Friday, March 21, 2014

Understating Cisco IOS v15 Licenses

Understating Cisco IOS v15 Licenses

Prior to IOS 15 , we used to have 8 IOS images Types (Feature set) , by the way it was 12 before it comes 8.

any router was coming with IB Base  feature set and according to your company needs you can go for advance feature set and replace the IOS , check the below pic :
1.jpg
The following Picture explain each one and what features you will gain once you run that feature set :

2.jpg
Now with IOS 15 it become 4 instead of 8  Feature sets and  these 4 Features set comes in one single IOS image ,now days we use the term (technology package ) when referring to feature set.


What are the ISO v15 Feature sets (technology package) types we have now days with ISR G2:

  1. IP Base (ipbaseK9)come and running with any new ISR G2 routers (1900,2900,3900 Series) , its entry level for Cisco IOS functionality
  2. DATA (dataK9)support MPLS.ATM. Multiprotocol support
  3. Unified Commuincations (ucK9) support VOIP & IP Telephony
  4. Security (securityK9) support Cisco IOS Firewall , IPS , IPsec , 3DES, VPN

The following picture summarize these Feature sets (technology package):

3.jpg


ISR Integrated Service Router G2 come with IPbase and to  run the other three technology package we need to understand the concept of licenses which similar to ASA firewalls licenses by the way .

Licenses has two types:

Evaluation (Temporary) License
which mean will be available with all functionality for trial period would be 60 days

Permanent License
which mean you must get new license from cisco to run it for ever

Any License has Status :

any type could had one of two status

  • Active, In Use
  • Inactive


Normally your Universal image come with ipbasek9 built -in with the following type and status 

License Type: Permanent

License State: Active, In Use


So if we want to run one of the remaining three feature sets  ,Licenses need to be activate it so you can use it whatever you will use it as Permanent or Evaluation.

Cisco give you the ability to activate the remaining three feature sets   for Evaluation but if you like to use any of them Permanently you will need to get license from cisco.

Note 1 : The IP Base license is a prerequisite for installing the Data, Security, and Unified Communications license.

Note 2 : if you want to run all feature set you will need license for each as the pic below :
4.jpg


How to get License from Cisco and how to install it in my Router ?
Complete the following steps to permanently activate a software package or feature on the router:

1- Purchase the software package or feature that you want to install. You receive a PAK with your purchase.

What is Product authorization key (PAK):

The PAK is provided to you when you order or purchase the right to use a feature set for a particular platform.
The PAK serves as a receipt and is used as part of the process to obtain a license


2-Get the license file using one of these options:

Option 1 -Cisco License Manager, which is a free software application available at http://www.cisco.com/go/clm.

Option 2 -cisco license registration portal  www.cisco.com/go/license

on any of these options what you will do is  Convert the PAK to a license by entering the PAK and the unique device identifier (UDI) into the CLM or Cisco Product License Registration portal

Note : UDI  has two main components: the PID and the serial

What is the unique device identifier (UDI)?

A. The UDI is a combination of the product id (PID), the serial number, and the hardware version. The UDI is printed on a label that is located on the back of every switch and also viewable from the command-line interface (CLI) (show license UDI) and management tools (using Simple Network Management Protocol [SNMP]). Only the PID and serial number are used for license creation


To know what is your UDI , type show license udi as the following pic showing you :
5.png


Also show version command will display the UDI

This information is also present on a pull-out label tray found on the device. See the following two pictures :
6.jpg
7.jpg

After entering the appropriate information, you will receive an e-mail containing the license information that you can use to install the license

• Copy the license file received from the Cisco Product License Registration portal to the appropriate file system on the device.
or
• Click the Install button on the web page.


What is the License Format ?

The license is in the form of a file with a .lic extension

A Software Activation License is an XML text file with a .lic extension and even can be opened by notepad or any text editor:
8.png


3- use the cisco cli to install and manage licenses


Licenses Commands Overview :


Displaying Licenses types and status

Router#show license all
10.png


R1#sh license detail   will give you similar information like above one too



Displaying brief summary  about each feature and  installation status

R1#show license feature
11.png

Installing Evaluation License for feature set  (technology-package)

Let’s say we want to take the benefit of using   securityk9  Feature set in Evaluation  period to set our router as IOS firewall , we will type the following command

Router(config)#license boot module c2900 technology-package securityk9

Then we will asked to type Yes To accept the Evaluation License agreement



Installing Permanent License for feature set  (technology-package):

After doing the steps we talk about earlier to get the license file , we will copy it to our router flash then type the following command :

R1# license install flash0:uck9-2900-SPE150_K9-FHH12250057.xml

R1# reload



Backing up the License command :

R1# license save flash:all_licenses.lic



Uninstalling the License command (two steps required for uninstalling licenses ) :

1-      First we disable it

Router(config)# license boot module c3900 technology-package uck9 disable

Router(config)# exit

Router# reload

2-      Then we clear it

Router#license clear uck9

Router#config t

Router(config)#no license boot module c3900 technology uck9 disable

Router(config)#exit

Router#reload



Note : some licenses such as built in licenses cannot be cleared. Only licenses that have been added by

using the license install command are removed. Evaluation licenses are not removed.



