Software Activation on Cisco Integrated Services Routers and Cisco Integrated Service Routers G2

Table Of Contents

Software Activation on Cisco Integrated Services Routers and Cisco Integrated Service Routers Generation 2

Contents

Before You Begin

Cisco IOS Software Releases Supported

Information About Software Activation on Cisco ISRs and ISRs G2

Software Packages and Features

Technology Package Licenses

Feature Licenses

Resource Allocation with securityk9 Technology Package License

Options for Getting and Managing Software Licenses

Cisco License Manager

Cisco License Call Home

Before You Begin

Platform Support

Installing a License Using License Call Home

Cisco Product License Registration Portal

Getting a Permanent License Using Cisco License Portal

Cisco IOS CLI

Installing a Permanent License Using Cisco IOS CLI

Activating an Evaluation License

Activating an SNA Switching Feature License

Activating the IPS Feature License

Activating the SSL_VPN Feature License

Activating the Gatekeeper Feature License

Clearing an Active Permanent Technology Package License

Verifying Licenses and Other Licensing Tasks

Simple Network Management Protocol

RMA License Transfer

Software Activation on Modules

Additional References

Related Documents and Links

Technical Assistance

Software Activation on Cisco Integrated Services Routers and Cisco Integrated Service Routers Generation 2

First Published: October 20, 2009

Revised: December 9, 2009

This document describes the activation process for Cisco software on Cisco Integrated Services Routers (ISRs) and Cisco Integrated Service Routers Generation 2 (ISR G2). Cisco routers support Cisco IOS software entitlement and enforcement on various platforms. This document supports the following products:

Modular ISRs G2

•Cisco 3900 Series ISR

•Cisco 2900 Series ISR

•Cisco 1900 Series ISR

Fixed ISRs

•Cisco 890 Series ISR

•Cisco 880 Series ISR

•Cisco 860 Series ISR

Finding Support Information for Platforms and Cisco IOS and Catalyst OS Software Images

Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Contents

This document contains the following topics:

•Before You Begin

•Cisco IOS Software Releases Supported

•Information About Software Activation on Cisco ISRs and ISRs G2

•Software Packages and Features

•Options for Getting and Managing Software Licenses

•RMA License Transfer

•Software Activation on Modules

•Additional References

Before You Begin

When you order a new router, it is shipped preinstalled with the software image and the corresponding permanent licenses for the packages and features that you specified. You do not need to activate or register the software prior to use.

The following prerequisites apply if you are upgrading or installing a new software license on Cisco ISRs:

•Purchase the software package or feature you want to install. You will receive a product activation key (PAK) with your purchase.

•If you do not have a cisco.com username and password, get your username and password by registering at Cisco.com.

•Familiarize yourself with the Cisco software licensing concepts detailed in the Cisco Software Activation Conceptual Overview chapter in the Cisco IOS Software Activation Configuration Guide.

Tip Use the show license feature command to view the software packages and features supported on your router. Table 2, Table 3, and Table 5 list the package and feature licenses available for your router.

Tip Use the show version command to display the license level on your router.

Cisco IOS Software Releases Supported

The following Cisco IOS software releases support software activation on Cisco ISRs:

•Cisco 3900 series, 2900 series, and 1900 series ISRs running Cisco IOS Release 15.0(1)M.

•Cisco 800 series ISRs running Cisco IOS Release 12.4(15)XZ or later support either the noncryptographic image or the cryptographic image.

•Cisco 800 series ISRs running Cisco IOS Release images earlier than Cisco IOS Release 12.4(15)XZ do not support software activation.

Information About Software Activation on Cisco ISRs and ISRs G2

The Cisco IOS universal image contains all packages and features in one image. You can access the required functionality based on the license installed on your router.

Software Claim Certificate and License Activation

Software Claim Certificates are used for licenses that require software activation. The claim certificate provides the Product Activation Key (PAK) for your license and important information regarding the Cisco End User License Agreement (EULA).

In most cases, Cisco or your Cisco partner will have already activated the licenses ordered at the time of purchase and no Software Claim Certificate will be provided. You can determine the licenses activated on your system by issuing the show license feature command on the router command-line interface (CLI) or with a Cisco management application such as Cisco CP, or Cisco License Manager (CLM). Cisco License Manager is a free software application available at http://www.cisco.com/go/clm.

Right to Use Notification

A Right to Use license does not require software activation. You may begin using the licensed features upon receipt of the Right to Use Notification. Keep the Right to Use Notification for your records as proof of your license purchase.

