This is all remote in a DC so emergency console cable access isn't something I can do quickly.
#CISCO ASAV EVALUATION LICENSE FAILOVER SOFTWARE#
However never having done this before and this now being a live service I'm a little concerned it won't. Evaluation License About Licenses by Type Failover or ASA Cluster Licenses Smart Software Licensing for the ASA on the Firepower 4100/9300 Chassis For the ASA on the Firepower 4100/9300 chassis, Smart Software Licensing configuration is split between the Firepower 4100/9300 chassis supervisor and the ASA. At which point it should have access to the Smart Licensing servers and re-enable the Security Plus license (as well as the Base & 3DES/AES licenses). I am hoping that if I force a failover from the active unit that it will cause the standby unit to go active and enable its interfaces. If I try any failover commands 'failover exec mate show failover' I get an error saying it requires a license for failover.
from the active unit I can issue commands to the standby unit with 'failover exec mate xxxx', however if I do a 'failover exec mate show ip' it only shows the failover interface as active. The primary unit is now licensed properly and there are licenses for the standby unit in the virtual account, however the Base & 3DES/AES licenses were deposited just after the 90-days so the standby unit now only has the failover interface active as it won't support failover without being licensed (back to a chicken-&-egg situation.). Its taken a while to get these sorted, however its taken longer than 90-days which has now broken things.
The FoC Base & 3DES/AES licenses weren't provided. After I got this working it turned out that the distributor didn't provide the free-of-charge Base or 3DES/AES licenses so after getting these registered they immediately went out of compliance as they only had the Security Plus licenses in the Virtual Account as these were ordered separately.
0 kommentar(er)
