cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7392
Views
20
Helpful
10
Replies

Enable SSL VPN license

Tommy Svensson
Level 1
Level 1

Hi.

I want to enable my SSL VPN license, it shows like its active but i cant configure it in the Cisco CP due to it telling me to activate the SSL VPN license. Hoping someone could shine some light on this matter.

Regards Tommy Svensson


scanlaser-router-2#show license detail
Index: 1        Feature: SSL_VPN                           Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0  (Active/In-use/Violation)
License Priority: Medium
Store Index: 2

All other SSL VPN trial licenses hace priority low.

scanlaser-router-2#show license feature
Feature name             Enforcement  Evaluation  Subscription   Enabled
ipbasek9                        no                          no                     no                            yes
securityk9                    yes                       yes                   no                           yes
datak9                             yes                       yes                   no                           no
SSL_VPN                       yes                       yes                   no                           no
ios-ips-update           yes                      yes                   yes                         no
WAAS_Express             yes                  yes                   no                            no


The SSL_VPN is listed as evaluation wich must be wrong.

scanlaser-router-2#show license file Store Index: 2
License: 11 SSL_VPN 1.0 LONG NORMAL STANDALONE EXCL 10_KEYS INFINITE_KEYS
NEVER NEVER NiL SLM_CODE CL_ND_LCK NiL


10 Replies 10

Jennifer Halim
Cisco Employee
Cisco Employee

Have you reloaded the router after you apply the license?

Yes several times

Strange, can you please share the following info:

show version

show run | i license

show license detail

scanlaser-router-2#show version
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(2)T2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 22-Oct-10 23:32 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M9, RELEASE SOFTWARE (fc1)

scanlaser-router-2 uptime is 17 hours, 7 minutes
System returned to ROM by reload at 17:09:08 UTC Sun Apr 3 2011
System image file is "flash0:c1900-universalk9-mz.SPA.151-2.T2.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO1941/K9 (revision 1.0) with 487424K/36864K bytes of memory.
Processor board ID FHK145170X5
4 FastEthernet interfaces
2 Gigabit Ethernet interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)


License Info:

License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        CISCO1941/K9          FHK145170X5

Technology Package License Information for Module:'c1900'

----------------------------------------------------------------
Technology    Technology-package          Technology-package
Current       Type          Next reboot
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Permanent     securityk9
data          None          None          None

Configuration register is 0x2102


scanlaser-router-2#show run | i license
license udi pid CISCO1941/K9 sn FHK145170X5

scanlaser-router-2#show license detail
Index: 1        Feature: SSL_VPN                           Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0  (Active/In-use/Violation)
License Priority: Medium
Store Index: 2
Store Name: Primary License Storage
Index: 2        Feature: SSL_VPN                           Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: 5000/0/0  (Active/In-use/Violation)
License Priority: Low
Store Index: 8
Store Name: Evaluation License Storage
Index: 3        Feature: SSL_VPN                           Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: 5000/0/0  (Active/In-use/Violation)
License Priority: Low
Store Index: 7
Store Name: Evaluation License Storage
Index: 4        Feature: SSL_VPN                           Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: 5000/0/0  (Active/In-use/Violation)
License Priority: Low
Store Index: 6
Store Name: Evaluation License Storage
Index: 5        Feature: WAAS_Express                      Version: 1.0
License Type: Evaluation
License State: Not in Use, EULA not accepted
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 14
Store Name: Evaluation License Storage
Index: 6        Feature: WAAS_Express                      Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 13
Store Name: Evaluation License Storage
Index: 7        Feature: WAAS_Express                      Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 12
Store Name: Evaluation License Storage
Index: 8        Feature: datak9                            Version: 1.0
License Type: Evaluation
License State: Not in Use, EULA not accepted
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 5
Store Name: Evaluation License Storage
Index: 9        Feature: datak9                            Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 4
Store Name: Evaluation License Storage
Index: 10       Feature: datak9                            Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 3
Store Name: Evaluation License Storage
Index: 11       Feature: ios-ips-update                    Version: 1.0
License Type: Evaluation
Start Date:         N/A, End Date: Dec 31 2025
License State: Not in Use, EULA not accepted
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 11
Store Name: Evaluation License Storage
Index: 12       Feature: ios-ips-update                    Version: 1.0
License Type: Evaluation
Start Date:         N/A, End Date: Dec 31 2025
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 10
Store Name: Evaluation License Storage
Index: 13       Feature: ios-ips-update                    Version: 1.0
License Type: Evaluation
Start Date:         N/A, End Date: Dec 31 2025
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 9
Store Name: Evaluation License Storage
Index: 14       Feature: ipbasek9                          Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Store Index: 0
Store Name: Primary License Storage
Index: 15       Feature: securityk9                        Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Store Index: 1
Store Name: Primary License Storage
Index: 16       Feature: securityk9                        Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 2
Store Name: Evaluation License Storage
Index: 17       Feature: securityk9                        Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 1
Store Name: Evaluation License Storage
Index: 18       Feature: securityk9                        Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2  days
Evaluation period left: 208 weeks 2  days
License Count: Non-Counted
License Priority: None
Store Index: 0
Store Name: Evaluation License Storage

Looks like you are affected by the following bugID: CSCtg58522

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtg58522

From the router, please issue: license modify priority SSL_VPN low

scanlaser-router-2#license modify priority SSL_VPN low
Feature: SSL_VPN   Version: 1.0
Index: 1        License Type: Evaluation
Lock Type: Not Locked
License Count: 5000
License Priority: Low

Index: 2        License Type: Evaluation
Lock Type: Not Locked
License Count: 5000
License Priority: Low

Index: 3        License Type: Evaluation
Lock Type: Not Locked
License Count: 5000
License Priority: Low


% Error: License priority modification failed: Selected license line's precedence is in incorrect state

Please open a case with Cisco TAC so they can further investigate the issue.

They might check the actual license itself.

Could this be the problem? "License Store: Evaluation License Storage". That does not sound right to me. I have opened a case with Cisco TAC and got a new license to install but it resulted in the same problem. It all worked untill i reloaded the router, then it stopped working and the Cisco CP could not find a active SSL VPN license anymore.

Regards Tommy Svensson

scanlaser-router-2#show license all
License Store: Primary License Storage
StoreIndex: 0   Feature: ipbasek9                          Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium

StoreIndex: 1   Feature: securityk9                        Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium

StoreIndex: 2   Feature: SSL_VPN                           Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0  (Active/In-use/Violation)
License Priority: Medium
License Store: Evaluation License Storage

EDIT:

Index: 1        Feature: SSL_VPN                           Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0  (Active/In-use/Violation)
License Priority: Medium
Store Index: 2
Store Name: Primary License Storage

Here it says a different store name for some reason.

It sounds very much like a bug to me if it works prior to reload. TAC engineer should be able to troubleshoot more and discuss further with developer.

Ok thank you for all your help.

Regards Tommy