Table Of Contents
Cisco IOS Software Releases Supported
Information About Software Activation on Cisco ISRs and ISRs G2
Software Packages and Features
Resource Allocation with securityk9 Technology Package License
Options for Getting and Managing Software Licenses
Installing a License Using License Call Home
Cisco Product License Registration Portal
Getting a Permanent License Using Cisco License Portal
Installing a Permanent License Using Cisco IOS CLI
Activating an Evaluation License
Activating an SNA Switching Feature License
Activating the IPS Feature License
Activating the SSL_VPN Feature License
Activating the Gatekeeper Feature License
Clearing an Active Permanent Technology Package License
Verifying Licenses and Other Licensing Tasks
Simple Network Management Protocol
Software Activation on Modules
Software Activation on Cisco Integrated Services Routers and Cisco Integrated Service Routers Generation 2
First Published: October 20, 2009
Revised: December 9, 2009
This document describes the activation process for Cisco software on Cisco Integrated Services Routers (ISRs) and Cisco Integrated Service Routers Generation 2 (ISR G2). Cisco routers support Cisco IOS software entitlement and enforcement on various platforms. This document supports the following products:
Modular ISRs G2
•
Cisco 3900 Series ISR
•
Cisco 2900 Series ISR
•
Cisco 1900 Series ISR
Fixed ISRs
•
Cisco 890 Series ISR
•
Cisco 880 Series ISR
•
Cisco 860 Series ISR
Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Contents
This document contains the following topics:
•
Cisco IOS Software Releases Supported
•
Information About Software Activation on Cisco ISRs and ISRs G2
•
Software Packages and Features
•
Options for Getting and Managing Software Licenses
•
Software Activation on Modules
Before You Begin
When you order a new router, it is shipped preinstalled with the software image and the corresponding permanent licenses for the packages and features that you specified. You do not need to activate or register the software prior to use.
The following prerequisites apply if you are upgrading or installing a new software license on Cisco ISRs:
•
Purchase the software package or feature you want to install. You will receive a product activation key (PAK) with your purchase.
•
If you do not have a cisco.com username and password, get your username and password by registering at Cisco.com.
•
Familiarize yourself with the Cisco software licensing concepts detailed in the Cisco Software Activation Conceptual Overview chapter in the Cisco IOS Software Activation Configuration Guide.
Tip
Use the show license feature command to view the software packages and features supported on your router. Table 2, Table 3, and Table 5 list the package and feature licenses available for your router.
Tip
Use the show version command to display the license level on your router.
Cisco IOS Software Releases Supported
The following Cisco IOS software releases support software activation on Cisco ISRs:
•
Cisco 3900 series, 2900 series, and 1900 series ISRs running Cisco IOS Release 15.0(1)M.
•
Cisco 800 series ISRs running Cisco IOS Release 12.4(15)XZ or later support either the noncryptographic image or the cryptographic image.
•
Cisco 800 series ISRs running Cisco IOS Release images earlier than Cisco IOS Release 12.4(15)XZ do not support software activation.
Information About Software Activation on Cisco ISRs and ISRs G2
The Cisco IOS universal image contains all packages and features in one image. You can access the required functionality based on the license installed on your router.
Software Claim Certificate and License Activation
Software Claim Certificates are used for licenses that require software activation. The claim certificate provides the Product Activation Key (PAK) for your license and important information regarding the Cisco End User License Agreement (EULA).
In most cases, Cisco or your Cisco partner will have already activated the licenses ordered at the time of purchase and no Software Claim Certificate will be provided. You can determine the licenses activated on your system by issuing the show license feature command on the router command-line interface (CLI) or with a Cisco management application such as Cisco CP, or Cisco License Manager (CLM). Cisco License Manager is a free software application available at http://www.cisco.com/go/clm.
Right to Use Notification
A Right to Use license does not require software activation. You may begin using the licensed features upon receipt of the Right to Use Notification. Keep the Right to Use Notification for your records as proof of your license purchase.
Universal Device Identifier
The universal device identifier (UDI) has two main components: the product ID (PID) and the serial number (SN). For Cisco 3900 Series platforms that use field-replaceable unit (FRU) motherboards, the motherboard PID and SN is used. All other platforms use the chassis PID and SN.
The PID and SN are printed on a label located on the back of most Cisco hardware devices or on a label tray visible on the front panel of FRUable motherboards. See your router's Hardware Installation Guide or Read Me First to see the location of the label.