Finally I recommend you to understand the naming format for IOS 15 it self , example:

c2900-universalk9-mz.SPA.151-4.M4.bin

The main point here to undersatnd here is what is M & T?

in brief ,M release stay for 16 month and during this period we could see many release of  T including enhancement and  advance functionality added .




14.jpg

More info :



More resources about IOS v15 & Licenses :

Cisco’s Integrated Services Routers Generation Two Licensing and Packaging


Configuring the Cisco IOS Software Activation Feature


Tutorial for IOS V15


CLM eTutorial :


An introduction to Cisco IOS version 15


Yasser Auda
Certified Cisco Systems Instructor  CCSI #  34215

Thursday, March 13, 2014

How to setup DDNS (Dynamic DNS) on a Cisco IOS router


Created by Gary in 8/12/2012 9:10:28 AM
How to setup no-ip.com DDNS on your Cisco IOS router that actually works!

Normally we try to setup static IP addresses for our managed routers. However in this case the router was residential and in Singapore. Getting a static IP address was actually impossible.
I started the project by researching DDNS providers. Many of the DDNS providers that were free in the pase are no-longer free. However no-ip.com still offers a free version of DDNS. The free version is under the section of their website for personal. At this time I could not find any statements on their site restricting the service to personal use. Here is a link to their site.
This procedure is easy to perform but due to lack of proper documentation and a lot of incorrect documentation, including that in the no-ip.com knowledgebase, it is more difficult than it should be.
This article assumes you have a basic knowledge of Cisco routers and know how to get into config mode and how to save your configuration.
There are three primary steps to setting up DDNS on a Cisco IOS router.
  1. Setup and confirm DNS resolution works.
  2. Setup  a DDNS method to be called.
  3. Setup the external DHCP interface to call the DDNS update method.

Setup DNS resolution.

Confirm your router can ping something by name properly. A simple 'ping google.com' is an effective test. If it does not work you can setup you router DNS to use Google's public DNS servers with these two config lines:
  • ip dns server
  • ip name-server 8.8.8.8 8.8.4.4

Setup the DDNS method.

The method tells the router how to contact the DDNS provider, login and send the proper update command. It also controls the minimum and maximum time between DDNS updates. Do not set the maximum time too short. Many DDNS providers will lock you out if you update too frequently. I typically use one day but you need to check with your provider.
Create and name the DDNS update method.
  • ip ddns update method ddns-noip
Set the update mode to HTTP
  • HTTP
Create the ADD URL. The URL contains some special characters mainly the'?' that is problematic to enter because the router interprets it as a call for help. Use CTRL-V just before typing the '?' and the router will place it properly. Replace [username] and password with your no-ip credentials. You will need to enter your username as an email address including the '@' 
<h>&myip=<a> is a macro replaced by the router during the update with hostname and ip. i.e. hostname=myhostname.no-ip.org&myip=4.2.2.2'
  • add http://[username]:[Password]@dynupdate.no-ip.com/nic/update?hostname=<h>&myip=<a>
update minimum every 5 minutes maximum 1 day.
  • interval maximum 1 0 0 0
  • interval minimum 0 0 5 0

 Apply the update to the external DHCP interface.

Select the external interface and apply the update command to call the method you just created. For the Cisco 871 router used in this configuration it is FastEthernet 4. Replace it with your proper interface. For PPPoE it is likely interface Dialer 0.
Substitute your DDNS method name and the hostname to update at your DDNS provider with your specific details..
  • interface FastEthernet4
  • ip ddns update hostname [DDNS hostname]
  • ip ddns update ddns-noip

Debugging.

Unfortunately I have not figured out a way to force a DDNS update NOW. What you can do is set your maximum update time short like 5 minutes. Turn on debugging with: debug ip ddns update. You will get some very useful debug information. Make sure all the parameters are correct on the calls.
You may need to reload your router. I have round that changing the add command did not update properly after some changes until after a reload.

Sample Debugging Output for a working update.


*Aug 00 00:00:55.433 EDT: DYNDNSUPD: Adding DNS mapping for myhostname.no-ip.org <=> 111.111.111.111
*Aug 00 00:00:55.433 EDT: HTTPDNS: Update add called for myhostname.no-ip.org <=> 111.111.111.111
*Aug 00 00:00:55.433 EDT: HTTPDNSUPD: Session ID = 0x7
*Aug 00 00:00:55.433 EDT: HTTPDNSUPD: URL = 'http://[email protected]:[email protected]/nic/update?hostname=myhostname.no-ip.org&myip=111.111.111.111'
*Aug 00 00:00:55.433 EDT: HTTPDNSUPD: Sending request
*Aug 00 00:00:56.441 EDT: HTTPDNSUPD: Response for update myhostname.no-ip.org <=> 111.111.111.111
*Aug 00 00:00:56.441 EDT: HTTPDNSUPD: DATA START nochg 111.111.111.111
*Aug 00 00:00:56.445 EDT: HTTPDNSUPD: DATA END, Status is Response data recieved, successfully
*Aug 00 00:00:56.445 EDT: HTTPDNSUPD: Call returned SUCCESS, update of myhostname.no-ip.org <=> 111.111.111.111 succeeded
*Aug 00 00:00:56.445 EDT: DYNDNSUPD: Another update completed (outstanding=0, total=0)
*Aug 00 00:00:56.445 EDT: HTTPDNSUPD: Clearing all session 7 info

YouTube Channel