I have bought a Cisco 887VA and want to test SSL_VPN.
How can I activate?
C887#sh lic feature
Feature name Enforcement Evaluation Subscription Enabled RightToUse
advipservices yes yes no no yes
advsecurity no no no yes no
ios-ips-update yes yes yes no yes
WAAS_Express yes yes no no yes
SSL_VPN yes yes no no yes
Get following during configuration:
C887(config)#webvpn gateway ssl_vpn
Warning: could not reserve counts: Request failed due to no license
C887(config-webvpn-gateway)#
Regards, Hannes
Found following Software Features:
Software License for Cisco 880 Data
SL-880-ADSEC (default)
Cisco 880 Advanced Security Image Feature License
SL-880-AIS (upgrade option)
Cisco 880 Advanced IP Services Image Feature License
SL-880-ADVSEC-NPE
Cisco 880 Advanced Security NPE License PAK (Paper)
SL-880-AIS-NPE (upgrade option)
Cisco 880 Advanced IP Services NPE License PAK (Paper)
Software License for Cisco 880 Data (Bulk)
L-SL-800-SEC-K9
Advanced IP e-Delivery PAK for Cisco 800 Series
Security Services
SL-CNFIL-88x-1Y
One year subscription to Content Filtering for Cisco 881/888-URL/Phishing
SL-CNFIL-8xx-TRI
30 day free trial license for 88x series
SSL
FL-WEBVPN-10-K9
Feature License SSL VPN for Up to 10 Users (incremental), for 12.4T based IOS releases only
FL-SSLVPN10-K9
Feature License SSL VPN for Up to 10 Users (incremental), for 15.x based IOS releases only
According to the output of your show license feature command, the SSL_VPN option is not enabled in your license.
However, when you attempt to use the SSL option, you get the message:
Warning: could not reserve counts: Request failed due to no license
This message appears when your device is attempting to achieve what is known as Specific License Reservation. This is an automatic attempt of the device to connect to a Cisco Smart Software Manager (SSM) and automatically request to reserve and activate the feature. Now in your case, I assume you don’t have Cisco SSM, so the request fails. SSM is typically used within a large enterprise network. More about Cisco SSM can be found here:
Now in order for you to activate the license, you must follow the instructions as stated in this lesson. It may be that the initial IOS you purchased requires an additional PAK to activate it. Take a look and let us know how you get along.
The issue with licensing is a big one, and it can take some time to understand and implement. If you would like to see a lesson devoted to smart licensing, I suggest you go to the following Member Ideas page where you can make suggestions and vote on topics that Rene can create in the future. You may find that others have suggested something similar, and you can add your voice to theirs.
In the meantime, I have created a short NetworkLessons note on the topic of IOS licensing that describes the various licensing schemes including Cisco’s smart licensing mechanisms and policies. If you have any more specific questions about this process, please let us know, and we’ll be happy to respond!
Does anyone know why the same licence appears in multiple Storeindex entries in the sh license all output but just once (and all periods added together) in the sh license output?
The sh license all command provides a detailed output of all the licenses, including those licenses that are in use, not in use, and expired. It shows each instance of the license separately, even if it’s the same license. This is why you see the same license appearing in multiple Storeindex entries.
On the other hand, the sh license command provides a summary of the licenses. It combines all instances of the same license into one entry and adds up their periods. That’s why you see the same license just once and all periods added together in the ‘sh license’ output.
So when selecting a license to use (one which is in multiple Storeindex entries), will it last for the total amount of time which is the sum of all the Storeindex entries?
Eg: Storeindex 1 = 200 days, Storeindex 2 = 200 days, Storeindex 3 = 200 days… Will the license last for 600 days or will it expire and need attention after every 200 day period expires?
Hmm, I’m having a rethink on this one. Can you share with us an example of your output from the show license and the show license all commands?
Initially, I had the impression that it would be just 200 days in your case, however, if these are multiple different licenses that have been added for the same feature, it may be that they are sequential… Send us the output and we’ll get back to you.
Sure, see below - the sh license appears to capture the sum of all 3 StoreIndex entries.
I’m just wondering, when the active 1 of the 3 StoreIndex licenses expires, does it automatically roll over to one of the 2 remaining.?
sh license
Index 2 Feature: securityk9
Period left: 604 weeks 3 days
Period used: 20 weeks 3 days
License type: Right to use
License state: Active, in use
License Count: Non-Counted
License Priority: Low
sh license all
StoreIndex: 0 Feature: securityk9 Version:1.0
License type: Evaluation
License state: inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: Low
StoreIndex: 1 Feature: securityk9 Version:1.0
License type: Evaluation
License state: inactive
Evaluation total period: 208 weeks 2 days
Evaluation period left: 208 weeks 2 days
License Count: Non-Counted
License Priority: Low
StoreIndex: 2 Feature: securityk9 Version:1.0
License type: Evaluation
License state: Active, in use
Evaluation total period: 208 weeks 2 days
Evaluation period left: 187 weeks 6 days
Expiry date: Apr 13 2027 22:31:52
License Count: Non-Counted
License Priority: Low
Thanks for sharing that. In this instance it looks like the securityk9 feature has been installed, and three licenses have been applied, each for a duration of just over 208 weeks. The result is that these licenses will be applied consecutively thus you will have a license duration of (208 weeks 2 days) X 3 which is almost 12 years .
Notice that in the show license output, it gives you the total period left of 604 weeks, which is the cumulative remainder of all three licenses.
Indeed, when the currently active license expires, it automatically rolls over to the next one. No need to do anything to get that to happen.
.