Cisco Router ASR 1000 License

Cisco ASR 1000 Router Licenses — IOS XE Feature & Throughput Licensing

Buy genuine Cisco ASR 1000 licenses with instant e-delivery. This collection covers all IOS XE software licenses for the ASR 1001, 1001-X, 1001-HX, 1002-X, 1002-HX, 1004, 1006, and 1013 routers. Choose from software feature packages (IP Base through AppX), throughput upgrade licenses (2.5G–36G), IPSec crypto licenses, BNG subscriber session licenses (4K–64K), 10GE port activation, and advanced features (FW/NAT redundancy, Lawful Intercept, NAT64, CUBE). All licenses are genuine Cisco right-to-use (RTU) — no hardware dongles required. For other Cisco platforms, see our ISR 4000 licenses and ASR 9000 licenses.

Software Features

IPB → AIS → AES → SEC → AppX — hierarchical IOS XE feature packages

Throughput Upgrade

2.5G–36G system bandwidth — per-model for 1001, 1001-X, 1002-X

Crypto & IPSec

4G–25G VPN encryption — DMVPN, GET VPN, IPsec throughput per model

Broadband BNG

4K–64K subscriber sessions — PPPoE/IPoE termination for ISP deployments

Port Activation

10GE & 1GE port licenses — per-model for 1001-X and HX platforms

Advanced Features

FW/NAT redundancy, Lawful Intercept, NAT64, FPI, CUBE, IOS redundancy

E-delivery within 24h License file sent by email
100% working guarantee Full refund if activation fails
Free install support Step-by-step activation help
Secure checkout PayPal & Shopify Payments

Cisco ASR 1000 Series Aggregation Services Routers are high-performance edge platforms deployed in enterprise WAN, service provider, and data center environments. Models include ASR 1001, 1001-X, 1001-HX, 1002-X, and 1002-HX — spanning from compact 1RU fixed-configuration routers to modular high-throughput systems. For service provider core and edge, see our ASR 9000 IOS XR licenses.

ASR 1000 licensing is modular and feature-based. The base IOS XE software image is activated through software feature licenses (IP Base → AIS → AES → SEC → AppX). Additional capabilities — throughput upgrades, IPSec crypto throughput, broadband BNG sessions, 10GE port activation, firewall/NAT redundancy, and lawful intercept — are unlocked through individual right-to-use (RTU) licenses.

This collection covers all ASR 1000 license types: software feature packages, throughput upgrade licenses for each model, IPSec crypto licenses, broadband BNG session licenses, port activation licenses, and advanced feature licenses. All licenses are delivered electronically within 24 hours.

License Categories

  • Software Feature Licenses — IP Base, AIS, AES, Security, AppX (platform-wide, any ASR 1000 model)
  • Throughput Upgrade Licenses — Increase system bandwidth (per-model: 1001-X, 1002-X)
  • Crypto & IPSec Licenses — Enable and scale VPN encryption throughput (per-model)
  • Broadband BNG Licenses — Subscriber session capacity from 4K to 64K
  • Port Activation Licenses — Enable 10GE / 1GE ports on -X and -HX models
  • Advanced Feature Licenses — FW/NAT redundancy, IOS redundancy, Lawful Intercept, NAT64, FPI, CUBE
Not sure which license you need? Select your model and requirements:
My ASR model
I need

Supported Router Models

  • Cisco ASR 1001
  • Cisco ASR 1001-X
  • Cisco ASR 1001-HX
  • Cisco ASR 1002-X
  • Cisco ASR 1002-HX
  • Cisco ASR 1002 (fixed)
  • Cisco ASR 1004 (modular)
  • Cisco ASR 1006 (modular)
  • Cisco ASR 1013 (modular)

1. Software Feature Licenses Platform-wide

These licenses apply to any ASR 1000 model and are hierarchical — each higher tier includes all features from lower tiers.

