Understanding the ISR G2 Devices and IOS Release 15 Dwight Hughes Network Technology Department Head / Professor Clark College

2 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada ISR G2 Equipment Bundles Demo 1: USB Console Driver Download Universal IOS images Introduction to Licensing License Management Commands Demo 2: Licensing License Management Utilities Cisco Call Home Cisco License Manager Demo 3: CLM Install & Setup Cisco License Portal Demo 4: Cisco License Portal

3 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Network ProcessorMulti-core Console Access mini USB, serial, and serial auxiliary Form Factor2RU1RU2RU Integrated WAN Ports2GE 3GE Interface Slots (EHWIC)244 Service Module Slots001 ISM Slots111 PVDM Slots022 USB Ports (v2.0)222 Default/Max Flash256MB/4GB Default/Max DRAM512MB/2.5GB

4 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada List of Hardware / Software not supported with ISR G2 devices in current Academy Bundles Unsupported Hardware / SoftwareSuggested Replacements WIC-1THWIC-1T WIC-2THWIC-2T WIC-2A/SHWIC-2A/S NM-32AHWIC-16A Security Device Manager (SDM)Cisco Configuration Professional (CCP)

5 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Multi-core processors 2 integrated 10/100/1000 Ethernet ports Console access: mini USB, serial console and serial auxiliary 2 enhanced High-Speed WAN Interface Card slots that can host 2 single wide or 1 double wide and 1 single wide (e)HWIC 1 Internal Services Module slot Embedded hardware-accelerated VPN encryption (DES, 3DES, AES) Memory: DDR2 DRAM: 512MB/2.5GB (default/maximum) Two external Compact Flash slots: 256MB/4GB (default/maximum) USB 2.0 ports Available IOS Software Packages IPBase (enabled by default) Security (SEC) or Security with No Payload Encryption (SEC-NPE) Data

6 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Multi-core processor Embedded hardware-based cryptography acceleration (IPSec + SSL) Integrated Gigabit Ethernet ports 4 enhanced High-Speed WAN Interface Card slots that can host 4 single wide or 2 double wide All onboard WAN ports are 10/100/1000 Gigabit Ethernet WAN routed ports. Console access: mini USB, serial console and serial auxiliary Memory: DDR2 DRAM: 512MB/2.5GB (default/maximum) Two external Compact Flash slots: 256MB/4GB (default/maximum) Two USB 2.0 ports Available IOS Software Packages IPBase (enabled by default) Security (SEC) or Security with No Payload Encryption (SEC-NPE) Unified Communication Data

7 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Enables use of a Mini USB cable for console access in addition to the Cisco console cable Only one console can be active at a time; the USB cable always takes precedence. USB console software can be found on Cisco.com USB console software

8 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

9 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

10 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Note: Device only appears if USB cable is connected to ISR G2 device.

11 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Universal IOS Image contains all Cisco IOS features. Single universal IOS Image is shipped with the ISR G2 devices. IOS functionality determined by licenses applied to the devices. Only two IOS images for each release: universalk9: This universal image offers all the Cisco IOS features including strong crypto features such as VPN payload, Secure UC, etc. universalk9_npe (no payload encryption): This universal image satisfies requirements of import restricted countries. It does not support any strong payload encryption, such as VPN payload, secure voice, etc. Examples: c2900-universalk9-mz.SPA M.bin c2900-universalk9_npe-mz.SPA M.bin

12 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Includes all the available features in a model Four technology packages available: IP Base, Security, UC and Data IP Base Technology Package is enabled by default. Security, UC and Data Technology Package licenses activate more features.

13 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Two Flavors of Universal Image can be downloaded from CCO: Universal Universal – no payload encryption (npe)

14 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Feature inheritance and platform support from 12.4T and 12.4 Mainline Two major maintenance releases for IOS 15: M Release (Extended) T Release (Standard) FCS: First Customer Ship The date the software release is first available to customers on Cisco Software Download Center

15 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada 15 M (Extended Maintenance Release): Ideal for long-term maintenance, enabling customers to qualify, deploy, and remain on the release for an extended period. Provides 44 months of support. Incorporates features delivered in previous releases plus incremental new feature enhancements and hardware support 15 T (Standard Maintenance Release): Short deployment releases ideal for latest new features and hardware support before the next M release becomes available. Provides regular bug fix maintenance rebuilds for 12 months, plus 6 additional months of critical fix support for network affecting bugs. Incorporates features and hardware support delivered in previous releases.

16 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada c2900-universalk9-mz.SPA M1.bin Minor Release Number New Feature Release Number M/T = Ext./Std Maintenance Maintenance Rebuild Number The New IOS 15 Naming Convention Major Release Number A. C. B. D. E.

17 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Permanent Licenses Temporary Licenses Features Licenses: Software Activation Feature Licenses Right to Use Feature Licenses Subscription Licenses Counted Licenses

18 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada A Permanent License never expires. Once a permanent license is installed on a router, it is good for that particular feature set for the life of the router even across IOS versions. For example, once a UC, Security or Data license is installed on a router, the subsequent features for that license will be active even if the router is upgraded to a new IOS release. A permanent license is the most common license type used when a feature set is purchased for a device.

19 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada A Temporary License is good for a limited amount of time. ISR G2 includes a full set of 60 day Temporary Licenses for the Data, UC and Security feature sets. These can be activated and deactivated at any time to evaluate a feature set before making the decision to convert to a Permanent License. They also provide a mechanism that gives the user some flexibility before upgrading to a Permanent License. Only the time a Temporary License is active counts against the 60 day allotted time. Once a Temporary License expires, it cannot be extended.

20 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Software Activation Feature Licenses Typically upgrades to one or more technology Package Licenses Can be delivered with new router or upgraded at a later time. Licenses are enforced through Cisco Software Licensing framework Right to Use Feature Licenses Do not require software activation Can be ordered with new router or upgraded at a later time Subscription Licenses Time-based licenses (e.g., Intrusion Prevention) Counted Licenses Enable a defined number of users (e.g., CME)

21 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Technology Package Licenses (Permanent/Temporary) IP Base (Permanent Only) Security Data Unified Communication

22 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Security Technology Package License activated: Additional Software Activation Feature Licenses Intrusion Prevention (Subscription) Content Filtering (Subscription) SSLVPN (Counted) Currently only Security Technology Package license is required in CCNA Security and CCNP 6.0 curricula, Optional in CCNA Discovery

23 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Data Technology Package License activated: Additional Software Activation Feature License SNA Switching Currently only Security Technology Package license is required in CCNA Security and CCNP 6.0 curricula, Optional in CCNA Discovery

24 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Unified Communication Technology Package License activated: Additional Software Activation Feature Licenses Gatekeeper CUE (Counted) Additional Right to Use Feature Licenses Land Mobile Radio VXML Gateway (Counted) CME (Counted) SRST (Counted) CUBE (Counted) Currently only Security Technology Package license is required in CCNA Security and CCNP 6.0 curricula, Optional in CCNA Discovery

25 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Universal image is a single image that contains all the available features for a particular model. What are the four Technology Packages? IP Base, Security, Data, Unified Communication What is a Permanent License? A permanent license is good for the lifetime of the device. When the universal image updates, the permanent license is still valid. The same license can be transferred to an identical device if the original device is no longer functional. What is a Universal Image? What is a Temporary License? A temporary license is used for feature evaluation and emergency situations. The license is only good for 60 days of actual usage. Temporary licenses are already available for use on the routers.

26 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Display License Info Save License Info Enable / Disable Technology Package Licenses Yes Officer, I have a License.

27 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Displays all the uniquie device identifier (UDI) values that can be licensed on the system Router# show license udi

28 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Displays the hardware and Technology Package License information. This is a quick way to determine Technology license status. Option: #Show Version (Scroll to end of output).

29 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Displays detail information about all feature license. Type of license Actual usage time of the license

30 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Lists the available licenses on the device Lists the status of the licenses Router# show license feature

31 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Available Technology Package Licenses: Data, UC and Security Commands: (config)# license boot module Enable: Router(config)# license boot module device technology-package technology-package Disable: Router(config)# no license boot module device technology-package technology-package or Router(config)# license boot module device technology-package technology-package disable

32 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Step 1: Issue show version | begin UDI (verify data license is disabled)

33 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Step 2: Activate the data technology package license Router# configure terminal Router(config)# license boot module c2900 technology-package datak9

34 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Step 3: Verify activated license: Router(config)# do show version | begin UDI

35 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Step 1: license boot module c2900 technology-package datak9 disable Or no license boot module c2900 technology-package datak9 Step 2: show version | begin UDI to verify that the license is disabled

