Cisco Router License Featureset Configuration

Some newer Cisco routers and switches such as the 4331 and 1941 routers at Inver Hills require additional license activation in order to use certain commands and features. On some devices this license may have been activated already but on other devices the license may not be active. This is most likely to cause issues with commands in the Network Security and CCNP courses. If you are unable to run a command on a router or switch one of the things you should check is to see what licenses have been activated on that device. If a license has not yet been activated you can follow the instructions below to activate the license for Cisco Networking Academy use.

Cisco 4331 Series Routers

If you are using Cisco 4331 series routers in the Network Security or CCNP class you may run into problems issuing certain commands which require the Security Feature Set if the license has not yet been activated on your router.

Security Feature Set

Example of Commands Which Require Security Featureset

• VPN Configuration

Checking for Security Featureset

To check which featuresets are active on the router:

1. Enter the privileged (enable) access level on the router
2. Run the show license feature command
3. Look for the line with securityk9 in the first column (feature name)
4. Check that the enabled column for that feature (securityk9) shows yes

Activation Procedure

1. Enter global configuration mode
2. Enter the license boot level securityk9 command
3. Accept the EULA by entering yes
4. Exit global configuration mode
5. Save your current router configuration
6. Reboot your router

Cisco 1941 Series Routers

If you are using Cisco 1941 series routers in the Network Security class you may run into problems issuing certain commands which require the IOS Security feature set if the license has not yet been activated on your router. If you are using Cisco 1941 series routers in the CCNP classes you may run into problems issuing certain commands which require the IOS Data feature set if the license has not yet been activated on your router.

Security Feature Set

Example of Commands Which Require Security Featureset

• enable algorithm-type scrypt
• ZPF Firewall Configuration
• IPS Configuration
• VPN Configuration

Activation Procedure

1. Enter global configuration mode
2. Enter the license boot module c1900 technology-package securityk9 command
3. Accept the EULA by entering yes
4. Exit global configuration mode
5. Save your current router configuration
6. Reboot your router

Data Feature Set

Example Commands Which Require Data Featureset

• ip sla

Activation Procedure

1. Enter global configuration mode
2. Enter the license boot module c1900 technology-package datak9 command
3. Accept the EULA by entering yes
4. Exit global configuration mode
5. Save your current router configuration
6. Reboot your router