Package Part number Features included
IPB IP Base L-SLASR1-IPB Base IOS XE routing · BGP / OSPF / EIGRP · IPv4/IPv6 · MPLS · QoS · NetFlow · Entry-level feature set included with all ASR 1000 hardware
AIS Adv. IP Services L-SLASR1-AIS All IP Base features + MPLS-TE · VRF-Lite · L2VPN / L3VPN · Multicast VPN · IP SLA · Advanced BGP policies
AES Adv. Enterprise L-SLASR1-AES All AIS features + AppNav (WAAS) · Performance Routing (PfR) · NBAR2 application recognition · OTV (Overlay Transport Virtualization)
SEC Security L-SL-ASR1-SEC All AES features + IPsec VPN · Zone-based firewall · SSL VPN · GET VPN · IOS IPS · DMVPN hub/spoke — recommended for edge/WAN deployments
APP AppX L-SL-ASR1-APP All SEC features + Full WAAS WAN optimization · Application visibility & control (AVC) · Advanced application performance — comprehensive all-in-one license

2. Throughput Upgrade Licenses Per-model

Increase the aggregate system bandwidth of your ASR 1000 router. Select your model and desired throughput tier.

ASR 1001 (Base)

Upgrade Part number Result
2.5G to 5G L-FLS-ASR1001-5G 5 Gbps aggregate throughput

ASR 1001-X

Upgrade path Part number Result
2.5G → 5G L-FLSA1-1X-2.5-5G 5 Gbps
2.5G → 10G L-FLSA1-1X-2.5-10G 10 Gbps
2.5G → 20G L-FLSA1-1X-2.5-20G 20 Gbps
5G → 10G L-FLSA1-1X-5-10G 10 Gbps
5G → 20G L-FLSA1-1X-5-20G 20 Gbps
10G → 20G L-FLSA1-1X-10-20G 20 Gbps

ASR 1002-X

Upgrade path Part number Result
5G → 10G L-FLSA1-2X-5-10G 10 Gbps
5G → 20G L-FLSA1-2X-5-20G 20 Gbps
5G → 36G L-FLSA1-2X-5-36G 36 Gbps
10G → 20G L-FLSA1-2X-10-20G 20 Gbps
10G → 36G L-FLSA1-2X-10-36G 36 Gbps

3. Crypto & IPSec Licenses Per-model

Enable and scale IPsec VPN encryption throughput. Required for VPN termination, DMVPN, and GET VPN deployments.

Model Part number Description
ASR 1000 (platform) FLSASR1-IPSEC L-FL-ASR1-IPSEC Base IPSec crypto license — enables VPN encryption on any ASR 1000
ASR 1001-HX L-FLSA1-1HXIPS8G L-FLSA1-1HX8G16G 8G IPSec base · 8G→16G crypto throughput upgrade
ASR 1002-HX L-FLSA1-2HXIPS8G L-FLSA1-2HX8G16G L-FLSA1-2HX16G25G L-FLSA1-2HX8G25G 8G IPSec base · 8G→16G · 16G→25G · 8G→25G crypto upgrades
ASR 1002-X L-FLSA1-2X-IPS4G 4G IPSec crypto bandwidth license

4. Broadband BNG Session Licenses Platform-wide

Right-to-use licenses for Broadband Network Gateway (BNG) subscriber session capacity. Available in tiers from 4K to 64K sessions.

Session capacity Part numbers Use case
4,000 sessions L-FLASR1-BB-4K L-FLSASR1-BB-4K Small ISP / pilot deployment
16,000 sessions L-FLASR1-BB-16K L-FLSASR1-BB-16K Regional ISP / medium deployment
32,000 sessions L-FLASR1-BB-32K L-FLSASR1-BB-32K Large regional ISP
48,000 sessions L-FLASR1-BB-48K National carrier / large aggregation
64,000 sessions L-FLASR1-BB-64K Maximum density / tier-1 carrier

5. Port Activation Licenses Per-model

Model Part number Description
ASR 1001-X L-FLSA1-BIN-1X10GE L-FLSA1-BIN-2X10GE-P Activate 1×10GE port · Activate 2×10GE ports
ASR 1000-HX L-FLSA1-HX-2X10GE L-FLSA1-HX-2X1GE Activate 2×10GE ports · Activate 2×1GE ports

6. Advanced Feature Licenses Platform-wide

Feature Part number Description
FW/NAT Redundancy L-FLASR1-FWNAT-RED L-FLSASR1-FWNAT-R Stateful firewall & NAT failover between dual ASR 1000 chassis
IOS Redundancy L-FLSASR1-IOSRED IOS XE software redundancy for ISSU (In-Service Software Upgrade)
Lawful Intercept L-FLSASR1-LI Enables lawful intercept capability for service provider compliance
Flexible Packet Inspection L-FLSASR1-FPI Deep packet inspection for application-aware traffic management
NAT64 (2M Sessions) L-FLSASR1-NAT64-2M Carrier-grade NAT64 translation — supports 2 million concurrent sessions
CUBE Enterprise 100 L-FLSASR1-CUE-100 Cisco Unified Border Element — 100 concurrent SIP sessions

Frequently Asked Questions — ASR 1000 Licensing

What is the Cisco ASR 1000 licensing model?

Cisco ASR 1000 uses a modular right-to-use (RTU) licensing model based on IOS XE. Unlike DNA/Smart Licensing on newer platforms, ASR 1000 licenses are perpetual RTU licenses — pay once, use forever. Key license categories include:

  • Software Feature Licenses — Hierarchical packages (IPB → AIS → AES → SEC → AppX) that unlock IOS XE features platform-wide.
  • Throughput Licenses — Per-model bandwidth upgrades (2.5G–36G) applied to the chassis.
  • Crypto/IPSEC, BNG, Port Activation, and Advanced Feature Licenses — Individual RTU add-ons.

No Smart Account, no CSSM registration, no renewal required. Just provide your router's UDI and install the license file.

Are ASR 1000 software feature licenses hierarchical?

Yes. The five feature packages form a strict hierarchy: IP Base ⊂ AIS ⊂ AES ⊂ SEC ⊂ AppX. Each higher tier includes all features from lower tiers:

  • L-SLASR1-IPB — Core routing (BGP/OSPF/MPLS)
  • L-SLASR1-AIS — +MPLS-TE, L2VPN/L3VPN, VRF-Lite, Multicast VPN
  • L-SLASR1-AES — +AppNav WAAS, PfR, NBAR2, OTV
  • L-SL-ASR1-SEC — +IPsec VPN, ZBFW, SSL VPN, GET VPN, DMVPN
  • L-SL-ASR1-APP — +Full WAAS, AVC, advanced app performance

You only need ONE feature license per chassis — pick the tier that matches your required feature set.

How do throughput upgrade licenses work on ASR 1000?

Throughput upgrade licenses increase the aggregate system bandwidth of your ASR 1000 router. Key points:

  • Each model has its own specific throughput licenses — an ASR 1001-X license won't work on an ASR 1002-X.
  • Licenses are sold as upgrade paths (e.g., 2.5G→10G, 5G→20G). You buy the license matching your current and target throughput.
  • The ASR 1001-X starts at 2.5 Gbps default and can go up to 20 Gbps. The ASR 1002-X starts at 5 Gbps and scales to 36 Gbps.
  • Throughput licenses are cumulative — if you later need more bandwidth, you can buy additional upgrade licenses.
Do I need a separate crypto license for IPsec VPN on ASR 1000?

Yes. Even if you have the SEC or AppX feature license (which enables IPsec as a software feature), you need a separate crypto throughput license to determine how much encrypted bandwidth your router can process:

  • Platform-wide: FLSASR1-IPSEC or L-FL-ASR1-IPSEC enables base IPsec crypto.
  • Per-model crypto throughput: L-FLSA1-1HXIPS8G (8G on 1001-HX), L-FLSA1-2HX8G16G (8G→16G on 1002-HX), L-FLSA1-2X-IPS4G (4G on 1002-X).