Universal Device Identifier

The universal device identifier (UDI) has two main components: the product ID (PID) and the serial number (SN). For Cisco 3900 Series platforms that use field-replaceable unit (FRU) motherboards, the motherboard PID and SN is used. All other platforms use the chassis PID and SN.

The PID and SN are printed on a label located on the back of most Cisco hardware devices or on a label tray visible on the front panel of FRUable motherboards. See your router's Hardware Installation Guide or Read Me First to see the location of the label.

Tip The Cisco Product Identification (CPI) tool provides detailed illustrations and descriptions showing where to locate serial number labels on Cisco products. The Cisco Product Identification tool can be accessed at http://tools.cisco.com/Support/CPI/index.do.

The UDI can be viewed using the show license udi command in privileged Exec mode.

UDI Example

The following example shows the output from the show license udi command on a Cisco 3925 ISR:
Router#show license udi
Device#   PID                   		SN              	UDI
-----------------------------------------------------------------------------
*0        C3900-SPE100/K9       	FHH13030044     	C3900-SPE100/K9:FHH13030044
Router#
Evaluation License

Your router comes with the evaluation license, also known as a temporary license, for most packages and features supported on your router. If you want to try a new software package or feature, activate the evaluation license for that package or feature.

Permanent License

If you want to permanently activate a software package or feature on your router, you will need to get a new software license.

Figure 1 shows the steps for software activation.

Figure 1 Steps for Software Activation

End User License Agreement

By accessing or using the Cisco products received with your Cisco ISR or ISR G2, you agree that your use of such products is governed by the terms and conditions of the Cisco Software License and any applicable supplemental license agreement. A copy of the terms of the End User License Agreement (EULA) is available at http://www.cisco.com/en/US/docs/general/warranty/English/EU1KEN_.html

A EULA is presented for acceptance when you activate an evaluation license.

Software Packages and Features

The Cisco IOS universal image contains all packages and features in one image. The universal image on the Cisco 1900, 2900, and 3900 series ISRs are a super-set of Cisco IOS simplified technology packages.

Each package is a grouping of technology-specific features. Multiple technology package licenses can be installed and active on the Cisco 1900, 2900, and 3900 series ISR platforms.

Individual features can be enabled or disabled by license keys. Feature licenses may be subscription-based, uncounted, or count-based licenses.

Tip Use the show license feature command to view the technology package licenses and feature licenses supported on your router.

The Cisco 1900, 2900, and 3900 series ISRs support the following universal images:

•universalk9 —offers all IOS features supported by next generation ISRs .

•universalk9_npe —does not support VPN payload and secure voice functionality and satisfies import considerations for CIS countries.

Table 1 lists the image names for the Cisco 1900 series, 2900 series, and 3900 series routers.

Table 1 Universal Image Names for Cisco 1900 Series, 2900 Series, and 3900 ISRs

Platform

Image Name

CISCO1941, CISCO1941W

c1900-universalk9-mz

c1900-universalk9_npe-mz

CISCO2901, CISCO2911, CISCO2921

c2900-universalk9-mz

c2900-universalk9_npe-mz

CISCO2951

c2951-universalk9-mz

c2951-universalk9_npe-mz

CISCO3925, CISCO3945

c3900-universalk9-mz

c3900-universalk9_npe-mz

The following sections provide information on the technology package and feature licenses available on your router.

•Technology Package Licenses

•Feature Licenses

•Resource Allocation with securityk9 Technology Package License

Technology Package Licenses

The features available in a technology package license may differ from platform to platform. For a list of features available in a technology package license, use the Cisco Feature Navigator at the following URL:

http://www.cisco.com/go/cfn

Table 2 lists the technology package licenses supported on Cisco ISR platforms.

Table 2 Technology Package Licenses Supported on Fixed Cisco ISR Platforms

Technology Package License

860 Series

880 Series

890 Series

Advanced Security

Yes

Yes

—

Advanced IP Services

Yes

Yes

Yes

Table 3 lists the technology package licenses supported on Cisco ISR G2 platforms.

Table 3 Technology Package Licenses Supported on Modular Cisco ISR G2 Platforms

Technology Package License

1900 Series

2900 Series

3900 Series

ipbasek9

Yes

Yes

Yes

securityk9_npe¹

Yes

Yes

Yes

securityk9²

Yes

Yes

Yes

datak9

Yes

Yes

Yes

uck9 (Unified Communications)

—

Yes

Yes

¹Supported only on the universalk9_npe-mz image.

²Supported only on the universalk9-mz image.

Feature Licenses

Note Enabling a feature license may require that a particular technology package license be installed and enabled on the router.

The following section lists the feature licenses available on the fixed and modular Cisco ISR platforms.