Tip
The Cisco Product Identification (CPI) tool provides detailed illustrations and descriptions showing where to locate serial number labels on Cisco products. The Cisco Product Identification tool can be accessed at http://tools.cisco.com/Support/CPI/index.do.
The UDI can be viewed using the show license udi command in privileged Exec mode.
UDI Example
The following example shows the output from the show license udi command on a Cisco 3925 ISR:
Router#show license udiDevice# PID SN UDI-----------------------------------------------------------------------------*0 C3900-SPE100/K9 FHH13030044 C3900-SPE100/K9:FHH13030044Router#Evaluation License
Your router comes with the evaluation license, also known as a temporary license, for most packages and features supported on your router. If you want to try a new software package or feature, activate the evaluation license for that package or feature.
Permanent License
If you want to permanently activate a software package or feature on your router, you will need to get a new software license.
Figure 1 shows the steps for software activation.
Figure 1 Steps for Software Activation
End User License Agreement
By accessing or using the Cisco products received with your Cisco ISR or ISR G2, you agree that your use of such products is governed by the terms and conditions of the Cisco Software License and any applicable supplemental license agreement. A copy of the terms of the End User License Agreement (EULA) is available at http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html
A EULA is presented for acceptance when you activate an evaluation license.
Software Packages and Features
The Cisco IOS universal image contains all packages and features in one image. The universal image on the Cisco 1900, 2900, and 3900 series ISRs are a super-set of Cisco IOS simplified technology packages.
Each package is a grouping of technology-specific features. Multiple technology package licenses can be installed and active on the Cisco 1900, 2900, and 3900 series ISR platforms.
Individual features can be enabled or disabled by license keys. Feature licenses may be subscription-based, uncounted, or count-based licenses.
Tip
Use the show license feature command to view the technology package licenses and feature licenses supported on your router.
The Cisco 1900, 2900, and 3900 series ISRs support the following universal images:
•
universalk9 —offers all IOS features supported by next generation ISRs .
•
universalk9_npe —does not support VPN payload and secure voice functionality and satisfies import considerations for CIS countries.
Table 1 lists the image names for the Cisco 1900 series, 2900 series, and 3900 series routers.
The following sections provide information on the technology package and feature licenses available on your router.
•
Resource Allocation with securityk9 Technology Package License
Technology Package Licenses
The features available in a technology package license may differ from platform to platform. For a list of features available in a technology package license, use the Cisco Feature Navigator at the following URL:
Table 2 lists the technology package licenses supported on Cisco ISR platforms.
Table 2 Technology Package Licenses Supported on Fixed Cisco ISR Platforms
Technology Package License 860 Series 880 Series 890 SeriesAdvanced Security
Yes
Yes
—
Advanced IP Services
Yes
Yes
Yes
Table 3 lists the technology package licenses supported on Cisco ISR G2 platforms.
Table 3 Technology Package Licenses Supported on Modular Cisco ISR G2 Platforms
Technology Package License 1900 Series 2900 Series 3900 Seriesipbasek9
Yes
Yes
Yes
securityk9_npe1
Yes
Yes
Yes
securityk92
Yes
Yes
Yes
datak9
Yes
Yes
Yes
uck9 (Unified Communications)
—
Yes
Yes
1 Supported only on the universalk9_npe-mz image.
2 Supported only on the universalk9-mz image.
Feature Licenses
Note
Enabling a feature license may require that a particular technology package license be installed and enabled on the router.
The following section lists the feature licenses available on the fixed and modular Cisco ISR platforms.
•
Table 4— Feature Licenses Supported on Fixed Cisco ISR Platforms
•
Table 5— Feature Licenses Supported on Modular Cisco 1900, 2900, and 3900 Platforms
Table 4 Feature Licenses Supported on Fixed Cisco ISR Platforms
Feature License 860 Series 880 Series 890 SeriesIPS (Subscription)
—
Yes
Yes
SSL_VPN1 (Counted)
—
Yes
Yes
1 The SSL_VPN features are supported only on the universalk9-mz image
Table 5 lists the feature licenses available on Cisco ISR G2 platforms and the required technology package license.
