Which CLI command would you use to verify installed SSL VPN licensing on a Cisco 1900, 2900,
or 3900 Series ISR?
A.
show crypto ssl license
B.
show crypto webvpn details
C.
show webvpn license
D.
show webvpn ssl license count all
E.
show webvpn gateway
Explanation:
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_conn_sslvpn/configuration/15-1mt/sec-conn-sslvpn-15-1mtbook.pdf
You can use the show webvpn license command to display the available count and the current
usage. To display the current license type and time period left in case of a nonpermanent license,
use the show license command. To get information related to license operations, events, and
errors, use the debug webvpn license command.
For migrating from any Cisco IOS 12.4T release to Cisco IOS 15.x release, use the license
migration tool at
https://tools.cisco.com/SWIFT/Licensing/LicenseAdminServlet/migrateLicense.
New Cisco IOS SSL VPN licenses that are generated are cumulative. Therefore the old licenses
become inactive when a new license is applied. For example, when you are upgrading your
license from 10 counts to 20 counts (an increase of 10 counts on the current 10 counts), Cisco
provides a single 20 count license.
The old license for 10 counts is not required when a permanent license for a higher count is
available.
However, the old license will exist in an inactive state as there is no reliable method to clear the
old license.
In Cisco IOS Release 15.1(4)M1 and later releases, a Crypto Export Restrictions Manager
(CERM) license is reserved only after the user logs in. If you have an Integrated Services Router
Generation 2 (ISR G2) router with a CERM license, you must upgrade to Cisco IOS Release
15.1(4)M1 or later releases. Before Cisco IOS Release 15.1(4)M1, a CERM license is reserved for
every SSL or Transport Layer Security (TLS) session.