Hello Guys,
I had installed security license for Cisco 1100 ISR few months ago and now I am getting the below error. I have posted my running configuration and few more outputs. Any help would be much appreciated.
Failure reason: Fail to send out Call Home HTTP message. (or)
Failure reason: SACL http unknown host
sh version (truncated o/p)
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None Smart License None
securityk9
appxk9
Technology Package License Information:
-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
appxk9 None Smart License None
uck9 None Smart License None
securityk9 securityk9 Smart License securityk9
ipbase ipbasek9 Smart License ipbasek9
The current throughput level is unthrottled
Smart Licensing Status: REGISTERED/AUTH EXPIRED
Router#show call-home profile all
Profile Name: CiscoTAC-1
Profile status: ACTIVE
Profile mode: Full Reporting
Reporting Data: Smart Call Home, Smart Licensing
Preferred Message Format: xml
Message Size Limit: 3145728 Bytes
Transport Method: http
HTTP address: https://tools.cisco.com/its/service/oddce/services/DDCEService
Other address(es): default
Periodic configuration info message is scheduled every 15 day of the month at 15:41
Periodic inventory info message is scheduled every 15 day of the month at 15:26
Alert-group Severity
------------------------ ------------
crash debugging
environment minor
inventory normal
Syslog-Pattern Severity
------------------------ ------------
.* major
Router#telnet tools.cisco.com 443 /source-interface gigabitEthernet 0/0/0
% Bad IP address or host name
Router#telnet 173.37.145.8 443 /source-interface gigabitEthernet 0/0/0
Trying 173.37.145.8, 443 ... Open
^C
[Connection to 173.37.145.8 closed by foreign host]
Router##show run all | in destination address http
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
Router#show lice all
Smart Licensing Status
======================
Smart Licensing is ENABLED
Registration:
Status: REGISTERED
Smart Account: XXXXXXX
Virtual Account: AccXXX
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Nov 04 09:30:59 2022 summer
Last Renewal Attempt: FAILED on Jun 29 15:18:45 2023 summer
Failure reason: SACL http unknown host
Next Renewal Attempt: Jun 29 15:19:14 2023 summer
Registration Expires: Nov 04 09:22:36 2023 summer
License Authorization:
Status: AUTH EXPIRED on Jun 29 15:18:54 2023 summer
Last Communication Attempt: FAILED on Jun 29 15:18:54 2023 summer
Failure reason: SACL http unknown host
Next Communication Attempt: Jun 29 16:18:44 2023 summer
Communication Deadline: DEADLINE EXCEEDED
License Conversion:
Automatic Conversion Enabled: False
Status: Not started
Export Authorization Key:
Features Authorized:
<none>
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Smart
URL: https://smartreceiver.cisco.com/licservice/license
Proxy:
Not Supported
Miscellaneus:
Custom Id: <empty>
License Usage
==============
(ISR_1100_4P_Security):
Description:
Count: 1
Version: 1.0
Status: AUTH EXPIRED
Export status: NOT RESTRICTED
Product Information
===================
UDI: PID:C1121-4P,SN:XXXXXX
Agent Version
=============
Smart Agent for Licensing: 4.11.5_rel/41
Reservation Info
================
License reservation: DISABLED
Router#ping 171.70.168.183
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 171.70.168.183, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Router#ping tools.cisco.com
% Unrecognized host or address, or protocol not running.
Router#ping 173.37.145.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 173.37.145.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/52/64 ms
Running config
ip name-server 8.8.8.8
no ip domain lookup
ip domain name custvpn
crypto pki trustpoint TP-self-signed-141864XX
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-141864XX
revocation-check none
rsakeypair TP-self-signed-1418643960
!
crypto pki trustpoint SLA-TrustPoint
enrollment terminal
revocation-check none
license udi pid C1121-4P sn XXXXXXXX
license boot level securityk9
license smart url default
license smart transport smart
ip http server
ip http secure-server
ip http secure-trustpoint SLA-TrustPoint
ip http client source-interface GigabitEthernet0/0/0
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
Best Regards,
Rajesh