•Table 4— Feature Licenses Supported on Fixed Cisco ISR Platforms

•Table 5— Feature Licenses Supported on Modular Cisco 1900, 2900, and 3900 Platforms

Table 4 Feature Licenses Supported on Fixed Cisco ISR Platforms

Feature License

860 Series

880 Series

890 Series

IPS (Subscription)

—

Yes

Yes

SSL_VPN¹ (Counted)

—

Yes

Yes

¹The SSL_VPN features are supported only on the universalk9-mz image

Table 5 lists the feature licenses available on Cisco ISR G2 platforms and the required technology package license.

Table 5 Feature Licenses Supported on Modular Cisco 1900, 2900, and 3900 Platforms

Feature License

Required Technology Package License

1900 Series

2900 Series

3900 Series

Gatekeeper

uck9 (Unified Communications)

—

Yes

Yes

SNA Switching (SNASw)

datak9

—

Yes

Yes

IPS (Subscription)

securityk9 or securityk9_npe

Yes

Yes

Yes

SSL_VPN¹ (Counted)

securityk9

Yes

Yes

Yes

¹The SSL_VPN features are supported only on the universalk9-mz image.

Resource Allocation with securityk9 Technology Package License

Table 6 shows how resources such as bandwidth, number of tunnels, and TLS sessions for voice, IPSec, and SSLVPN are allocated with a securityk9 technology package license.

Table 6 Resource Allocation with securityk9 Technology Package License

Client

Tx Bandwidth¹

Rx Bandwidth ²

Tunnels³

TLS Sessions

Voice

Necessary bandwidth is reserved or released as needed.

Necessary bandwidth is reserved or released as needed.

Resources are reserved or released as needed.

Resources are reserved or released as needed.

Maximum:1000

IPSec

Dynamically uses available bandwidth.

Dynamically uses available bandwidth.

Resources are reserved or released as needed.

NA

SSLVPN

Dynamically uses available bandwidth.

Dynamically uses available bandwidth.

Resources are reserved or released as needed.

NA

¹The maximum bandwidth in the ingress is 85,000 Kbps.

²The maximum bandwidth in the egress is 85,000 Kbps.

³The maximum cumulative tunnels are 225.

To view the resource allocated on your router, use the show platform cerm-information command. The following output shows an example of the resource allocation for a securityk9 license.
Router#show platform cerm-information
Crypto Export Restrictions Manager(CERM) Information:
 CERM functionality: ENABLED
 ----------------------------------------------------------------
 Resource                       Maximum Limit           Available
 ----------------------------------------------------------------
 Tx Bandwidth(in kbps)          85000                   85000
 Rx Bandwidth(in kbps)          85000                   85000
 Number of tunnels              225                     225
 Number of TLS sessions         1000                    1000
 Resource reservation information:
 D - Dynamic
 -----------------------------------------------------------------------
 Client         Tx Bandwidth    Rx Bandwidth    Tunnels    TLS Sessions
                 (in kbps)       (in kbps)
 -----------------------------------------------------------------------
 VOICE           0               0                0         0   
 IPSEC           D               D                0         N/A   
 SSLVPN          D               D                0         N/A   
 Statistics information:
 Failed tunnels     : 0
 Failed sessions    : 0
 Failed tx bandwidth: 0
 Failed rx bandwidth: 0
 Failed encrypt pkts: 0
 Failed decrypt pkts: 0
 Failed encrypt pkt bytes: 0
 Failed decrypt pkt bytes: 0
 Passed encrypt pkts: 0
 Passed decrypt pkts: 0
 Passed encrypt pkt bytes: 0
 Passed decrypt pkt bytes: 0
Options for Getting and Managing Software Licenses

There are multiple options for getting and managing the software licenses on your router. Use one of the following options to get and manage software licenses on your router:

•Cisco License Manager—software application that lets you get, register, install, and manage software licenses on multiple devices on your network. See the "Cisco License Manager" section for details.

•Cisco License Call Home—lets you interact with the Cisco Product License Registration portal directly from your router to get, install, and manage your license. See the "Cisco License Call Home" section for details.

•Cisco Product License Registration Portal—lets you manually get and register individual software licenses through a registration portal. See the "Cisco Product License Registration Portal" section for details.

•Cisco IOS CLI—lets you install and manage licenses using the Cisco IOS command-line interface (CLI). See the "Cisco IOS CLI" section for details.

•Simple Network Management Protocol—lets you install, view, and clear software licenses using Simple Network Management Protocol (SNMP). See "Simple Network Management Protocol" section for details.

Cisco License Manager

For a network-wide deployment, the Cisco License Manager can automate all license-related work flows by securely communicating with the licensing back-end fulfillment systems at Cisco.com and deploying the obtained licenses to managed devices on a network-wide basis. The application also keeps an inventory of deployed licenses and generates license reports.