Without a crypto license, IPsec VPN throughput is limited to the default unlicensed rate (typically well below the system bandwidth).

How quickly will I receive my ASR 1000 license after purchase?

Most ASR 1000 licenses are delivered within 2–12 hours of order confirmation and UDI submission. All you need to provide is the output of show license udi from your router. The license file (.lic) is sent by email — copy it to flash and install with the license install command. No reload required. If you need expedited delivery, contact us before ordering.

Complete ASR 1000 License Catalog — 45 Products (click to browse)
L-SLASR1-IPB — IP Base License L-SLASR1-AIS — Adv. IP Services License L-SLASR1-AES — Adv. Enterprise License L-SL-ASR1-SEC — Security License L-SL-ASR1-APP — AppX License L-FLS-ASR1001-5G — ASR 1001 5G Upgrade L-FLSA1-1X-2.5-5G — 1001-X 2.5G→5G L-FLSA1-1X-2.5-10G — 1001-X 2.5G→10G L-FLSA1-1X-2.5-20G — 1001-X 2.5G→20G L-FLSA1-1X-5-10G — 1001-X 5G→10G L-FLSA1-1X-5-20G — 1001-X 5G→20G L-FLSA1-1X-10-20G — 1001-X 10G→20G L-FLSA1-2X-5-10G — 1002-X 5G→10G L-FLSA1-2X-5-20G — 1002-X 5G→20G L-FLSA1-2X-5-36G — 1002-X 5G→36G L-FLSA1-2X-10-20G — 1002-X 10G→20G L-FLSA1-2X-10-36G — 1002-X 10G→36G FLSASR1-IPSEC — IPSec Crypto License L-FL-ASR1-IPSEC — IPSec Crypto License L-FLSA1-1HXIPS8G — 1001-HX 8G IPSec L-FLSA1-1HX8G16G — 1001-HX 8G→16G Crypto L-FLSA1-2HXIPS8G — 1002-HX 8G IPSec L-FLSA1-2HX8G16G — 1002-HX 8G→16G Crypto L-FLSA1-2HX16G25G — 1002-HX 16G→25G Crypto L-FLSA1-2HX8G25G — 1002-HX 8G→25G Crypto L-FLSA1-2X-IPS4G — 1002-X 4G IPSec L-FLASR1-BB-4K — BNG 4K Sessions L-FLSASR1-BB-4K — BNG 4K Sessions L-FLASR1-BB-16K — BNG 16K Sessions L-FLSASR1-BB-16K — BNG 16K Sessions L-FLASR1-BB-32K — BNG 32K Sessions L-FLSASR1-BB-32K — BNG 32K Sessions L-FLASR1-BB-48K — BNG 48K Sessions L-FLASR1-BB-64K — BNG 64K Sessions L-FLSA1-BIN-1X10GE — 1001-X 1×10GE Port L-FLSA1-BIN-2X10GE-P — 1001-X 2×10GE Ports L-FLSA1-HX-2X10GE — HX 2×10GE Ports L-FLSA1-HX-2X1GE — HX 2×1GE Ports L-FLASR1-FWNAT-RED — FW/NAT Redundancy L-FLSASR1-FWNAT-R — FW/NAT Redundancy L-FLSASR1-IOSRED — IOS Redundancy L-FLSASR1-LI — Lawful Intercept L-FLSASR1-FPI — Flexible Packet Inspection L-FLSASR1-NAT64-2M — NAT64 2M Sessions L-FLSASR1-CUE-100 — CUBE Enterprise 100
Place order
Secure checkout via PayPal or card
Send device info
Run show license udi on your router
Receive license
License file emailed within 24 hours
Install on router
One CLI command — instant activation
Free support
We help if anything goes wrong
Disclaimer: This is an independent reseller. We are not affiliated with Cisco Systems. All licenses are genuine Cisco licenses issued through authorized channels. Cisco, IOS, IOS XE, ASR 1000, and related marks are registered trademarks of Cisco Systems, Inc.