C881 SAK

[Gene Horr]

Purchased a new C881W from a vendor.  Trying to get the firewall working but need the SAK for Advanced Security to do so.  Vendor is having trouble understanding what we need and keep sending information on another product we purchased at the same time.

Where/who at Cisco can we contact about getting the SAK?

[casanavep]

Can you send us the output of a "show license all" command form this C881 router?  The C881 routers come with adv ip services and adv security features by default, which may be his confusion.  Have you tried the "license boot module c880-data level" command from global configuration mode?  You should have two options.  Let us know.

[Gene Horr]

License Store: Primary License Storage

StoreIndex: 0 Feature: advsecurity Version: 1.0

License Type: Permanent License State: Active, Not in Use License Count: Non-Counted License Priority: Medium

License Store: Built-In License Storage

StoreIndex: 0 Feature: advipservices Version: 1.0

License Type: EvalRightToUse License State: Active, Not in Use, EULA not accepted Evaluation total period: 8 weeks 4 days Evaluation period left: 8 weeks 4 days Period used: 0 minute 0 second License Count: Non-Counted License Priority: None

StoreIndex: 1 Feature: ios-ips-update Version: 1.0

License Type: EvalRightToUse License State: Active, Not in Use, EULA not accepted Evaluation total period: 8 weeks 4 days Evaluation period left: 8 weeks 4 days Period used: 0 minute 0 second License Count: Non-Counted License Priority: None

[Gene Horr]

Regarding "license boot module c880-data level" FYI this command is not found anywhere in the configuration/setup information for the C881 and when I read up on the command it seems like we go a full circle and the instructions state (again) that one needs a SAK.

But I did try adding that command and get a "% Invalid input detected at marker" with the marker under the second "8" in "c880".

[Gene Horr · Accepted solution]

After fighting this for a week and getting a lot of incorrect information here appears to be the correct procedure for a C881W to enable advanced security.

1) Get into the global configuration mode (enable, <cr>, config t <cr>)
2) Enter the following: "license boot module c800 level advsecurity", then <cr>
3) Ignore the message about the "write" command
4) Exit global configuration mode.
5) Copy the running config to the startup config ("copy run start").
6) Reboot the router with the "reload" command.

It should be noted that these commands are not found in any Cisco documentation on the C881 router setup/configuration nor in Advances Security implementation and the instructions within the documentation are completely wrong. If you follow the docs they will have you installing License Manager, trying to track down SAKs, etc.