Cisco License Manager is available at no cost and can be downloaded by registered Cisco.com users from http://www.cisco.com/go/clm.

For additional information on Cisco License Manager see the Cisco Software Activation Conceptual Overview chapter in the Cisco IOS Software Activation Configuration Guide and the documents at http://www.cisco.com/en/US/products/ps7138/tsd_products_support_series_home.html.

Cisco License Call Home

You can interact directly with the Cisco Product License Registration portal from your device by using the Cisco License Call Home interface. This interface is included with the Cisco Software Activation feature and described in the Cisco Software Activation Conceptual Overview and the Cisco License Call Home chapters in the Cisco IOS Software Activation Configuration Guide.

The License Call Home feature works as a client or server model. Each transaction requires a separate connection to the Cisco licensing infrastructure. The License Call Home feature displays prompts for obtaining required information, converting that information into a defined data structure, and then connecting to the Cisco licensing back-end to interact with the Cisco licensing infrastructure. A request is initiated by a License Call Home EXEC command, and the response is provided by the Cisco licensing infrastructure.

This section contains the following topics:

•Before You Begin

•Platform Support

•Installing a License Using License Call Home

Before You Begin

Your router must have an Internet connection and use HTTPS to connect to the Cisco licensing infrastructure.

Platform Support

Only certain platforms support the Cisco License Call Home function and must run a Cisco IOS crypto K9 image.

For information about platform support, see the Cisco License Call Home chapter in the Cisco IOS Software Activation Configuration Guide.

Installing a License Using License Call Home

Note Purchase the software feature or package you want to install. You will receive a product activation key (PAK) with your purchase.

To install a license using the License Call Home feature, follow these steps:

Step 1 Use the show license call-home pak EXEC command to display the SKU list and features available for the PAK provided.

Step 2 Use the license call-home install pak command to install a license by using the Cisco License Call Home function.

Step 3 Complete the license installation by entering yes when prompted to install the license and then entering the information requested.

Cisco Product License Registration Portal

Use the Cisco Product License Registration Portal at www.cisco.com/go/license to manually perform the following licensing tasks:

•Get a license

•Register for an RMA license

•Look-up a license

This section contains the following topic:

•Getting a Permanent License Using Cisco License Portal

Getting a Permanent License Using Cisco License Portal

To get a permanent license, perform the steps detailed in this section.

Step 1 Enter the appropriate information at this URL:

www.cisco.com/go/license.

Step 2 Download the license file or receive the license file by e-mail.

Step 3 Repeat Step 1 to Step 3 to obtain additional licenses.

Cisco IOS CLI

Use the Cisco IOS CLI to install and manage the software licenses on your router. This section contains the following procedures:

•Installing a Permanent License Using Cisco IOS CLI

•Activating an Evaluation License

•Activating an SNA Switching Feature License

•Activating the IPS Feature License

•Activating the SSL_VPN Feature License

•Activating the Gatekeeper Feature License

•Clearing an Active Permanent Technology Package License

•Verifying Licenses and Other Licensing Tasks

Installing a Permanent License Using Cisco IOS CLI

To install a permanent license, perform the steps detailed in this section.

Note You can install multiple licenses on the Cisco 3900 series, 2900 series, and 1900 series ISRs.

SUMMARY STEPS

1. enable

2. license install stored-location-url

3. reload

DETAILED STEPS

Command or Action

Purpose

Step 1

enable

Example:

Router>enable

Enable privileged EXEC mode.

•Enter your password if prompted.

Step 2

license install stored-location-url
Example:

Router)#license install flash0:uck9-C3900-SPE150_K9-FHH12250057.xm l

Install a license file.

Step 3

reload

Example:

Router#reload

(Optional) Reload the router.

A reload is not required if an evaluation license is active.

A reload is required to activate a technology package license if an evaluation license is not active.

To activate the SNAsw feature license perform the steps detailed in the "Activating an SNA Switching Feature License" section.

See the "Activating the IPS Feature License" section for additional information on configuring the IPS feature license.

See the "Activating the SSL_VPN Feature License" section for additional information on configuring the SSL_VPN feature license.

Screencast

The following screencast shows how to install a license.

http://www.cisco.com/en/US/docs/routers/access/sw_activation/license_install_demo/licens e_install_demo.swf.

