Trying to bring up lab test set up with ASR1004(RP2) with software image asr1000rp2-adventerprisek9.03.16.04a.S.155-3.S4a-ext. in APIC-EM IWAN as BR, it is showing the below warnings.
Device does not have required license
Required licenses not enabled on device.
Enable the licenses for the platform in use.
- AX (Application Experience K9) "appxk9" is needed for the ISR4K platforms
Adventerprisek9 or Advipservicesk9 is needed for ASR 1K platforms
running version 126.96.36.1996
Are you trying to use these devices with this image for iWAN. If yes, you better take care of these warnings. If not, it's likely to fail in some of the CLIs that iWAN will push. E.g. CLIs that configure crypto IPSec profile on devices, and provision it under tunnels, Crypto IKEv2 profile etc.
The warnings are legitimate. iWAN do run certain validation checks on devices you try to bring into APIC-EM. Licensing related checks is just one of the items in that comprehensive checklist. The idea of having them as "Warning only" versus "must fix" is something that can deliberate at length. However, absence of such licenses would cause failures in various provisioning workflows downstream and hence we flag and ask user to take care of these warnings appropriately.
Again, the licensing related warnings you are seeing have got nothing to do with the IOS image you have or the APIC-EM version you have. It has to do with actual licenses themselves, on your devices.
A quick check would be to issue "sho license" command on the devices and make sure that the state of licenses being warned about is "Active, In Use". If not, you have to accept the EULA for corresponding license (from configuration mode, execute end user license agreement accept command). Additionally, if you want to move any license from "Eval Only" to "Permanent" use, there's "license move" command for that (from privileged exec mode of the device)
Once you take care of licenses, and revalidate the devices, you should not see these warnings again.
IOS XE 3.16.04 should be the correct IOS version for iWAN.
Having said that, 188.8.131.526 is the EFT build for iWAN and we never had iWAN in 1.2.1.X official release of APIC-EM. 184.108.40.20683 is the latest (final) release candidate under comprehensive tests across different teams including iWAN and barring any surprises, official release of APIC-EM containing iWAN 1.3.0.X) should be out any day soon.
looks like this ASR1k's does not require a special license file for certain models, this info is given from TAC team.Router just needs the proper IOS image to enable the features.
We are going to ignore this version mismatch message for now and will proceed further, thank you for the inputs.