11-04-2014 01:49 AM - edited 03-11-2019 10:01 PM
Hello ,
I have the following IOS on my routers:
(C7200-ADVIPSERVICESK9-M), Version 15.1(4)M2
(C2900-UNIVERSALK9-M), Version 15.1(4)M4
in class-map configuration, I can not find the command "match protocol attribute ......." and many other commands. can anyone tell me why it is so ??
11-04-2014 05:46 PM
Hi,
It seems to be a license issue on your router ,please provide below output :-
#sh license
Prashant :-
11-04-2014 09:48 PM
please see it
VPN_Server#sho license
Index 1 Feature: ipbasek9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Index 2 Feature: securityk9
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium
Index 3 Feature: uck9
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 4 Feature: datak9
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 5 Feature: gatekeeper
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 6 Feature: SSL_VPN
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: 0/0 (In-use/Violation)
License Priority: None
Index 7 Feature: ios-ips-update
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 8 Feature: SNASw
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 9 Feature: hseck9
Index 10 Feature: cme-srst
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: 0/0 (In-use/Violation)
License Priority: None
Index 11 Feature: WAAS_Express
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
Index 12 Feature: UCVideo
Period left: Not Activated
Period Used: 0 minute 0 second
License Type: EvalRightToUse
License State: Not in Use, EULA not accepted
License Count: Non-Counted
License Priority: None
11-05-2014 05:15 AM
Hi,
For these below platforms you already have the required licenses seck9 and ipbasek9.
(C7200-ADVIPSERVICESK9-M), Version 15.1(4)M2
(C2900-UNIVERSALK9-M), Version 15.1(4)M4
Only for ISR4451-X/ASR series routers we need to have appxk9 license to enable layer 7 inspection, there is bug filed to track this particular issue, CSCuo75582 which is resolved in later releases.
kindly provide me the command which you are not able to apply example:-in this example I am not getting an option to apply L7 inspection.
Router(config)#class-map type inspect match-all class_FTP Router(config-cmap)#match protocol ? tcp TCP udp UDP icmp ICMP
Prashant Joshi
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: