Hello Guys,
Our customer have a pair with 2110, which are going to replace a pair of 5508-X.The vesion of the code and configuration of the new firewalls should remain the same, that's why I've downgraded the asa image on the firepower with cisco-asa-fp2k.9.8.4.17 ( default one was 9.10.1). Now I've stuck in uploading of the crypto configuration, because it looks like I need the strong encryption license ... I've tried to generate in the standard way(from the license portal), but it doesn't recognize the serial number . I've also asked the customer to check the smart account (the devices are associated with their smart account), if they can find something there, but unfortunately he didn't find anything too. Here is the output :
firepower-2110 /firmware # show package
Name Package-Vers
--------------------------------------------- ------------
cisco-asa-fp2k.9.10.1.SPA 9.10.1
cisco-asa-fp2k.9.8.4.17.SPA 9.8.4.17
cisco-ftd-fp2k.6.2.1-341.SPA 6.2.1-341
ciscoasa# show version
Cisco Adaptive Security Appliance Software Version 9.8(4)17
Firepower Extensible Operating System Version 2.2(2.124)
Device Manager Version 7.13(1)
Compiled on Fri 14-Feb-20 09:22 PST by builders
System image file is "disk0:/mnt/boot/installables/switch/fxos-k8-fp2k-npu.2.2.2.124.SPA"
Config file at boot was "startup-config"
ATMVPN-DT-FP2110 up 1 day 23 hours
failover cluster up 1 day 23 hours
Hardware: FPR-2110, 6842 MB RAM, CPU MIPS 1200 MHz, 1 CPU (6 cores)
1: Int: Internal-Data0/1 : address is 000f.b748.4801, irq 0
3: Ext: Management1/1 : address is cc7f.76b1.4701, irq 0
4: Int: Internal-Data1/1 : address is 0000.0100.0001, irq 0
License mode: Smart Licensing
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 1024
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Disabled
Security Contexts : 2
Carrier : Disabled
AnyConnect Premium Peers : 1500
AnyConnect Essentials : Disabled
Other VPN Peers : 1500
Total VPN Peers : 1500
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 4000
Cluster : Disabled
Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 1024
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Disabled
Security Contexts : 4
Carrier : Disabled
AnyConnect Premium Peers : 1500
AnyConnect Essentials : Disabled
Other VPN Peers : 1500
Total VPN Peers : 1500
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 4000
Cluster : Disabled
Serial Number: JAD24100EHB
ciscoasa# show license all
Smart Licensing Status
======================
Smart Licensing is ENABLED
Registration:
Status: UNREGISTERED
Export-Controlled Functionality: Not Allowed
License Authorization:
Status: No Licenses in Use
License Usage
==============
No licenses in use
Product Information
===================
UDI: PID:FPR-2110,SN:JAD24100EHB
Agent Version
=============
Smart Agent for Licensing: 1.6.14_rel/129
Any advice , how to solve this ?
Regards