Example

The following example shows how to install a license.
Router>enable
Router#license install flash0:uck9-C3900-SPE150_K9-FHH12250057.xml
Installing licenses from "uck9-C3900-SPE150_K9-FHH12250057.xml" 
Installing...Feature:uck9...Successful:Supported
1/1 licenses were successfully installed 
0/1 licenses were existing licenses
0/1 licenses were failed to install
upt-3945-1#
*Jul  7 17:24:57.391: %LICENSE-6-INSTALL: Feature uck9 1.0 was installed in this device. 
UDI=C3900-SPE150/K9:FHH12250057; StoreIndex=15:Primary License Storage
*Jul  7 17:24:57.615: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c3900 
Next reboot level = uck9 and License = uck9
Router#reload
Router# show version
Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 
ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 15-Jun-09 15:27 by pallavik
ROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)
upt-3945-1 uptime is 1 day, 3 hours, 53 minutes
System returned to ROM by power-on
System image file is "flash0:c3900-universalk9-mz.SSA.124-24.6.PI11k"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.
Processor board ID FHH1226P01E
3 Gigabit Ethernet interfaces
4 Serial(sync/async) interfaces
2 ISDN Basic Rate interfaces
1 ATM interface
25 terminal lines
1 Virtual Private Network (VPN) Module
DRAM configuration is 72 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
2000880K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        C3900-SPE150/K9       FHH12250057     
Technology Package License Information for Module:'c3900' 
----------------------------------------------------------------
Technology    Technology-package          Technology-package
              Current       Type          Next reboot  
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      None          None          None
uc            uck9          Permanent     uck9
data          None          None          None
Configuration register is 0x0
Activating an Evaluation License

To activate an evaluation license in the Cisco 3900 series, 2900 series, and 1900 series routers, perform the steps detailed in this section. Evaluation licenses are activated using the license boot module module-name technology-package package-name command.

SUMMARY STEPS

1. enable

2. configure terminal

3. license boot module module-name technology-package package-name

4. exit

5. reload

DETAILED STEPS

Command or Action

Purpose

Step 1

enable

Example:

Router>enable

Enable privileged EXEC mode.

•Enter your password if prompted.

Step 2

configure terminal

Example:

Router#configure terminal

Enter global configuration mode.

Step 3

license boot module module-name technology-package package-name

Example:

Router(config)#license boot module c3900 technology-package securityk9

Enable the evaluation license.

Use the ? command with the module command to see the module name for your router, and with technology-package to see the software packages and features supported on your router.

Step 4

exit

Example:

Router(config)#exit

Exit global configuration mode.

Step 5

reload

Example:

Router#reload

Reload the router. A reload is required to activate the software package.

Screencast

The following screencast shows how to activate an evaluation license.

http://www.cisco.com/en/US/docs/routers/access/sw_activation/eval_license_demo/eval_license_2_demo.swf.

Example

The following example shows how to activate an evaluation license.
Router>enable
Router# configure terminal
Router(config)# license boot module c3900 technology-package securityk9
PLEASE  READ THE  FOLLOWING TERMS  CAREFULLY. INSTALLING THE LICENSE OR
LICENSE  KEY  PROVIDED FOR  ANY CISCO  PRODUCT  FEATURE  OR  USING SUCH
PRODUCT  FEATURE  CONSTITUTES  YOUR  FULL ACCEPTANCE  OF  THE FOLLOWING
TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO  BE BOUND
BY ALL THE TERMS SET FORTH HEREIN.
You hereby  acknowledge  and  agree that  the  product feature  license
is terminable and that the product  feature  enabled  by  such  license
may  be  shut  down or  terminated by  Cisco  after  expiration of  the
applicable  term  of  the license  (e.g., 30-day  trial  period). Cisco
reserves the  right to terminate or shut down  any such product feature
electronically  or by  any other  means available. While alerts or such
messages  may  be provided, it is  your sole  responsibility to monitor
your terminable  usage of any  product  feature enabled by  the license
and to ensure that your systems and  networks are prepared for the shut
down of the product feature. You acknowledge  and agree that Cisco will
not have any liability  whatsoever for  any damages, including, but not
limited to, direct, indirect, special, or consequential damages related
to any product  feature  being shutdown or terminated. By clicking  the
"accept" button  or typing "yes" you are  indicating  you have read and
agree to be bound by all the terms provided herein.
ACCEPT? [yes/no]: yes
% use 'write' command to make license boot config take effect on next boot
Router(config)#
*Jul  7 00:38:56.391: %IOS_LICENSE_IMAGE_APPLICATION-6-LICENSE_LEVEL: Module name = c3900 
Next reboot level = securityk9 and License = securityk9
*Jul  7 00:38:56.987: %LICENSE-6-EULA_ACCEPTED: EULA for feature securityk9 1.0 has been 
accepted. UDI=C3900-SPE150/K9:FHH12250057; StoreIndex=1:Evaluation License Storage
Router(config)# exit
Router# reload
Router# show version
Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 
ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 15-Jun-09 15:27 by pallavik
ROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)
Router uptime is 1 day, 3 hours, 53 minutes
System returned to ROM by power-on
System image file is "flash0:c3900-universalk9-mz.SSA.124-24.6.PI11k"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.
Processor board ID FHH1226P01E
3 Gigabit Ethernet interfaces
4 Serial(sync/async) interfaces
2 ISDN Basic Rate interfaces
1 ATM interface
25 terminal lines
1 Virtual Private Network (VPN) Module
DRAM configuration is 72 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
2000880K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        C3900-SPE150/K9       FHH12250057     
Technology Package License Information for Module:'c3900' 
----------------------------------------------------------------
Technology    Technology-package          Technology-package
              Current       Type          Next reboot  
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Evaluation    securityk9
uc            ucK9          Permanent     uck9
data          None          None          None
Configuration register is 0x0
Activating an SNA Switching Feature License

Note An SNASw feature license must be activated to configure SNASw.

To activate an evaluation or permanent license for the SNA Switching (SNASw) feature, perform the steps detailed in this section. The SNASw feature license is activated using the license feature snasw command.

SUMMARY STEPS

1. enable

2. configure terminal

3. license feature snasw

4. exit

5. show license feature

DETAILED STEPS

Command or Action

Purpose

Step 1

enable

Example:

Router>enable

Enable privileged EXEC mode.

•Enter your password if prompted.

Step 2

configure terminal

Example:

Router#configure terminal

Enter global configuration mode.

Step 3

license feature snasw

Example:

Router(config)#license feature snasw

Enable the SNASw feature license.

Step 4

exit

Example:

Router(config)#exit

Exit global configuration mode.

Step 5

show license feature

Example:

Router#show license feature

Use this command to verify that the feature license has been activated.

Example

The following example shows how to activate an SNASw feature license.
Router> enable
Router# configure terminal
Router(config)#license feature snasw
Router(config)# exit
Router#show license feature
Feature name             Enforcement  Evaluation  Subscription   Enabled
ipbasek9                 no           no          no             yes  
securityk9               yes          yes         no             yes  
uck9                     yes          yes         no             yes  
datak9                   yes          yes         no             no   
gatekeeper               yes          yes         no             no   
LI                       yes          no          no             no   
SSL_VPN                  yes          yes         no             no   
ios-ips-update           yes          yes         yes            no   
SNASw                    yes          yes         no             yes
Activating the IPS Feature License

See the Cisco Services for IPS on IOS document on Cisco.com for information on configuring an IPS feature license.

Activating the SSL_VPN Feature License

See the SSL VPN document on Cisco.com for information on configuring the SSLVPN feature license.

Activating the Gatekeeper Feature License

See the Configuring Cisco Unified Border Element with Gatekeeper document on Cisco.com for information on configuring the Gatekeeper feature license.

Clearing an Active Permanent Technology Package License

To clear an active permanent license from the Cisco 3900 series, 2900 series, and 1900 series routers, perform the following tasks:

1. Disable the Technology Package

2. Clear the License

Disable the Technology Package

To disable a license, perform the steps detailed in this section.

SUMMARY STEPS

1. enable

2. configure terminal

3. license boot module module name technology-package package name disable

4. exit

5. reload

6. show version

DETAILED STEPS

Command or Action

Purpose

Step 1

enable

Example:

Router>enable

Enable privileged EXEC mode

•Enter your password if prompted.

Step 2

configure terminal

Example:

Router#configure terminal

Enter global configuration mode.

Step 3

license boot module module-name technology-package package-name disable

Example:

Router(config)#license boot module c3900 technology-package uck9 disable

Disable the active license.

Step 4

exit

Example:

Router(config)#exit

Exit global configuration mode.

Step 5

reload

Example:

Router#reload

Reload the image.

A reload is required to make the software package inactive.

Step 6

show version

Example:

Router#show version

Use this command to verify that the technology package has been disabled.

Clear the License

To clear the license, perform the steps detailed in this section.

SUMMARY STEPS

1. license clear

2. configure terminal

3. no license boot module technology module name technology-package package name disable

4. exit

5. reload

6. show version

DETAILED STEPS

Command or Action

Purpose

Step 1

license clear feature-name

Example:

Router#license clear uck9

Clear the technology package license from license storage.

Step 2

configure terminal

Example:

Router#configure terminal

Enter global configuration mode.