Table 5 Feature Licenses Supported on Modular Cisco 1900, 2900, and 3900 Platforms
Feature License Required Technology Package License 1900 Series 2900 Series 3900 SeriesGatekeeper
uck9 (Unified Communications)
—
Yes
Yes
SNA Switching (SNASw)
datak9
—
Yes
Yes
IPS (Subscription)
securityk9 or securityk9_npe
Yes
Yes
Yes
SSL_VPN1 (Counted)
securityk9
Yes
Yes
Yes
1 The SSL_VPN features are supported only on the universalk9-mz image.
Resource Allocation with securityk9 Technology Package License
Table 6 shows how resources such as bandwidth, number of tunnels, and TLS sessions for voice, IPSec, and SSLVPN are allocated with a securityk9 technology package license.
Table 6 Resource Allocation with securityk9 Technology Package License
Client Tx Bandwidth1 Rx Bandwidth 2 Tunnels3 TLS SessionsVoice
Necessary bandwidth is reserved or released as needed.
Necessary bandwidth is reserved or released as needed.
Resources are reserved or released as needed.
Resources are reserved or released as needed.
Maximum:1000
IPSec
Dynamically uses available bandwidth.
Dynamically uses available bandwidth.
Resources are reserved or released as needed.
NA
SSLVPN
Dynamically uses available bandwidth.
Dynamically uses available bandwidth.
Resources are reserved or released as needed.
NA
1 The maximum bandwidth in the ingress is 85,000 Kbps.
2 The maximum bandwidth in the egress is 85,000 Kbps.
3 The maximum cumulative tunnels are 225.
To view the resource allocated on your router, use the show platform cerm-information command. The following output shows an example of the resource allocation for a securityk9 license.
Router#show platform cerm-informationCrypto Export Restrictions Manager(CERM) Information:CERM functionality: ENABLED----------------------------------------------------------------Resource Maximum Limit Available----------------------------------------------------------------Tx Bandwidth(in kbps) 85000 85000Rx Bandwidth(in kbps) 85000 85000Number of tunnels 225 225Number of TLS sessions 1000 1000Resource reservation information:D - Dynamic-----------------------------------------------------------------------Client Tx Bandwidth Rx Bandwidth Tunnels TLS Sessions(in kbps) (in kbps)-----------------------------------------------------------------------VOICE 0 0 0 0IPSEC D D 0 N/ASSLVPN D D 0 N/AStatistics information:Failed tunnels : 0Failed sessions : 0Failed tx bandwidth: 0Failed rx bandwidth: 0Failed encrypt pkts: 0Failed decrypt pkts: 0Failed encrypt pkt bytes: 0Failed decrypt pkt bytes: 0Passed encrypt pkts: 0Passed decrypt pkts: 0Passed encrypt pkt bytes: 0Passed decrypt pkt bytes: 0Options for Getting and Managing Software Licenses
There are multiple options for getting and managing the software licenses on your router. Use one of the following options to get and manage software licenses on your router:
•
Cisco License Manager—software application that lets you get, register, install, and manage software licenses on multiple devices on your network. See the "Cisco License Manager" section for details.
•
Cisco License Call Home—lets you interact with the Cisco Product License Registration portal directly from your router to get, install, and manage your license. See the "Cisco License Call Home" section for details.
•
Cisco Product License Registration Portal—lets you manually get and register individual software licenses through a registration portal. See the "Cisco Product License Registration Portal" section for details.
•
Cisco IOS CLI—lets you install and manage licenses using the Cisco IOS command-line interface (CLI). See the "Cisco IOS CLI" section for details.
•
Simple Network Management Protocol—lets you install, view, and clear software licenses using Simple Network Management Protocol (SNMP). See "Simple Network Management Protocol" section for details.
Cisco License Manager
For a network-wide deployment, the Cisco License Manager can automate all license-related work flows by securely communicating with the licensing back-end fulfillment systems at Cisco.com and deploying the obtained licenses to managed devices on a network-wide basis. The application also keeps an inventory of deployed licenses and generates license reports.
Cisco License Manager is available at no cost and can be downloaded by registered Cisco.com users from http://www.cisco.com/go/clm.
For additional information on Cisco License Manager see the Cisco Software Activation Conceptual Overview chapter in the Cisco IOS Software Activation Configuration Guide and the documents at http://www.cisco.com/en/US/products/ps7138/tsd_products_support_series_home.html.
Cisco License Call Home
You can interact directly with the Cisco Product License Registration portal from your device by using the Cisco License Call Home interface. This interface is included with the Cisco Software Activation feature and described in the Cisco Software Activation Conceptual Overview and the Cisco License Call Home chapters in the Cisco IOS Software Activation Configuration Guide.
