ASR 1001 Licence Activation
Hello, Try as I might I cant find a document that says;
"How to activate encryption on an ASR 1001" or "activating ip advanced features" on the ASR 1001.
Can anyone help please. My Kit list.
Cisco ASR1001 System,Crypto, 4 built-in GE, Dual P/S
Cisco ASR1001 4GB DRAM
Cisco ASR 1000 Advanced IP Services License
Cisco ASR 1001 IOS XE - ENCRYPTION UNIVERSAL
IPSEC License for ASR1000 Series
Upgrade from 2.5 Gbps to 5Gbps License for ASR 1001
Whats the process to activate the 2.5gbps to 5gbps feature or encryption?
Thanks
Chris
Chris,
The ASR1000 feature licensing is explained on the document http://www.cisco.com/en/US/prod/collateral/routers/ps9343/product_bulletin_c25-448292.html
You can also find this information on the product datasheet at http://www.cisco.com/en/US/prod/collateral/routers/ps9343/data_sheet_c78-447652.html
Regarding IPSec and Bandwidth licenses on ASR1K, see below and excerpt from datasheet:
Cisco ASR1001 Feature Licenses: Enforced with PAK
FLSASR1001-5G
Upgrade from 2.5 Gbps to 5Gbps License for ASR 1001
FLSASR1001-5G=
Upgrade from 2.5 Gbps to 5Gbps Paper PAK for ASR 1001
L-FLSASR1001-5G=
Upgrade from 2.5 Gbps to 5Gbps E-Delivery PAK for ASR 1001
Security
FLSASR1-IPSEC
IPSEC License for ASR1000 Series
FL-ASR1-IPSEC=
IPSEC Paper PAK for ASR1000 Series
L-FL-ASR1-IPSEC=
IPSEC E-Delivery PAK for ASR1000 Series
Cheers, Gustavo
Similar Messages
-
ASR 1001 L2TP sessions // License issue?
Hello,
This is my first post, in the fisrt place, sorry for my english, is not my native language.
I have purchased a refurbished ASR 1001 without any license for using as LNS:
Cisco IOS XE Software, Version 03.12.00.S - Standard Support Release
Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(2)S, RELEASE SOFTWARE (fc2)
asr1001-universalk9.03.12.00.S.154-2.S-std.bin
The scenario is this:
LAC (from network provider) send L2TP packet sessions-> LNS (ASR 1001, assign public IP to user and close the L2TP session).
The configuration of ASR is the typical for xDSL connections.
1) The LAC send requests to LNS Loopback interface:
interface Loopbacktest1
ip address 5.6.7.8 255.255.255.255
snmp ifindex persist
2) LNS assign the loopback interface to vpdn group, that points to virtual-template:
vpdn-group VpdnG1
accept-dialin
protocol l2tp
virtual-template 1
terminate-from hostname Provider01
dsl-line-info-forwarding
source-ip 5.6.7.8
lcp renegotiation always
l2tp tunnel password 7 XXXXXXXX
interface Virtual-Template1
description Int-Vi1 VpdnG1
mtu 1501
ip unnumbered GigabitEthernetX/X/X
ip mtu 1460
ip tcp adjust-mss 1400
no peer default ip address
ppp max-terminate 255
ppp max-configure 255
ppp max-failure 255
ppp max-bad-auth 10
ppp authentication pap chap ppp_authent2
ppp multilink
Since here, all is OK, but the problem is that the ASR cannot reach connected users and evidently the user doesn't have internet connectivity because he cannot reach the gateway IP (ASR IP).
Interface User Mode Idle Peer Address
Vi1.1 test1 PPPoVPDN - 1.2.3.4
L2TP Tunnel and Session Information Total tunnels 1 sessions 1
LocTunID RemTunID Remote Name State Remote Address Sessn L2TP Class/
Count VPDN Group
1589 3324 Provider01 est 5.6.7.8 1 VpdnG1
ASR1001#ping 1.2.3.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.2.3.4, timeout is 2 seconds:
Success rate is 0 percent (0/5)
ASR1001 in not forwardinf the traffic to end users
Exactly the same configuration works fine in 7201 cisco router.
