10-10-2011 04:00 PM - edited 03-04-2019 01:53 PM
I have an ASR1001 installed and I want to implement the firewall feature set.The current license level is IPbase and I have the firewall feature installed. The firewall feature shows acive, Not in use. I have tried to activate it without success. My question is: do I need to get a license for advipservices or adventerprise to activate the firewall feature set?
Steve
10-10-2011 05:18 PM
Steve
See this link for details. It desscribes the packages available and then the specific licenses you can buy which includes one for the firewall feature set.
So your package must have the firewalling feature set and then you need to get the actual license for the firewalling (see Table 2) -
http://www.cisco.com/en/US/customer/prod/collateral/routers/ps9343/product_bulletin_c25-448292.html
Edit - just to clarify i haven't done this myself but the link seems pretty explanatory.
Jon
10-11-2011 10:24 AM
Jon,
Thanks for the link. I checked it out but it is still unclear whether you can activate the firewall feature set with IPbase or you need to install the PAK for advanced IP services to activate it. I have IPbase installed currently along with the firewall license and I haven't figured out how to activate the firewall feature. None of the commands I have tried will activate the feature set.
Is there a special command I need to use to activate the firewall feature set? None of the commands I have used so far are working.
Steve
10-25-2011 11:10 PM
Hi there,
was anyone able to resvole this issue? I have quite the same problem.
The ASR says:
asr1001#sh license
License Store: Primary License Storage
StoreIndex: 0 Feature: firewall Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: Non-Counted
License Priority: Medium
License Store: Primary License Storage
StoreIndex: 1 Feature: ipbase Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
But for an unknown reason, I cannot use any of the firewall features:
asr1001(config)#class-map type ?
access-control access-control specific class-map
control Configure a control policy class-map
multicast-flows multicast class-maps
stack class-map for protocol header stack specification
traffic Configure a subscriber policy traffic classmap
asr1001(config)#paramet?
% Unrecognized command
The license is already on the router, that is how we bought it (including Firewall).
Can anyone solve this?
Stefan
11-01-2011 02:24 PM
It was an IOS issue. We needed the K9 version of the IOS to activate the licenses. Once we upgraded we could activate the firewall license.
Steve
Steve SjobergSr. Network EngineerTerra Nova Group, Inc.cell - (206) 915-3002
04-04-2013 06:13 AM
I can confirm this. Essentially we needed this version of license:
Index 2 Feature: advipservices
Period left: Life time
License Type: Permanent
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide