ASR Licenses & General License Issues

[tmach]

I have several license questions which are not covered in previous discussions or in the Cisco documentation.

1.  On an ASR there is no license stored file in flash (performing a "dir" yields no file with the extension lic).  The show license yields nothing.  However, a show version does display the license information (so where is the information stored and why is it not displayed using show license).  So the obvious is that the license information is stored somewhere else in flash.  Where is that place and what is the file extension?

2.  With no obvious license file stored in flash, what will happen when a write erase is performed?  Does the write erase get rid of the license file or is the license file left alone?  I am hoping that I do not have to copy a new file to the device.

3.  Using Cisco's License (url: https://tools.cisco.com/SWIFT/LicensingUI/Quickstart)  What are the real parameters required by the application so that the Cisco App yields a valid license?  I have entered the udi information, a valid serial number, etc. to no avail.

Thanks for any suggestions,

- Ted -

[Bilal Nawaz · Accepted solution]

Hello,

Do you mind showing us the show version please? you can hide any sensitive information, just looking out for the license bit. The file extension is .lic

If you do a write erase, it will only erase the startup configuration file, nothing else.

Have you tried these:

show license udi

show license file

show license detail

show license status

show license statistics

See if this reveals any more information for you.

Hope this helps

Please rate useful posts and remember to mark any solved questions as answered. Thank you.

[tmach]

Thanks for the information concerning the write erase.  That is good to know. 

As for the rest of question #1:

Here is the requested information:

RT1001-1#dir
Directory of bootflash:/

   11  drwx       16384  Jan 19 2013 04:41:23 +00:00  lost+found
96769  drwx        4096  Apr 29 2013 12:46:18 +00:00  .prst_sync
   12  -rw-   374090512  Jan 19 2013 04:43:21 +00:00  asr1001-universal.03.07.01.S.152-4.S1.bin
306433  drwx        4096  Jan 19 2013 04:43:01 +00:00  .installer
612865  drwx        4096  Jan 19 2013 05:13:27 +00:00  core
758017  drwx        4096  Jan 19 2013 05:13:50 +00:00  .rollback_timer
   13  -rw-           0  Jan 19 2013 05:14:03 +00:00  tracelogs.111
145153  drwx       16384   May 1 2013 12:21:00 +00:00  tracelogs
   14  -rw-   344494024  Apr 29 2013 12:14:27 +00:00  asr1001-universalk9.03.04.00.S.151-3.S.bin

7802802176 bytes total (6664847360 bytes free)

RT1001-1#show ver
Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.1(3)S, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Thu 21-Jul-11 22:44 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved.  Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0.  The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY.  You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0.  For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON

RT1001-1 uptime is 1 day, 23 hours, 36 minutes
Uptime for this control processor is 1 day, 23 hours, 37 minutes
System returned to ROM by reload
System image file is "bootflash:/asr1001-universalk9.03.04.00.S.151-3.S.bin"
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

License Info:

License UDI:
Device# PID                     SN                      UDI
--------------------------------------------------------------------------------
*0      ASR1001                 ***********             ASR1001:***********

License Package Information for Module:'asr1001'

Module name   Image level          Pri   Config Valid license
------------------------------------------------------------------------
asr1001       adventerprise        1     YES    adventerprise
              advipservices        2     NO     advipservices
              ipbase               3     NO     ipbase

Module name   Current Level        Reboot Level
------------------------------------------------------------------------
asr1001       ipbase               ipbase

cisco ASR1001 (1RU) processor with 1189088K/6147K bytes of memory.
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7741439K bytes of eUSB flash at bootflash:.

Configuration register is 0x2102

RT1001-1#show license udi
Device# PID                     SN                      UDI
--------------------------------------------------------------------------------
*0      ASR1001                 ***********             ASR1001:***********

RT1001-1#show license file

RT1001-1#show license detail
%Error - License feature not found

RT1001-1#show license status
                License Type Supported
        permanent  Non-expiring node locked license

                License Operation Supported
        install    Install license
        clear      Clear license
        annotate   Comment license
        save       Save license
        revoke     Revoke license

                Device status
        Device Credential type: IMAGE
        Device Credential Verification: PASS
        Rehost Type: DC_OR_IC

        CDK Version: 1.1.2 Build 1

there is no show license statistics >

RT1001-1#show license ?
  all           Show all available licenses
  detail        Show license detail
  evaluation    Show all available evaluation licenses
  expiring      Show all available expiring licenses
  feature       Show a license feature
  file          Display a license file
  image-levels  Show license image levels
  in-use        Show all available in-use licenses
  permanent     Show all available permanent licenses
  status        Show a license status
  udi           Show the chassis Unique Device Identifier
  |             Output modifiers
 

Thanks,

- Ted -

[Bilal Nawaz]

Hello Ted, you have the basic ip base license which comes with the universal image I think. All the output says is that the image is capable of being licensed up to adventerprise but is currently at ip base.