After read some information in internet and cisco web and test several IOS images and configurations I have activated 2 of 3 (marked in bold down) possible licenses that are available to test in the router (these are available during 60 days).
SLASR1-IPB
Cisco ASR 1000 IP BASE License
SLASR1-AIS
Cisco ASR 1000 Advanced IP Services License
SLASR1-AES
Cisco ASR 1000 Advanced Enterprise Services License
***Result-> After apply Advanced IP Service or Advanced Enterprise license the ASR works perfectly, forwarding the traffic to the end users. The router can reach gateway and have internet connection.
I would like to try IP BASE License but there is no possibility to activate the test period in the router, I don't know if you knows any way to test it. This is the details that router shows about this 3 license types:
Index 1 Feature: adventerprise
Period left: 8 weeks 1 day
Period Used: 2 days 12 hours
License Type: EvalRightToUse
License State: Active, In Use
License Count: Non-Counted
License Priority: Low
Index 2 Feature: advipservices
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Active, Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 3 Feature: ipbase
-->There is no more info about IP base license<---
If I use the command "license boot level" I can apply the IP base license, but after reload the router, nothing happens.
ASR1001(config)#license boot level ?
adventerprise Advanced Enterprise License Level
advipservices Advanced IP Services License Level
ipbase IP Base License Level
Then my answers are:
1) Is 100% necessary to have a license in ASR1001 to use the router as LNS as showed? Apparently after my tests I will answer "yes", but I'm not sure if my configuration is the only one that I can configure. Maybe exist another way to config the required scenario and avoid the purchase license.
2) Do you know if IP Base license will active the forwarding packet function in the ASR? I think yes, but before buy this license I need to be sure. As you know Ip Base is the most cheap license.
Thanks in advantage!
RegardsHello,
Documentation states that licensing on the ASR 1000 are now honor-based since 3.7s. I didn't test it though.
Basically, your license marked now as "EvalRTU" will be moved to an "RTU" license, indicating you would need to buy a license to keep your honor intact, but no disruption in features or connectivity will happen.
Since your test was more than 60 days ago, can you confirm this behavior with 3.12 ?
Thanks,
Kind regards,
Sources:
- All Cisco ASR 1000 feature and performance upgrade licenses are honor-based; that is, they are not enforced through a PAK (Product Activation Key). Note: Prior to Cisco IOS XE Software Release 3.7S, performance upgrade licenses that are required to upgrade the Cisco ASR 1001 from 2.5 to 5 Gbps or the Cisco ASR 1002-X from 5 to 10 to 20 to 36 Gbps are enforced through a PAK. Similarly, prior to Cisco IOS XE Software Release 3.6S, technology package licenses are enforced through a PAK. [1]
- When the 60-Day Evaluation Period expires, the license automatically changes to an RTU license. As with all other RTU licenses, there is no functionality disruption or accessibility concerns following this transition. [2]
[1] http://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/guide-c07-731639.html
[2] http://www.cisco.com/c/en/us/td/docs/routers/asr1000/install/guide/1001-x/asr1hig/asr1lic.html -
Hi I am changing IOS of Cisco ASR 1001 from asr1001-universalk9.03.07.02.S.152-4.S2.bin
to asr1000rp1-adventerprisek9.03.04.02.S.151-3.S2.bin but everty time it boot up with old IOS universalk9.
Is it becaused of Licence issue.
Router#sh bootvar
BOOT variable = bootflash:asr1000rp1-adventerprisek9.03.04.02.S.151-3.S2.bin,12;bootflash:asr1001-universalk9.03.07.02.S.152-4.S2.bin,12;
CONFIG_FILE variable does not exist
BOOTLDR variable does not exist
Configuration register is 0x2102
License Level: advipservices
License Type: Permanent
Next reload license Level: advipservices
cisco ASR1001 (1RU) processor with 1155941K/6147K bytes of memory.
