cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3614
Views
0
Helpful
3
Replies

CISCO2911 with L-FL-29-HSEC-K9= license

kyle woodhouse
Level 1
Level 1

Hi,

 

Has anyone ever seen this error or issue?  Trying to associate the HSEC license to a CISCO2911 router and getting the below error.  We have 15.3 IOS and the security license already applied so not an issue there.  The issue seems to be with the Cisco Licensing Portal not allowing this particular combination even though the datasheet for the ISM-VPN says it should be supported. 

 

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/vpn-internal-service-module-isr-g2/data_sheet_c78-682436.html

 

That shows the HSEC and ISM-VPN are supported all the way down to the 1941 router.  Even further there are HSEC bundles available and licensing for the 1941 which proves the 1941, 2901 and 2911 should accept this license type. 

 

To me this just seems like a bug with the Cisco Licensing Tool that should be updated to allow the particular combination as it clearly is a compatible combo.  Has anyone seen this before or have any thoughts?

 

CISCO2911-HSEC+/K9VPN ISM module HSEC bundles for 2911 ISR platformC$ 5,695.00
CISCO2901-HSEC+/K9VPN ISM module HSEC bundles for 2901 ISR platformC$ 4,995.00
CISCO1941-HSEC+/K9VPN ISM module HSEC bundles for 1941 ISR platformD$ 3,595.00
FL-19-HSEC-K9U.S. Export Restriction license for 1941 only w/ ISM-VPN-19N/A$ 750.00
L-FL-29-HSEC-K9=U.S. Export Restriction Compliance license for 2921/2951C$ 750.00

 

 

Error:

SKU is not supported on destination device platform2911

 

3 Replies 3

johnnylingo
Level 5
Level 5

Despite the "29" in the name, the L-FL-29-HSEC-29 license is only supported on the 2921 and 2951. 

https://supportforums.cisco.com/discussion/11754831/ism-vpn-29-cisco2901

This is likely because the 1941, 2901, and 2911 can't go beyond 85 Mpbs IPSec throughput anyway due to hardware limitations.

Hi Johnny, 

Thanks for your thoughts but I still think this is an issue with the Cisco license portal.  If the HSEC license was not supported on the 1941, 2901 and 2911 then there would be no HSEC bundle routers available.  

CISCO2911-HSEC+/K9 VPN ISM module HSEC bundles for 2911 ISR platform
CISCO2901-HSEC+/K9 VPN ISM module HSEC bundles for 2901 ISR platform
CISCO1941-HSEC+/K9 VPN ISM module HSEC bundles for 1941 ISR platform

And there would be no HSEC license for the 1941 on the price list. 

FL-19-HSEC-K9 U.S. Export Restriction license for 1941 only w/ ISM-VPN-19

And the datasheet for the ISM-VPN cards would not state that the 1941, 2901 and 2911 were supported platforms.  

Table1, Table3, Table4 AND Table5:

http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/vpn-internal-service-module-isr-g2/data_sheet_c78-682436.html

One of the reasons for the HSEC license is to enable support for the ISM-VPN module.  One purpose of the ISM-VPN module is to offload work from the onboard CPU.  In some situations with concurrent services enabled your onboard CPU might not be able to reach 85Mbps throughput because the CPU is limiting things.  The ISM-VPN module which Cisco advertises as being supported in the 1941, 2901 and 2911 is supposed to help offload work from that onboard CPU and avoid issues in these cases.  

The bottom line here is that Cisco says the ISM-VPN module is supported on the 1941, 2901 and 2911 but doesn't seem to let you add the HSEC license on your own.  You have to buy the HSEC bundle or work with Cisco TAC to have them help get the license applied.  They should really fix the license portal or update the datasheet to avoid confusing their customers.  But that's just my opinion.  

Cheers, 

Note that those are bundles pertaining to the ISM-VPN-29 module, not the standalone licenses.   Cisco probably kept "HSEC" in the either out of laziness or to maintain consistency with the 2921 and higher. 

http://www.cisco.com/c/en/us/td/docs/routers/access/sw_activation/SA_on_ISR.html#wp1168046

See the note in table 5:

Only 2921 and 2951 routers support the HSEC-K9 feature license

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: