Cisco® 890, 880, and 860 Series Integrated Services Routers are fixed-configuration routers that provide collaborative business solutions for secure data communication to small branch offices, small businesses, and enterprise teleworkers. They are the newest members of the Cisco Integrated Service Routers portfolio. With the introduction of these new platforms, numerous software licensing options are also available for customers to customize their software requirements. This document provides a high-level overview of the licensing options available on the Cisco 890, 880, and 860 Series platforms.
Cisco 800 Series Licensing Options
Cisco IOS Software Licenses
The Cisco 890, 880, and 860 Series Routers support universal images with various feature sets such as the Cisco IOS® Software Advanced Security and Advanced IP Services feature sets. A universal image includes all features supported by a given platform. The Cisco Software Activation feature on these platforms authorizes and enables the use of a Cisco software feature or feature sets. A special file contained in the device, called a license file, is examined by Cisco software when the device is powered on. Based on the license file installed, Cisco software enables the appropriate feature set(s). You can change or upgrade license files to enable a different feature set. Please refer to Table 1 for the availability of software feature sets based on platform model.
All Cisco 890, 880, and 860 platforms support universal images and Cisco Software Activation. It is important that you identify your feature requirements and the appropriate license level needed to support the features. For features supported by each feature set, please refer to the Cisco 890, 880, and 860 Series data sheets. For more information about Cisco Software Activation specific to the Cisco 800 Series, please refer to the Software Activation Q&A for these platforms at: http://www.cisco.com/en/US/prod/collateral/routers/ps380/qa_c67_459785.html.
Cisco IOS Content Filtering License
The Cisco 890 and 880 Series Integrated Service Routers also support the new Cisco IOS Software Content Filtering feature. Cisco IOS Content Filtering is a web security solution that can help your organization protect against known and new Internet threats, improve employee productivity, and enforce business policies for regulatory compliance.
Deployed on Cisco integrated services routers, Cisco IOS Content Filtering offers category-based productivity and security ratings. Content-aware security ratings protect against malware, malicious code, phishing attacks, and spyware. URL and keyword blocking help to ensure that employees are productive when accessing the Internet. This subscription-based hosted solution uses Trend Micro's global TrendLabs threat database to best advantage, and is closely integrated with Cisco IOS Software. You must purchase the yearly subscription before you use this feature.
Cisco IOS SSL VPN is the first router-based solution offering Secure Sockets Layer (SSL) VPN remote-access connectivity integrated with industry-leading security and routing features on a converged data, voice, and wireless platform. SSL VPN offers mobile workers a flexible, secure VPN alternative whereby the security is transparent to you and easy for IT to administer.
With Cisco IOS SSL VPN, you gain access securely from home or any Internet-enabled location such as wireless hotspots. Cisco IOS SSL VPN also can enable your company to extend corporate network access to offshore partners and consultants while keeping corporate data protected.
Cisco IOS Intrusion Prevention System (IPS) is an inline, deep-packet inspection-based solution that enables Cisco IOS Software to effectively mitigate a wide range of network attacks. While it is common practice to defend against attacks by inspecting traffic at data centers and corporate headquarters, distributing the network level defense to stop malicious traffic close to its entry point at branch or telecommuter offices is also critical.
As an integral part of the Cisco Self-Defending Network, Cisco Services for IPS protects and enhances the effectiveness of the Cisco Intrusion Prevention System. It provides frequent threat protection updates and Cisco SMARTnet support in one comprehensive service offering. Supported by the Cisco Global Security Intelligence organization, Cisco Services for IPS delivers continuously updated, comprehensive, and accurate detection technology to identify and block fast-moving and emerging threats before they damage your computing assets.
Cisco IOS IPS is supported on the Cisco 890 and 880 Series Integrated Service Routers with the Advanced IP Services Feature license. However, Cisco Services for IPS is available as a separate Technical Service product. For more information, please visit the Cisco Services for IPS website.
Cisco 800 Series Licensing Availability
Table 1 shows the availability of licensing options for the Cisco 860 and 880 Series Integrated Services Routers.
Table 1. Cisco 890, 880, and 860 Series Software Licensing Options
Cisco 860 (c860-universalk9-mz)
Cisco 880 Data
Cisco 880G (3G part numbers)
Cisco 880 SRST
Cisco IOS Software
Advanced Security feature set
Advanced IP Services feature set upgrade part number
Cisco IOS Content Filtering
Software part number
Cisco IOS SSL VPN
• SL-880-AIS: Upgrade from Advanced Security to Advanced IP Services for Cisco 880 Data part numbers. We mail you the Product Authorization Key (PAK).
• SL-CNFIL-8xx-TRI: Thirty-day free trial license for Cisco 800 Series
• FL-WEBVPN-10-K9: Feature License SSL VPN for up to 10 users
• FL-WEBVPN-25-K9: Feature License SSL VPN for up to 25 users
Obtaining Software Licenses
The 60-day usage-based Cisco 880 Series Advanced IP Services feature set emergency license is included in the Cisco IOS Software release when you sign an End User License Agreement (EULA) that allows you to use the feature set in case of an emergency (where no Internet access is available to retrieve a demo or permanent license for the Advanced IP Services license). The usage period expires, so you should take advantage of this opportunity only for emergency situations. For demo purposes, please refer to the "Demo License" section that follows. For instructions about activating this emergency license, please visit: http://www.cisco.com/en/US/docs/routers/access/3800/software/activation/swact.html.
Note: The Cisco IOS Software command-line interface (CLI) refers to this license as the "evaluation license".
You can obtain the 60-day Cisco 880 Series Advanced IP Services Feature Set demo license and the 30-day Cisco IOS Content Filtering demo license through the Cisco demo license website at http://www.cisco.com/go/license; select: "If you do not have a Product Authorization Key (PAK), please click here for available licenses." The trial license will be activated the day you enter the router serial number and platform information.
You can purchase a permanent license through Cisco or our partners with the desired software license product number -- SL-880-AIS. We issue a PAK for the purchase of the permanent license (or paper license for the SSL VPN feature). You must register the PAK at http://www.cisco.com/go/license to active the licensed features.
Note: The permanent license is independent of the software release. If you upgrade to a new Cisco IOS Software release and have already installed the Advanced IP Services permanent license, there is no need to install the license again for the new Cisco IOS Software release. It is a one-time license.
License Installation and Activation
Cisco IOS Software
Cisco issues a license file with installation instructions through email or regular email after you register the PAK for a new Cisco IOS Software feature set or request a demo license. You must install this license file on your router platform for new features to be activated (the license file is generated based on the Unique Device Identifier (UDI: Serial number + Product ID of the router) and the PAK provided. You can install the license file using the Cisco IOS CLI or Cisco Licensing Manager.
The Cisco IOS SSL VPN licenses are cost-effective paper licenses. No additional installation of license files are needed. SSL VPN is supported on the Cisco 890 and 880 Series Integrated Service Routers with the default feature sets.
• Cisco 890 Series Integrated Services Routers data sheet: