IOS commands not availble

Imran Ahmad · ‎11-04-2014

Hello ,

I have the following IOS on my routers:

(C7200-ADVIPSERVICESK9-M), Version 15.1(4)M2

(C2900-UNIVERSALK9-M), Version 15.1(4)M4

in class-map configuration, I can not find the command "match protocol attribute ......." and many other commands. can anyone tell me why it is so ??

Prashant Joshi · ‎11-04-2014

Hi,

It seems to be a license issue on your router ,please provide below output :-

#sh license

Prashant :-

Imran Ahmad · ‎11-04-2014

please see it

VPN_Server#sho license
Index 1 Feature: ipbasek9
        Period left: Life time
        License Type: Permanent
        License State: Active, In Use
        License Count: Non-Counted
        License Priority: Medium
Index 2 Feature: securityk9
        Period left: Life time
        License Type: Permanent
        License State: Active, In Use
        License Count: Non-Counted
        License Priority: Medium
Index 3 Feature: uck9
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 4 Feature: datak9
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 5 Feature: gatekeeper
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 6 Feature: SSL_VPN
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: 0/0 (In-use/Violation)
        License Priority: None
Index 7 Feature: ios-ips-update
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 8 Feature: SNASw
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 9 Feature: hseck9
Index 10 Feature: cme-srst
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: 0/0 (In-use/Violation)
        License Priority: None
Index 11 Feature: WAAS_Express
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None
Index 12 Feature: UCVideo
        Period left: Not Activated
        Period Used: 0 minute 0 second
        License Type: EvalRightToUse
        License State: Not in Use, EULA not accepted
        License Count: Non-Counted
        License Priority: None

Prashant Joshi · ‎11-05-2014

Hi,

For these below platforms you already have the required licenses seck9 and ipbasek9.

(C7200-ADVIPSERVICESK9-M), Version 15.1(4)M2

(C2900-UNIVERSALK9-M), Version 15.1(4)M4

Only for ISR4451-X/ASR series routers we need to have appxk9 license to enable layer 7 inspection, there is bug filed to track this particular issue, CSCuo75582 which is resolved in later releases.

kindly provide me the command which you are not able to apply example:-in this example I am not getting an option to apply L7 inspection.

Router(config)#class-map type inspect match-all class_FTP
Router(config-cmap)#match protocol ?
tcp                TCP
udp                UDP
icmp               ICMP

Prashant Joshi