36 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Where can you find the router’s serial number? Show version, show license UDI, or on the router Where can you find the router’s UDI? Show version, show license UDI, or on the router What are the commands for enabling or disabling technology licenses? Router(config)# (no) license boot module

37 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Cisco Call HomeCisco License Manager (CLM) Cisco License Portal CostNone Application location Built into the ISR G2PC Application (download from Cisco software download) Web-Based FunctionAllows user to interact with the web-based “License Registration Portal” directly from the router IOS Allows user to register, install and manage licenses on multiple devices on the network Allows user to register and obtain feature licenses for devices

38 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Interact with Cisco Product License Registration directly from the device Prerequisites: Router must have https access to Cisco.com Obtain the desired PAK from Cisco Product Authorization Key (PAK) is a 11 digital alphanumeric code created by Cisco manufacturing that identifies a specific software (license) purchase Cisco.com account Steps: Download and install the license with the following command: Router# license call-home install pak xxxxxxxxxxx

39 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Client-server application Automates Cisco software activation and license management Builds an inventory of licensed features for the network Communicates securely with license agent embedded in Cisco IOS Prerequisites: Download and install CLM application from Cisco Setup layer 3 connectivity between CLM PC & router(s) Enable HTTP or HTTPS on router(s) Create local user account on router(s) for CLM Access Enable ip http authentication local on router(s)

40 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada CLM Server will start in a few seconds.

41 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

42 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

NETLAB CLM Demo: Discover Devices

44 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Portal Capabilities: Convert a PAK to a license Manage and look up licenses on a given router by providing the PID and Serial number of the router Transfer licenses from a failed device to a replacement device as part of the RMA process Request temporary trial licenses for technology packages and features Activity – Request a copy of your licenses Information needed UDI: show license UDI Serial number: show license UDI Device credentials: displays a saved copy of router’s credential file License Portal:

45 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Look Up a License: Display license info and receive a copy of license information from Cisco

46 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Router Commands Used: Router# show license udi Router# more flash:2911Credentials CISCO2911/K9 FTX1449AJBJ Device Credentials 1.0 T and I trans id CISCO2911/K9 FTX1449AJBJ Device T21:25:46.575Z T and art info AAEAAgAOAA4AhQEBgABlBKM6WQipDZuXoxk2Ut5I46kgCAaXdrVBXuVT0s6hb5qJn/OhYMAEZG8jMimHjv20rKuLwzvpFTpUx3RsIiPzrho DTkmkmgdTRV45bUvvjJu2yeIkYYulMYZziRAFeKcywvx6/+UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= AAEAAgAPAA8DhAAPABCh7NK4rgji9EZr6CbYRAEitiXxvBgTsbkG+m6V2LFCftGl2AuGJsZE7ilQTDr5d2MyJVO1FTW4+EOUga/5xOLHzRE tOZ9SZX5zGEf/nFHgGno0pWRHTj9QxfQzKV6KxBQYK8uAHRSI1Gl4bN8M/Z+wKHAWj9WL9PGcA+Kj5j4+eAnoFduWxi+4TlStnYiKtdQM8kJFqVqHnHmxY5kzLm fugVueOqTcJ2cAbwYFZ5mZ5yLXutLmy7zoxZyB3qHjRZVlK+szoyk3cXTcGcblnp3XX1hDGKD3yKhXomf1n2xDOvfF+DHPXgqxqpYuQvUA4CWRSXpiuRf0gcw9G VekZ2zonJjleVFwbbxWTXMxwEBTfqgZFPOj3YJkl7TlwGbKSJ3TRfIpz9MFot1pA9/U5kqFWLQLCKQuQHmffvh3IO0B5uff5ivLS/l+Q7Fm6xaczMFm3NCUY9e9BoE SDPZItMbhrFkdKqDs9YqK2ZqSteuDdSRWBaK9Ez0ghN1LEu7gT66DV2vQyo2o4YGPNQbKb1lHV/cZw75juCtYq2Kd+XzmA+rPlWXA0bXOjtzc04Juf+zqiv02RQi7 4whP9CjJs8jsINsSkzHLYcFP6zCOQ7bofMwKLjw6TXIMVWLtIVsH66/hkF1Hi7fJ98rgVneEQYPSs7YTlPgsMNNNncqnHbkT3lHvBfL3x9lGPELSe5EvwwCAuvmwx wv+qwbAWJ2eqWt1pvF/4ouUZEXNcih96HQlqWKgLP+xDiCF/mliKEx3/4LpF9Nfx3/nPfTOibvW9hXqxudHHVCo8tDDEgEOFNX42s2GnjLgWg1uz62u7nb7pqJy2kI TJXTdqIdftyWV93NGYxuKu9E0NwUOS7b5NCPoYFFJMTKyb5MPfuhBmYtDr7Geyy7UQP4GV2CPYH8GVdgZ4IECNuirC/p/hXY/ZM7FVydbMExsINPokQ7a3OL WY1ITAgdXzgrZzWcyMBTFtlU0DKzxbAhUsnCX2bgU4MwFen7VKaERDRwQ+6H4NmqMa40TOtdlzwEU3cTEA1WY6LH6Csi+oQmxGS8uhtUaaAU4xvxip1V2Wi mTtygC3T2u0OtGquTdm8RcFVA/6TQTZg2pQxzj/7+JvF/3CIF4vAVUVK7IoD54D/6pTp1cyzQc8koWecmQFtdIBIs9D7v7Zm6C/6PYoj+xS/fRafRA8jI9HQ== AAEAAgALAAsAVAECAQlm3XRJrLZJOs5oDLYc2/AWK11qEgAAAAAAAAAAAAAAABnRn/kGuLROCLR4/8AZomB5nkn4GXaZMct6/dNma7 6bmqy/uYL0QFvPCSevDkQxrw== waxting

