04-04-2011 12:16 AM
Hi.
I want to enable my SSL VPN license, it shows like its active but i cant configure it in the Cisco CP due to it telling me to activate the SSL VPN license. Hoping someone could shine some light on this matter.
Regards Tommy Svensson
scanlaser-router-2#show license detail
Index: 1 Feature: SSL_VPN Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0 (Active/In-use/Violation)
License Priority: Medium
Store Index: 2
All other SSL VPN trial licenses hace priority low.
scanlaser-router-2#show license feature
Feature name Enforcement Evaluation Subscription Enabled
ipbasek9 no no no yes
securityk9 yes yes no yes
datak9 yes yes no no
SSL_VPN yes yes no no
ios-ips-update yes yes yes no
WAAS_Express yes yes no no
The SSL_VPN is listed as evaluation wich must be wrong.
scanlaser-router-2#show license file Store Index: 2
License: 11 SSL_VPN 1.0 LONG NORMAL STANDALONE EXCL 10_KEYS INFINITE_KEYS
NEVER NEVER NiL SLM_CODE CL_ND_LCK NiL
04-04-2011 02:23 AM
Have you reloaded the router after you apply the license?
04-04-2011 02:26 AM
Yes several times
04-04-2011 02:35 AM
Strange, can you please share the following info:
show version
show run | i license
show license detail
04-04-2011 03:18 AM
scanlaser-router-2#show version
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(2)T2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Fri 22-Oct-10 23:32 by prod_rel_team
ROM: System Bootstrap, Version 15.0(1r)M9, RELEASE SOFTWARE (fc1)
scanlaser-router-2 uptime is 17 hours, 7 minutes
System returned to ROM by reload at 17:09:08 UTC Sun Apr 3 2011
System image file is "flash0:c1900-universalk9-mz.SPA.151-2.T2.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco CISCO1941/K9 (revision 1.0) with 487424K/36864K bytes of memory.
Processor board ID FHK145170X5
4 FastEthernet interfaces
2 Gigabit Ethernet interfaces
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device# PID SN
-------------------------------------------------
*0 CISCO1941/K9 FHK145170X5
Technology Package License Information for Module:'c1900'
----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
-----------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security securityk9 Permanent securityk9
data None None None
Configuration register is 0x2102
scanlaser-router-2#show run | i license
license udi pid CISCO1941/K9 sn FHK145170X5
scanlaser-router-2#show license detail
Index: 1 Feature: SSL_VPN Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0 (Active/In-use/Violation)
License Priority: Medium
Store Index: 2
Store Name: Primary License Storage
Index: 2 Feature: SSL_VPN Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: 5000/0/0 (Active/In-use/Violation)
License Priority: Low
Store Index: 8
Store Name: Evaluation License Storage
Index: 3 Feature: SSL_VPN Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: 5000/0/0 (Active/In-use/Violation)
License Priority: Low
Store Index: 7
Store Name: Evaluation License Storage
Index: 4 Feature: SSL_VPN Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: 5000/0/0 (Active/In-use/Violation)
License Priority: Low
Store Index: 6
Store Name: Evaluation License Storage
Index: 5 Feature: WAAS_Express Version: 1.0
License Type: Evaluation
License State: Not in Use, EULA not accepted
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 14
Store Name: Evaluation License Storage
Index: 6 Feature: WAAS_Express Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 13
Store Name: Evaluation License Storage
Index: 7 Feature: WAAS_Express Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 12
Store Name: Evaluation License Storage
Index: 8 Feature: datak9 Version: 1.0
License Type: Evaluation
License State: Not in Use, EULA not accepted
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 5
Store Name: Evaluation License Storage
Index: 9 Feature: datak9 Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 4
Store Name: Evaluation License Storage
Index: 10 Feature: datak9 Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 3
Store Name: Evaluation License Storage
Index: 11 Feature: ios-ips-update Version: 1.0
License Type: Evaluation
Start Date: N/A, End Date: Dec 31 2025
License State: Not in Use, EULA not accepted
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 11
Store Name: Evaluation License Storage
Index: 12 Feature: ios-ips-update Version: 1.0
License Type: Evaluation
Start Date: N/A, End Date: Dec 31 2025
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 10
Store Name: Evaluation License Storage
Index: 13 Feature: ios-ips-update Version: 1.0
License Type: Evaluation
Start Date: N/A, End Date: Dec 31 2025
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 9
Store Name: Evaluation License Storage
Index: 14 Feature: ipbasek9 Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Store Index: 0
Store Name: Primary License Storage
Index: 15 Feature: securityk9 Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Store Index: 1
Store Name: Primary License Storage
Index: 16 Feature: securityk9 Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 2
Store Name: Evaluation License Storage
Index: 17 Feature: securityk9 Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 1
Store Name: Evaluation License Storage
Index: 18 Feature: securityk9 Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: None
Store Index: 0
Store Name: Evaluation License Storage
04-04-2011 04:02 AM
Looks like you are affected by the following bugID: CSCtg58522
From the router, please issue: license modify priority SSL_VPN low
04-04-2011 04:07 AM
scanlaser-router-2#license modify priority SSL_VPN low
Feature: SSL_VPN Version: 1.0
Index: 1 License Type: Evaluation
Lock Type: Not Locked
License Count: 5000
License Priority: Low
Index: 2 License Type: Evaluation
Lock Type: Not Locked
License Count: 5000
License Priority: Low
Index: 3 License Type: Evaluation
Lock Type: Not Locked
License Count: 5000
License Priority: Low
% Error: License priority modification failed: Selected license line's precedence is in incorrect state
04-04-2011 04:40 AM
Please open a case with Cisco TAC so they can further investigate the issue.
They might check the actual license itself.
04-05-2011 12:47 AM
Could this be the problem? "License Store: Evaluation License Storage". That does not sound right to me. I have opened a case with Cisco TAC and got a new license to install but it resulted in the same problem. It all worked untill i reloaded the router, then it stopped working and the Cisco CP could not find a active SSL VPN license anymore.
Regards Tommy Svensson
scanlaser-router-2#show license all
License Store: Primary License Storage
StoreIndex: 0 Feature: ipbasek9 Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
StoreIndex: 1 Feature: securityk9 Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
StoreIndex: 2 Feature: SSL_VPN Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0 (Active/In-use/Violation)
License Priority: Medium
License Store: Evaluation License Storage
EDIT:
Index: 1 Feature: SSL_VPN Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: 10/0/0 (Active/In-use/Violation)
License Priority: Medium
Store Index: 2
Store Name: Primary License Storage
Here it says a different store name for some reason.
04-05-2011 01:09 AM
It sounds very much like a bug to me if it works prior to reload. TAC engineer should be able to troubleshoot more and discuss further with developer.
04-05-2011 01:11 AM
Ok thank you for all your help.
Regards Tommy
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide