Hi team,
We have an ASR 1000 brand new that came with an advanced enterprise license.
After configuring an IPsec tunnel, we see that the encryption does not come up and when execute the show license all command the IPsec license seems like installed but not in use.
I had read a guide for installing the licenses on the ASR router, but does not say anything about how to (if is necessary) activate the different features on the device.
asr1000# show version
Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 1 5.1(3)S2, RELEASE SOFTWARE (fc1) Technical Support:http://www.cisco.com/techsupport Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Mon 12-Dec-11 16:02 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software.
ROM: IOS-XE ROMMON
CFA.Peron.646.Spoke uptime is 3 weeks, 2 days, 6 hours, 2 minutes Uptime for this control processor is 3 weeks, 2 days, 6 hours, 3 minutes System returned to ROM by reload System image file is "bootflash:/asr1001-universalk9.03.04.02.S.151-3.S2.bin"
Last reload reason: PowerOn
This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to export@cisco.com.
License Info:
License UDI:
Device# PID SN UDI
--------------------------------------------------------------------------------
*0 ASR1001 JAE16470XXX ASR1001:JAE16470XXX
License Package Information for Module:'asr1001'
Module name Image level Pri Config Valid license
------------------------------------------------------------------------
asr1001 adventerprise 1 NO adventerprise
advipservices 2 YES advipservices
ipbase 3 NO ipbase
Module name Current Level Reboot Level
------------------------------------------------------------------------
asr1001 adventerprise adventerprise
cisco ASR1001 (1RU) processor with 1188947K/6147K bytes of memory.
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7741439K bytes of eUSB flash at bootflash:.
Configuration register is 0x2102
asr1000# show license all
License Store: Primary License Storage
StoreIndex: 0 Feature: adventerprise Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
License Store: Primary License Storage
StoreIndex: 1 Feature: ipsec Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: Non-Counted
License Priority: Medium
I also checked the complete command line guide for IOS-XE looking for commands referring to feature activation but did not found anything.
Same for the IPsec VPN configuration guide and configuration guide for IOS-XE.
Anyone can help me on this??
Regards, Pedro.