The License Call Home feature works as a client or server model. Each transaction requires a separate connection to the Cisco licensing infrastructure. The License Call Home feature displays prompts for obtaining required information, converting that information into a defined data structure, and then connecting to the Cisco licensing back-end to interact with the Cisco licensing infrastructure. A request is initiated by a License Call Home EXEC command, and the response is provided by the Cisco licensing infrastructure.
This section contains the following topics:
•
Installing a License Using License Call Home
Before You Begin
Your router must have an Internet connection and use HTTPS to connect to the Cisco licensing infrastructure.
Platform Support
Only certain platforms support the Cisco License Call Home function and must run a Cisco IOS crypto K9 image.
For information about platform support, see the Cisco License Call Home chapter in the Cisco IOS Software Activation Configuration Guide.
Installing a License Using License Call Home
Note
Purchase the software feature or package you want to install. You will receive a product activation key (PAK) with your purchase.
To install a license using the License Call Home feature, follow these steps:
Step 1
Use the show license call-home pak EXEC command to display the SKU list and features available for the PAK provided.
Step 2
Use the license call-home install pak command to install a license by using the Cisco License Call Home function.
Step 3
Complete the license installation by entering yes when prompted to install the license and then entering the information requested.
Cisco Product License Registration Portal
Use the Cisco Product License Registration Portal at www.cisco.com/go/license to manually perform the following licensing tasks:
•
Get a license
•
Register for an RMA license
•
Look-up a license
This section contains the following topic:
•
Getting a Permanent License Using Cisco License Portal
Getting a Permanent License Using Cisco License Portal
To get a permanent license, perform the steps detailed in this section.
Step 1
Enter the appropriate information at this URL:
Step 2
Download the license file or receive the license file by e-mail.
Step 3
Repeat Step 1 to Step 3 to obtain additional licenses.
Cisco IOS CLI
Use the Cisco IOS CLI to install and manage the software licenses on your router. This section contains the following procedures:
•
Installing a Permanent License Using Cisco IOS CLI
•
Activating an Evaluation License
•
Activating an SNA Switching Feature License
•
Activating the IPS Feature License
•
Activating the SSL_VPN Feature License
•
Activating the Gatekeeper Feature License
•
Clearing an Active Permanent Technology Package License
•
Verifying Licenses and Other Licensing Tasks
Installing a Permanent License Using Cisco IOS CLI
To install a permanent license, perform the steps detailed in this section.
Note
You can install multiple licenses on the Cisco 3900 series, 2900 series, and 1900 series ISRs.
SUMMARY STEPS
1.
enable
2.
license install stored-location-url
3.
reload
DETAILED STEPS
Command or Action PurposeStep 1
enable
Example:Router>enable
Enable privileged EXEC mode.
•
Enter your password if prompted.
Step 2
license install stored-location-url
Example:Router)#license install flash0:uck9-C3900-SPE150_K9-FHH12250057.xm l
Install a license file.
Step 3
reload
Example:Router#reload
(Optional) Reload the router.
A reload is not required if an evaluation license is active.
A reload is required to activate a technology package license if an evaluation license is not active.
To activate the SNAsw feature license perform the steps detailed in the "Activating an SNA Switching Feature License" section.
See the "Activating the IPS Feature License" section for additional information on configuring the IPS feature license.
See the "Activating the SSL_VPN Feature License" section for additional information on configuring the SSL_VPN feature license.
Screencast
The following screencast shows how to install a license.
http://www.cisco.com/en/US/docs/routers/access/sw_activation/license_install_demo/license_install_demo.swf.
Example
The following example shows how to install a license.
