(Quase 10 anos atrasado)
Já há alguns anos (com o lançamento dos ISRG2) a Cisco passou a usar um novo modelo de licenciamento para ativar funcionalidades nos roteadores.
O IOS conta com todas as funcionalidades e para usá-las basta instalar e ativar as licenças necessárias, sem a necessidade de trocar o software. A maioria das licenças não precisa nem reiniciar o equipamento.
Instalando licença nos ISRg2 e ISR 4K
Neste exemplo instalei a licença HSEC (requer a licença Tecnology Package SecurityK9), mas o procedimento é o mesmo para as demais Features Licenses.
O primeiro passo depois de comprar a licença é baixá-la do site da Cisco (www.cisco.com/go/license). Você vai precisar informar o Prodcut ID e o Serial Number.
Importante: quando for gerar a licença, informe o serial number verificado através do comando show license udi, que é diferente do serial # do equipamento.
BrainRT01#show license udi
SlotID PID SN UDI
——————————————————————————–
* ISR4351/K9 FDO21350D13 ISR4351/K9:FDO21350D13
Com o arquivo em mão, podemos transferí-lo para a flash via TFTP ou usando um Pen Drive.
BrainRT01#copy usb0:/FDO21350D13_201802010758456350_4351_HSEC.lic bootflash:
Na sequencia basta instalar a licença.
BrainRT01#license install bootflash:FDO21350D13_201802010758456350.lic Installing licenses from "bootflash:FDO21350D13_201802010758456350.lic" Installing...Feature:hseck9...Successful:Supported 1/1 licenses were successfully installed 0/1 licenses were existing licenses 0/1 licenses were failed to install
Podemos verificar o status da licenças com os comandos abaixo.
BrainRT01#show license feature Feature name Enforcement Evaluation Subscription Enabled RightToUse appxk9 yes yes no yes yes uck9 yes yes no no yes securityk9 yes yes no yes yes ipbasek9 no no no yes no FoundationSuiteK9 yes yes no yes yes AdvUCSuiteK9 yes yes no no yes cme-srst yes yes no no yes hseck9 yes no no yes no throughput yes yes no no yes internal_service yes no no no no BrainRT01#sh license Index 1 Feature: appxk9 Period left: Life time License Type: Permanent License State: Active, In Use License Suite: FoundationSuiteK9 License Count: Non-Counted License Priority: Medium Index 2 Feature: uck9 Period left: Not Activated Period Used: 0 minute 0 second License Type: EvalRightToUse License State: Active, Not in Use, EULA not accepted License Count: Non-Counted License Priority: None Index 3 Feature: securityk9 Period left: Life time License Type: Permanent License State: Active, In Use License Suite: FoundationSuiteK9 License Count: Non-Counted License Priority: Medium Index 4 Feature: ipbasek9 Period left: Life time License Type: Permanent License State: Active, In Use License Count: Non-Counted License Priority: Medium Index 5 Feature: FoundationSuiteK9 Period left: Life time License Type: Permanent License State: Active, In Use License Count: Non-Counted License Priority: Medium Index 6 Feature: AdvUCSuiteK9 Period left: Not Activated Period Used: 0 minute 0 second License Type: EvalRightToUse License State: Active, Not in Use, EULA not accepted License Count: Non-Counted License Priority: None Index 7 Feature: cme-srst Period left: Not Activated Period Used: 0 minute 0 second License Type: EvalRightToUse License State: Active, Not in Use, EULA not accepted License Count: 0/0 (In-use/Violation) License Priority: None Index 8 Feature: hseck9 Period left: Life time License Type: Permanent License State: Active, In Use License Count: Non-Counted License Priority: Medium Index 9 Feature: throughput Period left: Not Activated Period Used: 0 minute 0 second License Type: EvalRightToUse License State: Active, Not in Use, EULA not accepted License Count: Non-Counted License Priority: None Index 10 Feature: internal_service BrainRT01#
No caso das licenças do tipo Technology Package (securityk9, datak9/appxk9, uck9) é necessário reiniciar (reload) o roteador se ela já não estiver em uso como trial. 
Licenças Trial / Evaluation
Para ativar uma feature temporariamente, para fins de teste, usamos comandos diferentes.
Ativando licença Evaluation em ISRG2.
BrainRT01> enable BrainRT01# configure terminal BrainRT01(config)# license boot module c2900 technology-package data PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR LICENSE KEY PROVIDED FOR ANY CISCO PRODUCT FEATURE OR USING SUCH PRODUCT FEATURE CONSTITUTES YOUR FULL ACCEPTANCE OF THE FOLLOWING TERMS. YOU MUST NOT PROCEED FURTHER IF YOU ARE NOT WILLING TO BE BOUND BY ALL THE TERMS SET FORTH HEREIN. You hereby acknowledge and agree that the product feature license is terminable and that the product feature enabled by such license may be shut down or terminated by Cisco after expiration of the applicable term of the license (e.g., 30-day trial period). Cisco reserves the right to terminate or shut down any such product feature electronically or by any other means available. While alerts or such messages may be provided, it is your sole responsibility to monitor your terminable usage of any product feature enabled by the license and to ensure that your systems and networks are prepared for the shut down of the product feature. You acknowledge and agree that Cisco will not have any liability whatsoever for any damages, including, but not limited to, direct, indirect, special, or consequential damages related to any product feature being shutdown or terminated. By clicking the "accept" button or typing "yes" you are indicating you have read and agree to be bound by all the terms provided herein. ACCEPT? [yes/no]: yes % use 'write' command to make license boot config take effect on next boot BrainRT01(config)#exit BrainRT01#wr BrainRT01#reload
Nos novos roteadores da série 4K, usamos o comando license boot level license-level.
Mais detalhes sobre as licenças aqui.
Até a próxima.
1 Comment
Boa explicação,simples como deve ser.