Step 3

no license boot module module-name technology-package package-name disable

Example:

Router(config)#no license boot module c3900 technology uck9 disable

Clear the license boot module module-name technology-package package-name disable command used for disabling the active license.

Step 4

exit

Example:

Router(config)#exit

Exit global configuration mode.

Step 5

reload

Example:

Router#reload

Reload the image.

Step 6

show version

Example:

Router#show version

Use this command to verify that the license has been cleared.

Example

The following example shows how to clear an active license.
Router> enable
Router# configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#license boot module c3900 technology-package ?
  datak9      data technology
  securityk9  security technology
  uck9        unified communications technology
Router(config)#license boot module c3900 technology-package uck9 disable
% use 'write' command to make license boot config take effect on next boot
Router(config)#exit
Router# reload
Router# show version
Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 
ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 15-Jun-09 15:27 by pallavik
ROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)
upt-3945-1 uptime is 1 day, 3 hours, 53 minutes
System returned to ROM by power-on
System image file is "flash0:c3900-universalk9-mz.SSA.124-24.6.PI11k"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.
Processor board ID FHH1226P01E
3 Gigabit Ethernet interfaces
4 Serial(sync/async) interfaces
2 ISDN Basic Rate interfaces
1 ATM interface
25 terminal lines
1 Virtual Private Network (VPN) Module
DRAM configuration is 72 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
2000880K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        C3900-SPE150/K9       FHH12250057     
Technology Package License Information for Module:'c3900' 
----------------------------------------------------------------
Technology    Technology-package          Technology-package
              Current       Type          Next reboot  
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Evaluation    securityk9
uc            disable       Permanent     disable
data          None          None          None
Configuration register is 0x0
Router#
Router#license clear uck9
*Jul  7 00:34:23.691: %SYS-5-CONFIG_I: Configured from console by consoleclear uck9
Feature: uck9
    1   License Type: Permanent
        License State: Active, Not in Use
        License Addition: Exclusive
        License Count: Non-Counted
        Comment: 
        Store Index: 15
        Store Name: Primary License Storage
Are you sure you want to clear? (yes/[no]): yes
upt-3945-1#
*Jul  7 00:34:31.223: %LICENSE-6-REMOVE: Feature uck9 1.0 was removed from this device. 
UDI=C3900-SPE150/K9:FHH12250057; StoreIndex=15:Primary License Storage
Router#
Router# configure terminal
Router(config)#no license boot module c3900 technology uck9 disable
Router(config)# exit
Router# reload
Router# show version
Cisco IOS Software, C3900 Software (C3900-UNIVERSALK9-M), Version 12.4(24.6)PI11k PI11 
ENGINEERING WEEKLY BUILD, synced to V124_24_6_T9
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 15-Jun-09 15:27 by pallavik
ROM: System Bootstrap, Version 15.0(1r)M, RELEASE SOFTWARE (fc1)
upt-3945-1 uptime is 1 minute
System returned to ROM by reload at 00:41:07 UTC Tue Jul 7 2009
System image file is "flash:c3900-universalk9-mz.SSA.124-24.6.PI11k"
Last reload reason: Reload Command
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco C3945 (revision 1.0) with 2025472K/71680K bytes of memory.
Processor board ID FHH1226P01E
3 Gigabit Ethernet interfaces
4 Serial(sync/async) interfaces
2 ISDN Basic Rate interfaces
25 terminal lines
1 Virtual Private Network (VPN) Module
DRAM configuration is 72 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
2000880K bytes of ATA System CompactFlash 0 (Read/Write)
License Info:
License UDI:
-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        C3900-SPE150/K9       FHH12250057     
Technology Package License Information for Module:'c3900' 
----------------------------------------------------------------
Technology    Technology-package          Technology-package
              Current       Type          Next reboot  
-----------------------------------------------------------------
ipbase        ipbasek9      Permanent     ipbasek9
security      securityk9    Evaluation    securityk9
uc            disable       None          None
data          None          None          None
Configuration register is 0x0
Router# 
Verifying Licenses and Other Licensing Tasks

Use the show version command to display the license level on your router.

See the Cisco IOS Software Activation Tasks and Commands chapter of the Cisco IOS Software Activation Configuration Guide for information about the following topics and more:

•Software activation tasks like displaying and verifying licenses

•Software activation processes like rehosting and RMA

Simple Network Management Protocol

Software licenses can be installed and managed with network management systems using Simple Network Management Protocol (SNMP). For more information on using SNMP see the Cisco IOS Software Activation Configuration Guide at http://www.cisco.com/en/US/docs/ios/csa/configuration/guide/15_0/csa_book.html.

RMA License Transfer

To transfer a software license from a failed device to a new device, go to the Cisco licensing portal at http://www.cisco.com/go/license.