Router>enableRouter#license install flash0:uck9-C3900-SPE150_K9-FHH12250057.xmlInstalling licenses from "uck9-C3900-SPE150_K9-FHH12250057.xml"Installing...Feature:uck9...Successful:Supported1/1 licenses were successfully installed0/1 licenses were existing licenses0/1 licenses were failed to installupt-3945-1#*Jul 7 17:24:57.391: %LICENSE-6-INSTALL: Feature uck9 1.0 was installed in this device. UDI=C3900-SPE150/K9:FHH12250057; StoreIndex=15:Primary License Storage*Jul 7 17:24:57.615: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c3900 Next reboot level = uck9 and License = uck9Router#reloadRouter# show versionCisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9Copyright (c) 1986-2009 by Cisco Systems, Inc.Compiled Mon 15-Jun-09 15:27 by pallavikROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)upt-3945-1 uptime is 1 day, 3 hours, 53 minutesSystem returned to ROM by power-onSystem image file is "flash0:c3900-universalk9-mz.SSA.124-24.6.PI11k"This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email toexport@cisco.com.Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.Processor board ID FHH1226P01E3 Gigabit Ethernet interfaces4 Serial(sync/async) interfaces2 ISDN Basic Rate interfaces1 ATM interface25 terminal lines1 Virtual Private Network (VPN) ModuleDRAM configuration is 72 bits wide with parity enabled.255K bytes of non-volatile configuration memory.2000880K bytes of ATA System CompactFlash 0 (Read/Write)License Info:License UDI:-------------------------------------------------Device# PID SN-------------------------------------------------*0 C3900-SPE150/K9 FHH12250057Technology Package License Information for Module:'c3900'----------------------------------------------------------------Technology Technology-package Technology-packageCurrent Type Next reboot-----------------------------------------------------------------ipbase ipbasek9 Permanent ipbasek9security None None Noneuc uck9 Permanent uck9data None None NoneConfiguration register is 0x0Activating an Evaluation License
To activate an evaluation license in the Cisco 3900 series, 2900 series, and 1900 series routers, perform the steps detailed in this section. Evaluation licenses are activated using the license boot module module-name technology-package package-name command.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
license boot module module-name technology-package package-name
4.
exit
5.
reload
DETAILED STEPS
Screencast
The following screencast shows how to activate an evaluation license.
Example
The following example shows how to activate an evaluation license.
Router>enableRouter# configure terminalRouter(config)# license boot module c3900 technology-package securityk9PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE ORLICENSE KEY PROVIDED FOR ANY CISCO PRODUCT FEATURE OR USING SUCHPRODUCT FEATURE CONSTITUTES YOUR FULL ACCEPTANCE OF THE FOLLOWINGTERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO BE BOUNDBY ALL THE TERMS SET FORTH HEREIN.You hereby acknowledge and agree that the product feature licenseis terminable and that the product feature enabled by such licensemay be shut down or terminated by Cisco after expiration of theapplicable term of the license (e.g., 30-day trial period). Ciscoreserves the right to terminate or shut down any such product featureelectronically or by any other means available. While alerts or suchmessages may be provided, it is your sole responsibility to monitoryour terminable usage of any product feature enabled by the licenseand to ensure that your systems and networks are prepared for the shutdown of the product feature. You acknowledge and agree that Cisco willnot have any liability whatsoever for any damages, including, but notlimited to, direct, indirect, special, or consequential damages relatedto any product feature being shutdown or terminated. By clicking the"accept" button or typing "yes" you are indicating you have read andagree to be bound by all the terms provided herein.ACCEPT? [yes/no]: yes% use 'write' command to make license boot config take effect on next bootRouter(config)#*Jul 7 00:38:56.391: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c3900 Next reboot level = securityk9 and License = securityk9*Jul 7 00:38:56.987: %LICENSE-6-EULA_ACCEPTED: EULA for feature securityk9 1.0 has been accepted. UDI=C3900-SPE150/K9:FHH12250057; StoreIndex=1:Evaluation License StorageRouter(config)# exitRouter# reloadRouter# show versionCisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9Copyright (c) 1986-2009 by Cisco Systems, Inc.Compiled Mon 15-Jun-09 15:27 by pallavikROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)Router uptime is 1 day, 3 hours, 53 minutesSystem returned to ROM by power-onSystem image file is "flash0:c3900-universalk9-mz.SSA.124-24.6.PI11k"This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email toexport@cisco.com.Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.Processor board ID FHH1226P01E3 Gigabit Ethernet interfaces4 Serial(sync/async) interfaces2 ISDN Basic Rate interfaces1 ATM interface25 terminal lines1 Virtual Private Network (VPN) ModuleDRAM configuration is 72 bits wide with parity enabled.255K bytes of non-volatile configuration memory.2000880K bytes of ATA System CompactFlash 0 (Read/Write)License Info:License UDI:-------------------------------------------------Device# PID SN-------------------------------------------------*0 C3900-SPE150/K9 FHH12250057Technology Package License Information for Module:'c3900'----------------------------------------------------------------Technology Technology-package Technology-packageCurrent Type Next reboot-----------------------------------------------------------------ipbase ipbasek9 Permanent ipbasek9security securityk9 Evaluation securityk9uc ucK9 Permanent uck9data None None NoneConfiguration register is 0x0Activating an SNA Switching Feature License
Note
An SNASw feature license must be activated to configure SNASw.