Processor board ID SSI1607042B
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7741439K bytes of eUSB flash at bootflash:.
Configuration register is 0x2102You downloaded the wrong file. The file you wanted to run has "rp1" but the original file doesn't. You downloaded a file for a different model. Your router is an ASR 1001 with fixed RP but you've downloaded a file for a different sub-model of ASR, like the 1002 or 1004.
Go here instead: http://software.cisco.com/download/release.html?mdfid=282993672&softwareid=282046477&release=3.10.3S&relind=AVAILABLE&rellifecycle=ED&reltype=latest -
Hi Cisco Professional,
We want to implementing PPPoE over port-channel (using subinterfaces L2) in Cisco ASR 1001 routers, my question is if this router support this feature?, in the other hand i've see documents about this theme, pls check these links:
http://www.cisco.com/en/US/docs/ios/ios_xe/cether/configuration/guide/ce_lnkbndl_xe.html
http://www.cisco.com/en/US/docs/ios-xml/ios/cether/configuration/xe-3s/ce-ieee-link-bndl-xe.html
My IOS version Cisco ASR 1001 is:
System image file is "bootflash:/asr1001-universalk9.03.04.00.S.151-3.S.bin"
We want this configuration on the router,
no interface GigabitEthernet0/0/0.25
interface port-channel 10.25
description TURBONETT PUBLICA UT
encapsulation dot1Q 25
ip address 10.17.44.254 255.255.252.0
no interface GigabitEthernet0/0/0.52
interface port-channel 10.52
description TURBONETT-UT
encapsulation dot1Q 52
pppoe enable group global
pppoe max-sessions 4000
no interface GigabitEthernet0/0/0.61
interface port-channel 10.61
description Turbonett-Sector-A
encapsulation dot1Q 61
pppoe enable group global
pppoe max-sessions 4000
Kind Regards,
Renzo TovarHi Renzo,
PPPoEoVLAN on GEC (LACP mode) is supported as of XE 3.7. I see that you are using XE 3.4 here so I would suggest to move to XE 3.7 and try this feature.
This is a sample configuration for the feature:
interface GigabitEthernet2/1/0
no ip address
negotiation auto
channel-group 2 mode active
interface GigabitEthernet3/1/0
no ip address
negotiation auto
channel-group 2 mode active
lacp port-priority 65000
interface Port-channel2
no ip address
load-interval 30
no negotiation auto
lacp max-bundle 1
lacp fast-switchover
interface Port-channel2.200
encapsulation dot1Q 200
pppoe enable group global
interface Port-channel2.500
encapsulation dot1Q 500 second-dot1q 1500
pppoe enable group global
As you can see, both PPPoEoVLAN and PPPoEoQinQ are supported.
Hope this helps.
Best regards. -
Traffic policing question on Cisco ASR 1001
Hi Experts,
I have a request to setup aggregated traffic policing on a Cisco ASR 1001 router for multiple networks within a router.
Lets say I have a router with several subinterfaces:
interface GigabitEthernet0/2
description WAN
ip address x.x.x.x x.x.x.x
interface GigabitEthernet0/1.70
description Lan_1
encapsulation dot1Q 70
ip address 192.168.55.1 255.255.255.0
interface GigabitEthernet0/1.80
description LAN_2
encapsulation dot1Q 80
ip address 192.168.56.1 255.255.255.0
interface GigabitEthernet0/1.90
description Servers
encapsulation dot1Q 90
ip address 172.16.10.1 255.255.255.0
I have a WAN link 100Mbit/s and I need to police traffic, so that I have 30Mbit/s for servers (GigabitEthernet0/1.90) and the rest 70Mbit I want to share between Interface Lan_1 and LAN_2. The Idea is that I need 70Mbit/s equally shared between two interfaces, so that I have fair policing on both iunterfaces. What is the best way to achieve this?
