sec license on router 2911 for IKEv2

[amralrazzaz]

i have cisco router 2911 running c2900-universalk9-mz.SPA.154-3.M1.bin and need to install sec license with part number SL-29-SEC-K9

so is it compatible to have the license with this ios version that is currently running on my router 

also it the license already available ? i hope yes becuase i need this very much 

i cant configure IKEv2,ipsec , all crypto options all features disables 

CISCO2911-EGCAI01#show ver
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.4(3)M1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Sat 25-Oct-14 03:34 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M16, RELEASE SOFTWARE (fc1)

CISCO2911-EGCAI01 uptime is 2 hours, 14 minutes
System returned to ROM by reload at 14:10:27 EET Wed May 6 2020
System restarted at 14:12:41 EET Wed May 6 2020
System image file is "flash0:c2900-universalk9-mz.SPA.154-3.M1.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
--More--

compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
Processor board ID FCZ190360AM
3 Gigabit Ethernet interfaces
1 terminal line
8 Voice FXO interfaces
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
255488K bytes of ATA System CompactFlash 0 (Read/Write)

License Info:

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 CISCO2911/K9 FCZ190360AM

Technology Package License Information for Module:'c2900'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security None None None
uc uck9 Permanent uck9
data None None None
NtwkEss None None None
CollabPro None None None

Configuration register is 0x2102

CISCO2911-EGCAI01#

[Rob Ingram]

Hi,

The Cisco 2911 router is shipped with a universal image, this contains all IOS features. However the level of functionality available is determined by the license or licenses installed on the router.

Reference:-

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html

So if you require new features you just need to upgrade the license, you don't necessarily need to upgrade the IOS image. You may only need to upgrade the IOS image if there is a bug or a new feature is available on a newer IOS image.

HTH

[amralrazzaz]

many super thanks RJI for all what u doing helping people :)

[amralrazzaz]

after install demo sec license on router and reload the router still sec features disables ??

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 CISCO2911/K9 FCZ190360AM

Technology Package License Information for Module:'c2900'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security None None None
uc uck9 Permanent uck9
data None None None
NtwkEss None None None
CollabPro None None None

[balaji.bandi]

is it compatible to have the license with this ios version that is currently running on my router 

BB - yes your router is compatable.

also it the license already available ? i hope yes becuase i need this very much 

BB- you have only base Licesne, you need to buy security features.

security None None None

i cant configure IKEv2,ipsec , all crypto options all features disables 

until you add new feature, you can install trail grace period for testing -  look below link -

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html

[amralrazzaz]

many thanks BB for your answer appreciated ill check this for u :)

[amralrazzaz]

i read this on link u shared 

temp license as test for 60 days ? how that ?and which kind of license can be using as trial ? 

Temporary Licenses

Temporary licenses are used for evaluating new capabilities or in emergency situations. A temporary license allows a feature set to be used for 60 days of actual usage. When the 60-day period expires, the device will continue to operate normally until reloaded. After the reload, the device will default to the original functionality before the temporary license was enabled. Only actual time that the temporary license is enabled counts towards the 60 day limit. The Cisco Technical Assistance Center (TAC) can provide an extension license for longer trials or other circumstances.

[balaji.bandi]

You can use any features for gracefull period for testing, once you happy you can buy License in production use.

[Rob Ingram]

Login to your cisco account and to Product license registration.

Click Get Licenses > Demo and evaluation

Select Routers and Switches > Cisco Integrated Services Routers (ISR) G2 Temporary License

Click Security License for 1900/2900/3900 Series

[amralrazzaz]

from where should i bring this info attached on pic 

where can i find it ? is it from show version ?

[balaji.bandi]

we use mostly ISR 4K, below command should show the information you looking :

#show license udi

example from cisco site :  ( PID - Product ID, SN  - Serial number of device)

Router#show license udi

SlotID PID SN UDI

------------------------------------------------------------------------------------------------------

*6 ISR4451-X/K9 FOC17042FJ9 ISR4451-X/K9:FOC17042FJ9

[amralrazzaz]

done sir :) 

thanks 

the lic zipped file already download ?

how to install on router ? 

and this demo will open all the sec features and i can try to configure ipsec IKEv2 ? and i can use it until purchasing the license (permenant) 

also is this demo is full features of security ?

[Rob Ingram]

Temporary: A Temporary License is a license good for a limited amount of time. ISR G2 includes a full set of 60 day Temporary Licenses for the Data, UC and Security feature sets. These can be activated and de-activated at any time to evaluate a feature set before making the decision to purchase and upgrade to a Permanent License.

https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html

[balaji.bandi]

yes all the features available for you to test...jiust like any other full license.

[balaji.bandi]

Hope you have all the information now as expected, if so please make as solution for other community members can refer.