To activate an evaluation or permanent license for the SNA Switching (SNASw) feature, perform the steps detailed in this section. The SNASw feature license is activated using the license feature snasw command.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
license feature snasw
4.
exit
5.
show license feature
DETAILED STEPS
Example
The following example shows how to activate an SNASw feature license.
Router> enableRouter# configure terminalRouter(config)#license feature snaswRouter(config)# exitRouter#show license featureFeature name Enforcement Evaluation Subscription Enabledipbasek9 no no no yessecurityk9 yes yes no yesuck9 yes yes no yesdatak9 yes yes no nogatekeeper yes yes no noLI yes no no noSSL_VPN yes yes no noios-ips-update yes yes yes noSNASw yes yes no yesActivating the IPS Feature License
See the Cisco Services for IPS on IOS document on Cisco.com for information on configuring an IPS feature license.
Activating the SSL_VPN Feature License
See the SSL VPN document on Cisco.com for information on configuring the SSLVPN feature license.
Activating the Gatekeeper Feature License
See the Configuring Cisco Unified Border Element with Gatekeeper document on Cisco.com for information on configuring the Gatekeeper feature license.
Clearing an Active Permanent Technology Package License
To clear an active permanent license from the Cisco 3900 series, 2900 series, and 1900 series routers, perform the following tasks:
1.
Disable the Technology Package
Disable the Technology Package
To disable a license, perform the steps detailed in this section.
SUMMARY STEPS
1.
enable
2.
configure terminal
3.
license boot module module name technology-package package name disable
4.
exit
5.
reload
6.
show version
DETAILED STEPS
Clear the License
To clear the license, perform the steps detailed in this section.
SUMMARY STEPS
1.
license clear
2.
configure terminal
3.
no license boot module technology module name technology-package package name disable
4.
exit
5.
reload
6.
show version
DETAILED STEPS
Example
The following example shows how to clear an active license.
Router> enableRouter# configure terminalEnter configuration commands, one per line. End with CNTL/Z.Router(config)#license boot module c3900 technology-package ?datak9 data technologysecurityk9 security technologyuck9 unified communications technologyRouter(config)#license boot module c3900 technology-package uck9 disable% use 'write' command to make license boot config take effect on next bootRouter(config)#exitRouter# reloadRouter# show versionCisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9Copyright (c) 1986-2009 by Cisco Systems, Inc.Compiled Mon 15-Jun-09 15:27 by pallavikROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)upt-3945-1 uptime is 1 day, 3 hours, 53 minutesSystem returned to ROM by power-onSystem image file is "flash0:c3900-universalk9-mz.SSA.124-24.6.PI11k"This product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email toexport@cisco.com.Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.Processor board ID FHH1226P01E3 Gigabit Ethernet interfaces4 Serial(sync/async) interfaces2 ISDN Basic Rate interfaces1 ATM interface25 terminal lines1 Virtual Private Network (VPN) ModuleDRAM configuration is 72 bits wide with parity enabled.255K bytes of non-volatile configuration memory.2000880K bytes of ATA System CompactFlash 0 (Read/Write)License Info:License UDI:-------------------------------------------------Device# PID SN-------------------------------------------------*0 C3900-SPE150/K9 FHH12250057Technology Package License Information for Module:'c3900'----------------------------------------------------------------Technology Technology-package Technology-packageCurrent Type Next reboot-----------------------------------------------------------------ipbase ipbasek9 Permanent ipbasek9security securityk9 Evaluation securityk9uc disable Permanent disabledata None None NoneConfiguration register is 0x0Router#Router#license clear uck9*Jul 7 00:34:23.691: %SYS-5-CONFIG_I: Configured from console by consoleclear uck9Feature: uck91 License Type: PermanentLicense State: Active, Not in UseLicense Addition: ExclusiveLicense Count: Non-CountedComment:Store Index: 15Store Name: Primary License StorageAre you sure you want to clear? (yes/[no]): yesupt-3945-1#*Jul 7 00:34:31.223: %LICENSE-6-REMOVE: Feature uck9 1.0 was removed from this device. UDI=C3900-SPE150/K9:FHH12250057; StoreIndex=15:Primary License StorageRouter#Router# configure terminalRouter(config)#no license boot module c3900 technology uck9 disableRouter(config)# exitRouter# reloadRouter# show versionCisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9Copyright (c) 1986-2009 by Cisco Systems, Inc.Compiled Mon 15-Jun-09 15:27 by pallavikROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)upt-3945-1 