Many ThanksHello
The below configuration is a possible option, Its provides policing inbound from the clients interfaces and LLQ priority queung on the wan interface for the servers and shaping values from LAN1 & 2 traffic is set to 35MB.each.
Notice nothing is defined for the default class, however i am on the understanding this is given by default 1% of Hqos implementations.
Maybe others on here could review to verify any problems with this post and share their thoughts?
ip access-list extended SRVS_acl
permit ip 172.16.10.0 0.0.0.255 any
ip access-list extended LAN1_acl
permit ip 192.168.55.0 0.0.0.255 any
ip access-list extended LAN2_acl
permit ip 192.168.56.0 0.0.0.255 any
class-map match-all SRVS_CM
match access-group name SRVS_acl
class-map match-all LAN_1_CM
match access-group name LAN1_acl
class-map match-all LAN_2_CM
match access-group name LAN2_acl
policy-map SRVS_PM
class SRVS_CM
police 30720000 conform-action transmit exceed-action drop
policy-map LAN_2_PM
class LAN_2_CM
police 35840000 conform-action transmit
policy-map LAN_1_PM
class LAN_1_CM
police 35840000 conform-action transmit
interface GigabitEthernet0/1.70
service-policy input LAN_1_PM
interface GigabitEthernet0/1.90
service-policy input SRVS_PM
interface GigabitEthernet0/1.80
service-policy input LAN_2_PM
policy-map WAN_CHILD
class SRVS_CM
priority 30720
class LAN_1_CM
shape average 35840000
class LAN_2_CM
shape average 35840000
class class-default
fair-queue
policy-map WAN_PARENT
class class-default
shape average 102400000
service-policy WAN_CHILD
int GigabitEthernet0/2
bandwidth 102400
service-policy output WAN_PARENT
res
Paul -
I am working on putting a loaner ASR 1001 into my infrastructure to replace my 7206 VXR. Currently my uplink to my ISP is fiber and runs into an GBIC SX MM transceiver. No issue with connectivity. When i change the fiber patch over to LC I connect it to the ASR 1001 GBIC and I get no link. Tried changed negotiation auto to no negotiation auto not affect. I then took the fiber and connected to a gbic I have in a 3560 switch link comes right up. At this point I am a bit stumped. Tried moving the configuration to a different interface on the ASR no luck. Totally confused.
What model transceiver are you using on the ASR? I didn't tink they took GBICs - ony SFPs. I think the one you would need is an SFP (the GLC-SX-MMD or GLC-SX-MM without DOM). That's what's compatible on an ASR 1001 for 1 Gbps MM fiber per the compatibility matrix.
Is the ASR recognizing the transceiver? (show int ___) -
ASR 1001 Router enquiry on fiber handoff
Cisco ASR 1001 Router would support fiber hand-off of the link. Below is the Specifications of the Router - we received from vendor:
Description
Quantity
Cisco ASR1001 System,Crypto, 4 built-in GE, Dual P/S
1
Cisco 5-Port Gigabit Ethernet Shared Port Adapter
1
1000BASE-LX/LH SFP transceiver module, MMF/SMF, 1310nm, DOM
2
Cisco ASR1001 AC Power Supply
2
Power Cord India, Right Angle
2
Cisco ASR 1001 IOS XE UNIVERSAL - NO ENCRYPTION
1
Cisco ASR 1000 IP BASE License
1
SPA for ASR1000; No Physical Part; For Tracking Only
1
Cisco ASR1001 4GB DRAM
1
PRTNR SS 8X5XNBD Cisco ASR1001 System,Crypto
1
PRTNR SS 8X5XNBD Cisco ASR 1000 IP BASE License
1
PRTNR SS 8X5XNBD 5-Pt Gigabit Enet Shared Pt Adptr
1
Datacenter feature: There will be fiber connections already installed at the DMZ site from the meet me telco room to the partner racks. Therefore, your service provider must understand that they will do a circuit handoff to fiber and order the routers, interface cards, connectors, etc. to support fiber circuit extension.You can use standard Ethernet copper or Fiber, providing that you have the correct SFP/GBICs.
