing HA for 1 box the license should have been transferred to secondary box and it didnt.

 

When we check the show license it was not registered and we registered it went to -1 and out of compliance.

 

Can you please help, the best way for same.

Review Cisco Networking for a $25 gift card