ASR1001 Licensing question

[ssjoberg]

I have an ASR1001 installed and I want to implement the firewall feature set.The current license level is IPbase and I have the firewall feature installed. The firewall feature shows acive, Not in use. I have tried to activate it without success.  My question is: do I need to get a license for advipservices or adventerprise to activate the firewall feature set?

Steve

[Jon Marshall]

Steve

See this link for details. It desscribes the packages available and then the specific licenses you can buy which includes one for the firewall feature set.

So your package must have the firewalling feature set and then you need to get the actual license for the firewalling (see Table 2) -

http://www.cisco.com/en/US/customer/prod/collateral/routers/ps9343/product_bulletin_c25-448292.html

Edit - just to clarify i haven't done this myself but the link seems pretty explanatory.

Jon

[ssjoberg]

Jon,

Thanks for the link. I checked it out but it is still unclear whether you can activate the firewall feature set with IPbase or you need to install the PAK for advanced IP services to activate it. I have IPbase installed currently along with the firewall license and I haven't figured out how to activate the firewall feature. None of the commands I have tried will activate the feature set.

Is there a special command I need to use to activate the firewall feature set? None of the commands I have used so far are working.

Steve

[Stefan Giera]

Hi there,

was anyone able to resvole this issue? I have quite the same problem.

The ASR says:

asr1001#sh license

License Store: Primary License Storage

StoreIndex:  0  Feature: firewall                          Version: 1.0

        License Type: Permanent

        License State: Active, Not in Use

        License Count: Non-Counted

        License Priority: Medium

License Store: Primary License Storage

StoreIndex:  1  Feature: ipbase                            Version: 1.0

        License Type: Permanent

        License State: Active, In Use

        License Count: Non-Counted

        License Priority: Medium

But for an unknown reason, I cannot use any of the firewall features:

asr1001(config)#class-map type ?      

  access-control   access-control specific class-map

  control          Configure a control policy class-map

  multicast-flows  multicast class-maps

  stack            class-map for protocol header stack specification

  traffic          Configure a subscriber policy traffic classmap

asr1001(config)#paramet?

% Unrecognized command

The license is already on the router, that is how we bought it (including Firewall).

Can anyone solve this?

Stefan

[ssjoberg]

It was an IOS issue. We needed the K9 version of the IOS to activate the licenses. Once we upgraded we could activate the firewall license.

Steve

Steve SjobergSr. Network EngineerTerra Nova Group, Inc.cell - (206) 915-3002

[Stefan Giera]

I can confirm this. Essentially we needed this version of license:

Index 2 Feature: advipservices

        Period left: Life time

        License Type: Permanent