Module name   Current Level        Reboot Level
------------------------------------------------------------------------
asr1001                 ipbase                ipbase

Could you please do a

show license all

show license in-use

The fact that you got this:

RT1001-1#show license detail

%Error - License feature not found

Automatically assumed that there is no license providing aditional features from the default.

hth

Please rate useful posts and remember to mark any solved questions as answered. Thank you.

[tmach]

Show license all and show license in-use return nothing.

- Ted -

[Bilal Nawaz · Accepted solution]

I believe this means there is no additional feature licenses that have been installed on your ASR.

Hope this helps

Sent from Cisco Technical Support iPhone App

[tmach]

Thank you for this information! 

Is there any way to obtain a valid license using the Cisco web tool? 

(url: https://tools.cisco.com/SWIFT/LicensingUI/Quickstart)

Or is the solution just open a TAC case?  Seems that using the web tool would be easier and less of a burden on the TAC.  Problem is what information is required if the PAK is not shipped with the device??

Thank you once more!!!

- Ted -

[Bilal Nawaz]

You only need a license if you require certain features and all depends on feature set required.

There are services available in the ip base license like basic routing etc....

Cisco have in their documentation asked consumers to have a look at http://www.cisco.com/go/cfn to find feature set information.

At FCS, 2 different type of licenses will be enforced via software activation. Firstly, the feature sets offered through the IP Base (K9 and non-K9), Advanced IP Services (K9 and non-K9) and Advanced Enterprise Services (K9 and non-K9). Secondly, the upgrade from the default performance of 2.5-Gbps to 5-Gbps can be accomplished via a software activated performance upgrade license (part number to be used at time of ordering any of the three ASR1001 chassis for the performance upgrade to 5-Gbps is FLS-ASR1001-5G). Other functionality such as firewall, encryption is planned to be software activated on the ASR 1001 in the future.

http://www.cisco.com/en/US/prod/collateral/routers/ps9343/qa_c67-452124.html

http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/chassis/csa_rtu.html#wp1057307

Hope these help.

Sent from Cisco Technical Support iPhone App

[tmach]

I am working at a company that has purchased many ASR1001's, ASR1002's, and ASR1006's.  The company has bought and paid for the K9 advanced security package as they want to enable encryption between sites.  Cisco has preloaded the IOS and license paks on these devices.  However, we are finding that some routers do not have the K9 image or have the wrong license pak installed.  That is the reason I am asking so many questions concerning licensing.  I want to get a good handle on licensing and what makes sense.  Contacting TAC or going through the web to obtain a license file.  At the moment I can not use the web since all the information I have at my disposal is insufficient.  The same information can be provided to TAC and they are able to sent me a license file.  Seems like a burden on TAC.

- Ted -

[Bilal Nawaz]

Hello, what I normally find is that the licenses are pre populated on ASRs when we've ordered them too.
But in any case if they have not, they're normally sent to an authorised company users CCO account email address that has been registered.
If this isn't the case and you strongly believe that the ASRs should have licenses then I would definitely raise a TAC case. This is why TAC is there, to help customers like us.

If you needed a K9 image, and this was what was purchased but not delivered in the ASR, you should be entitled to download with a company registered account that has a valid service contract with Cisco. You can download at Cisco.com

I advise that you should contact TAC, but just make sure you have the serial number for each ASR that you are enquiring about.

Registered cco accounts can go to the licensing portal and download all existing licenses from there.
Once you log in you will see 3 options. One of them being 'view existing licenses'

This should show you all licenses registered with the company with the service support contract.

Go to Cisco.com/go/license

Screenshot attached.

For technical support related to licensing, contact the Cisco Technical Assistance Center (TAC) at 800 553-2447 or tac@cisco.com. For questions related to your licensing order, contact Cisco Customer Service at http://www.cisco.com/go/customerservice

Hope this helps

Sent from Cisco Technical Support iPhone App