uptime is 1 minuteSystem returned to ROM by reload at 00:41:07 UTC Tue Jul 7 2009System image file is "flash:c3900-universalk9-mz.SSA.124-24.6.PI11k"Last reload reason: Reload CommandThis product contains cryptographic features and is subject to UnitedStates and local country laws governing import, export, transfer anduse. Delivery of Cisco cryptographic products does not implythird-party authority to import, export, distribute or use encryption.Importers, exporters, distributors and users are responsible forcompliance with U.S. and local country laws. By using this product youagree to comply with applicable laws and regulations. If you are unableto comply with U.S. and local laws, return this product immediately.A summary of U.S. laws governing Cisco cryptographic products may be found at:http://www.cisco.com/wwl/export/crypto/tool/stqrg.htmlIf you require further assistance please contact us by sending email toexport@cisco.com.Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.Processor board ID FHH1226P01E3 Gigabit Ethernet interfaces4 Serial(sync/async) interfaces2 ISDN Basic Rate interfaces25 terminal lines1 Virtual Private Network (VPN) ModuleDRAM configuration is 72 bits wide with parity enabled.255K bytes of non-volatile configuration memory.2000880K bytes of ATA System CompactFlash 0 (Read/Write)License Info:License UDI:-------------------------------------------------Device# PID SN-------------------------------------------------*0 C3900-SPE150/K9 FHH12250057Technology Package License Information for Module:'c3900'----------------------------------------------------------------Technology Technology-package Technology-packageCurrent Type Next reboot-----------------------------------------------------------------ipbase ipbasek9 Permanent ipbasek9security securityk9 Evaluation securityk9uc disable None Nonedata None None NoneConfiguration register is 0x0Router#Verifying Licenses and Other Licensing Tasks
Use the show version command to display the license level on your router.
See the Cisco IOS Software Activation Tasks and Commands chapter of the Cisco IOS Software Activation Configuration Guide for information about the following topics and more:
•
Software activation tasks like displaying and verifying licenses
•
Software activation processes like rehosting and RMA
Simple Network Management Protocol
Software licenses can be installed and managed with network management systems using Simple Network Management Protocol (SNMP). For more information on using SNMP see the Cisco IOS Software Activation Configuration Guide at http://www.cisco.com/en/US/docs/ios/csa/configuration/guide/15_0/csa_book.html.
RMA License Transfer
To transfer a software license from a failed device to a new device, go to the Cisco licensing portal at http://www.cisco.com/go/license.
Note
You will need the UDI of the defective as well as the RMA router to initiate an RMA replacement license.
Note
To transfer a software license from a Cisco 3925 or Cisco 3945 ISR, use the SN and PID from the service performance engine (SPE) and not the chassis.
For additional information on RMA license transfer see the Cisco Software Activation Conceptual Overview chapter in the Cisco IOS Software Activation Configuration Guide.
Software Activation on Modules
For information on the technology package required to support modules on the Cisco 2900 series and 3900 series ISR see the Module Support on Cisco Integrated Services Routers Generation 2 document.
For information on software activation and software applications supported on a module refer to the documentation set for the module and the software application.
Additional References
The following sections provide references related to the software activation feature.
Related Documents and Links
Related Topic Document TitleCisco License Manager
Cisco License Manager Online Help
Software Activation using Cisco IOS CLI and Cisco Call Home
Feature Documents
Cisco Software Activation QA: Gatekeeper: A Cisco Unified Border Element Component
Q&A and Deployment Guide
Software Activation Q&A for Cisco 860 and 880 Integrated Services Routers
Software Activation Q&A for Cisco 3900, 2900, and 1900 Integrated Services Routers
Licensing Deployment Guide
Data Sheets
Cisco 860 Series Integrated Services Routers data sheet
Cisco 880 Series Integrated Services Routers data sheet
Cisco 890 Series Integrated Services Routers data sheet
Technical Assistance
CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Pulse, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, and Flip Gift Card are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Fast Step, Follow Me Browsing, FormShare, GainMaker, GigaDrive, HomeLink, iLYNX, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0908R)
© 2010 Cisco Systems, Inc. All rights reserved.