Note You will need the UDI of the defective as well as the RMA router to initiate an RMA replacement license.

Note To transfer a software license from a Cisco 3925 or Cisco 3945 ISR, use the SN and PID from the service performance engine (SPE) and not the chassis.

For additional information on RMA license transfer see the Cisco Software Activation Conceptual Overview chapter in the Cisco IOS Software Activation Configuration Guide.

Software Activation on Modules

For information on the technology package required to support modules on the Cisco 2900 series and 3900 series ISR see the Module Support on Cisco Integrated Services Routers Generation 2 document.

For information on software activation and software applications supported on a module refer to the documentation set for the module and the software application.

Additional References

The following sections provide references related to the software activation feature.

Related Documents and Links

Related Topic

Document Title

Cisco License Manager

User Guide for Cisco License Manager

Cisco License Manager Online Help

API Reference Guides for Cisco License Manager

Software Activation using Cisco IOS CLI and Cisco Call Home

Cisco IOS Software Activation Configuration Guide

Cisco IOS Software Activation

Feature Documents

Cisco Services for IPS on IOS

SSL VPN

Configuring Cisco Unified Border Element with Gatekeeper

Cisco Software Activation QA: Gatekeeper: A Cisco Unified Border Element Component

Q&A and Deployment Guide

Software Activation Q&A for Cisco 860 and 880 Integrated Services Routers

Software Activation Q&A for Cisco 3900, 2900, and 1900 Integrated Services Routers

Licensing Deployment Guide

Data Sheets

Cisco 860 Series Integrated Services Routers data sheet

Cisco 880 Series Integrated Services Routers data sheet

Cisco 890 Series Integrated Services Routers data sheet

Cisco 1941 Series Integrated Services Routers data sheet

Cisco 2900 Series Integrated Services Routers data sheet

Cisco 3900 Series Integrated Services Routers data sheet

Technical Assistance

Description

Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies.

To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds.

Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http://www.cisco.com/techsupport

CCDE, CCENT, CCSI, Cisco Eos, Cisco HealthPresence, Cisco IronPort, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Pulse, Cisco StackPower, Cisco StadiumVision, Cisco TelePresence, Cisco Unified Computing System, Cisco WebEx, DCE, Flip Channels, Flip for Good, Flip Mino, Flipshare (Design), Flip Ultra, Flip Video, Flip Video (Design), Instant Broadband, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn, Cisco Capital, Cisco Capital (Design), Cisco:Financed (Stylized), Cisco Store, and Flip Gift Card are service marks; and Access Registrar, Aironet, AllTouch, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Continuum, EtherFast, EtherSwitch, Event Center, Explorer, Fast Step, Follow Me Browsing, FormShare, GainMaker, GigaDrive, HomeLink, iLYNX, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, Laser Link, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerKEY, PowerPanels, PowerTV, PowerTV (Design), PowerVu, Prisma, ProConnect, ROSA, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0908R)

© 2010 Cisco Systems, Inc. All rights reserved.

Hierarchical Navigation

Support

Software Activation on Cisco Integrated Services Routers and Cisco Integrated Service Routers G2

Downloads

Table Of Contents

Software Activation on Cisco Integrated Services Routers and Cisco Integrated Service Routers Generation 2

Contents

Before You Begin

Cisco IOS Software Releases Supported

Information About Software Activation on Cisco ISRs and ISRs G2

Software Packages and Features

Technology Package Licenses

Feature Licenses

Resource Allocation with securityk9 Technology Package License

Options for Getting and Managing Software Licenses

Cisco License Manager

Cisco License Call Home

Before You Begin

Platform Support

Installing a License Using License Call Home

Cisco Product License Registration Portal

Getting a Permanent License Using Cisco License Portal

Cisco IOS CLI

Installing a Permanent License Using Cisco IOS CLI

SUMMARY STEPS

DETAILED STEPS

Screencast

Example

Activating an Evaluation License

SUMMARY STEPS

DETAILED STEPS

Screencast

Example

Activating an SNA Switching Feature License

SUMMARY STEPS

DETAILED STEPS

Example

Activating the IPS Feature License

Activating the SSL_VPN Feature License

Activating the Gatekeeper Feature License

Clearing an Active Permanent Technology Package License

SUMMARY STEPS

DETAILED STEPS

SUMMARY STEPS

DETAILED STEPS

Example

Verifying Licenses and Other Licensing Tasks

Simple Network Management Protocol

RMA License Transfer

Software Activation on Modules

Additional References

Related Documents and Links

Technical Assistance

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0908R)

© 2010 Cisco Systems, Inc. All rights reserved.