As long as you have the correct SFP's you need for the ASR - All should be good.
http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/ASR1000/ASRintro.html#wp1235447
http://www.cisco.com/en/US/prod/collateral/modules/ps5455/ps6577/product_data_sheet0900aecd8033f885.html
hth -
10GE port adapter in ASR 1001 chassis
Dear All,
Will SPA-1X10GE-L-V2 work in ASR 1001 chassis with the integrated ESP and SIP?
Thx,
SzilardYou are most welcome, szilard.matayas1. Thanks for the rating as well.
Are you already working with a Cisco partner/rep for this requirement as well? Let me know if you need assistance on that department as I can check on SPA-1X10GE-L-V2 availability as well. Do send me an e-mail ([email protected]). Kind regards. -
I saw in the release notes that 3.10 for the ASR 1001 supports port-channel for the internal otv interface. I upgraded to that release and it lets me use a port-channel interface, but it won't let me use the serivce instance command on the L2 interface. I can add the channel-group command but not any otv commands. Has anyone seen this yet?
Thanks,
TomHi tom,
Not sure if you have resolved this issue, but, I hope you are configuring the port-channel with all the service-instance configurations. If yes, and you are getting into issues, please do post the output of the issue, we can have a look at the same. -
Thanks in advance for your help!
what license do I need to create a IPSEC tunnel?
I have an ASR 1001, running ?
System returned to ROM by reload at 10:14:31 UTC Tue Aug 23 2011
System image file is "bootflash:asr1001-universalk9_npe.03.03.00.S.151-2.S.bin"
Last reload reason: PowerOn
License Info:
License UDI:
Device# PID SN UDI
*0 ASR1001 JAE153402YI ASR1001:JAE153402YI
License Package Information for Module:'asr1001'
Module name Image level Pri Config Valid license
asr1001 adventerprise 1 NO adventerprise
advipservices 2 NO advipservices
ipbase 3 NO ipbase
Module name Current Level Reboot Level
asr1001 ipbase ipbase
cisco ASR1001 (1RU) processor with 1202026K/6147K bytes of memory.
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7782399K bytes of eUSB flash at bootflash:.Hi,
You need to have advipservicesk9 bundle in order to configure vpn tunnels.
Please rate the helpfull posts.
Regards,
Naidu. -
Dear,
Please suggest me how to configure on 2921 router data licence activation through TFTP server?Once you have your license file on the TFTP server, you should be able to run the following command:
license install tftp://x.x.x.x/license.lic
Where x.x.x.x is your TFTP server and license.lic is your actual license file name. Once you have a successful installation, reload the router and you should be good to go. -
What Software image / License required for ASR 1001
Hi,
I want to purchase Cisco ASR 1001 router, I need to run ssh , Crypto , IPSec VPN ( 3DES, ESP ) and Gre Tunnels on it.
i am confused with different IOS / Licenses of ASR 1001, can any one please suggest me with the part numbers that i need to put in for ordering ?
From my Vendor quote i can see that below is the part of the packege ( part number = ASR1001 )
SASR1001UK9
Cisco ASR1001 IOS XE - ENCRYPTION UNIVERSAL
but there is another Technology based license required and this is not included in the above part number packet so i need to know which one i need to buy from below?