47 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

48 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Cisco's Integrated Services Routers Generation Two Licensing and Packaging s10537_Products_White_Paper.htmlhttp:// s10537_Products_White_Paper.html ISR G2 Software Licensing Overview Cisco IOS Release 15.0 Feature Sets and Memory Recommendations for Cisco 1900, 2900 and 3900 Series Routers _ps10537_Products_Bulletin.htmlhttp:// _ps10537_Products_Bulletin.html Cisco Licensing Manager Cisco ISR G2

49 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada CLM information and download location:

50 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Choose your platform Choose your method

51 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Extract CLM file Start Installation

52 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada User must accept license agreement to continue. User may choose to install server and client on same or different computers.

53 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada User may choose to change port settings and choose to use SSL This is the password for the administrator to log into CLM. server information is not required.

54 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

55 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Setup Network Connectivity for the PC Setup Network Connectivity for the Router Assign ip address to a router interface Assign ip address to a PC statically Assign ip address using DHCPor

56 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Enable HTTP or HTTPS HTTP authentication using local database Create user profile

57 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada CLM Server will start in a few seconds.

58 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Input user credentials for CLM access created during CLM Installation

59 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

Questions?

61 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada

62 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Please take a moment to complete the evaluation. Supporting materials are available for download from the virtual Resource Center. Thank you for your time.

63 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Not available in all countries Fixed Can vary Name of Cisco IOS image represents the platform, feature set, release level, and other information about the image file. The NetAcad maintenance agreement entitles participants to download IOS images identified in the NetAcad Maintenance – Image and Hardware Support document Variance from the listed feature set or major release is not allowed Downloading alternate maintenance or minor releases of the listed software is acceptable Recommendation is that you install the IOS image listed for your device

64 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Scenario Legacy Lab Equipment (ISR G1s and earlier)ISR G2s Academy purchases new bundles to teach CCNA Security. This bundle includes the advanced security features. Academy pays for the Advanced IP Services IOS version as part of the Bundle Academy pays for the SEC (Security) Technology Packages as part of the Bundle Academy upgrades existing routers (with or without advanced features) to a new IOS version based on NetAcad recommendation IOS upgrades are Free Academy upgrades existing routers that were purchased to teach CCNA to the advanced security features required to teach CCNA Security IOS versions with Advanced IP Services are Free Academy purchases the SEC Technology Package Licenses

65 © 2012 Cisco Systems, Inc. All rights reserved. Cisco confidential.Cisco Networking Academy, US/Canada Free Service – Available to all qualified academies Covers approved NetAcad software listed in the Image and Hardware Support Document Provides access to CCO for software downloads and technical documentation Access to NetAcad Support Desk and includes level-one Technical Support No hardware support Yearly Subscription Cost – Price depends on type of equipment and level of service Covers a specific piece of equipment Provides access to CCO for software updates within the licensed feature set and technical documentation Access to TAC (Technical Assistance Center) Includes hardware support and replacement Not available in all countries Note: It is strongly recommended that academies participate in NetAcad Maintenance. Academies should also obtain SMARTnet if they desire hardware coverage.