ASR1001/ASR 1002-X Technology Package Licenses
SLASR1-IPB
Cisco ASR 1000 IP BASE License
SLASR1-AIS
Cisco ASR 1000 Advanced IP Services License
SLASR1-AES
Cisco ASR 1000 Advanced Enterprise Services License
SLASR1-IPB=
Cisco ASR 1000 IP BASE Paper PAK
L-SLASR1-IPB
Cisco ASR 1000 IP BASE E-Delivery PAKThere was a regression introduced in 3.5.1 where the Main-class attribute of the Coherence.jar was changed to a different main class leading to this effect.
The workaround is to specify the main class as part of the command line.
Assuming your current directory is the coherence home directory:
Start a cache server:
java -cp lib/coherence.jar com.tangosol.net.DefaultCacheServer Start the command line:
java -cp lib/coherence.jar com.tangosol.coherence.component.application.Console And the above is basically what the coherence.sh/.cmd and cache-server.sh/.cmd scripts do.
Edited by: Christer Fahlgren on Aug 31, 2009 10:06 AM -
Hi Everybody,
I´m making a proposal for a costumer where he needs connect one ASR 1001 with other ASR1001 via UTP cable. The speed will be 100 Mbps at this moment. Can I use the SFP-GE-T tranceiver for a 10/100/1000 Mbps connection ?
Thank you.Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
I believe the copper SFP supports 10/100/1000. -
Hi everyone!
Some times ago i noted, that our asr 1001 has open tcp port 21, however i couldn't find service in one, which links with ftp. When i execute telnet ip_asr 21, i receive rst,ack from asr. It's ok, but i want to disable this port. Did anybody meet with it? And how i can look open and listen ports on ios xe?
Thanks in advance.I would add it via ipfw in a terminal window. Then it will be there
when you restart. -
I have a valid Abobe CS6 licence for 6 users. I have installed and activated this on two machines with no problems. On the third machine, when I tried to activate / register this product, I get this error message :- "We are unable to validate this serail number for CS6 Master Collection. Please contact Customer Support". Please advise a way forward.
Hi,
please follow the below mentioned steps to fix the issue
If you are using Windows Machine please try these steps
1. Open run and type drivers and enter.
2. Look for etc folder.
3. Inside etc folder you will get hosts file please open it using notepad. if you find any entries follow this http://support.microsoft.com/kb/972034 to fix the hosts files.
Restart the Computer to complete the fix.
Try installing the Software. It should work fine.
For Mac
1.Click Go
2. Go to Folder-type /etc
3. Open hosts file and if entries are there then delete all entries which says Adobe in it then save it.
4. Try installing the software again and it should work.
If you are not able to save the Hosts file after making changes please make a copy of hosts file on the desktop then make the required changes and replace with the one in etc folder. It will ask to authenticate and click replace to complete.
Thanks.
Maybe you are looking for
-
HP Officejet pro 8610 and laptop wont communicat​e
Trying to setup new printer to print wirelessly. Printer and laptop are both connected to the same wireless device but the laptop cant find the printer. Disabled firewall and tried all the things listed under troubleshooting. Any help would be app
-
Aobe ID is not excepted by PC, only by ebook reader? Why?
Hi, I bought a tolino ebook reader, bought 3 books from Weltbild, downloaded the files as acsm. Established an Adobe ID, had already another ID with Weltbild. After several attemps a could copy the downloaded acsm files from my PC to the ebook reader
-
J2EE Database is not available via test
Hello my friends, I've got a problem with my SAP NW/DB2 installation. When i want to start sap, i get the following output: si4host:si4adm 13> startsap si4host Checking DB6 db Database ABAP Database is not available via R3trans Checking DB6 db Databa
-
Work item text does not come out
Hi Dear experts: It's very kind of you to have a glance at this page. I encounter an issue that confused me. In the title of User Decision title, I hardcode a description there and at the end of it I put a variable &1, in parameter I put a variable u
-
1) how to we delete the test workflows I created.I saved as local object 2) How to I find Bus objects for associating with transaction.Say I want to trigger a WF for SU01(creating user ) How do i find in SW01? If i dont have how to create it? 3) i tr