topic Re: activate ASA 5506 in Network Security

activate ASA 5506

Mohamed Abdullah — Tue, 24 Nov 2020 12:22:25 GMT

HI,

I want to renew my asa license, i register the device from Product License Registration form and downloaded license file

how i get the activation key from this lic file or how use this license to renew my ASA

Re: activate ASA 5506

balaji.bandi — Tue, 24 Nov 2020 12:28:23 GMT

what is the version of Code on ASA

in general :

config t

activation-key <license>

write - may required reload

check activation :

# show activation-key

more information can be find here :

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/intro-license.html

Re: activate ASA 5506

Mohamed Abdullah — Tue, 24 Nov 2020 13:12:13 GMT

@balaji.bandi

i dont have the activation key, when i create license

i receive fie with extension LIC not the activation key how get my activation key

Re: activate ASA 5506

balaji.bandi — Tue, 24 Nov 2020 14:00:02 GMT

"show version" and "show activation-key" from ASA to advise correctly ?

Re: activate ASA 5506

Marvin Rhoads — Tue, 24 Nov 2020 14:15:25 GMT

What license are you talking about? The base ASA doesn't require a license and (as @balaji.bandi noted, uses activation keys for licensedfeatures such as 3DES-AES, VPN etc.).

The Firepower service module uses .lic files. You add those in either ASDM (for locally managed) or Firepower Management center (for FMC-managed).

If you're asking about the Firepower service module, then please share the output of the following to show us which type of management yours is using:

show module sfr detail

Re: activate ASA 5506

Mohamed Abdullah — Tue, 24 Nov 2020 14:17:40 GMT

@balaji.bandi

ASA 5506

ASA v 9.6 & ASDM v 7.6

Re: activate ASA 5506

Mohamed Abdullah — Tue, 24 Nov 2020 14:27:15 GMT

@Marvin Rhoads

i use ASDM to mange my ASA 5506

Re: activate ASA 5506

balaji.bandi — Tue, 24 Nov 2020 14:50:58 GMT

ASA itself is same procedure as i have suggested. if you are referring as mentioned @Marvin Rhoads SFR module we need to know

this can only possible, if you can provide full information

post full information by removing sensitive information :

show version

show modules

show module sfr detail

Re: activate ASA 5506

Marvin Rhoads — Sun, 29 Nov 2020 11:47:41 GMT

So if is the Firepower service module license key, that is a plain text file. Open the .lic file in a text editor (such as notepad or notepad++) and paste it into ASDM under Configuration > ASA Firepower Configuration > Licenses.

Reference:

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/200376-Obtain-the-License-Key-for-a-Firepower-D.html#anc3

Re: activate ASA 5506

Mohamed Abdullah — Sun, 29 Nov 2020 08:58:15 GMT

@Marvin Rhoads

I dont found this tap in my ASA management see this photo

Re: activate ASA 5506

Marvin Rhoads — Sun, 29 Nov 2020 11:48:53 GMT

As noted already, please share the output of:

show module sfr detail

Re: activate ASA 5506

Mohamed Abdullah — Sun, 29 Nov 2020 12:13:44 GMT

@Marvin Rhoads

# show module sfr details
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5506
Hardware version: N/A
Serial Number: JAD2119034R
Firmware version: N/A
Software version: 5.4.1-211
MAC Address Range: a023.9fb9.d7cb to a023.9fb9.d7cb
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 5.4.1-211
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr:
Mgmt IP addr: 192.168.4.254
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 0.0.0.0
Mgmt web ports: 443
Mgmt TLS enabled: true

Re: activate ASA 5506

Aref Alsouqi — Sun, 29 Nov 2020 14:02:50 GMT

If you click on the little arrow at the bottom of the left hand pane underneath Device Management, do you see any additional tab called ASA FirePOWER Configuration?, if so, click on that, and go to Licenses page and follow what @Marvin Rhoads suggested please.

Re: activate ASA 5506

Marvin Rhoads — Sun, 29 Nov 2020 15:02:08 GMT

It appears you have an old ASA 5506 with an unconfigured Firepower service module.

You would need to reimage it to a current supported release (5.4.1 that you have is very old and not supported with current ASA releases) and then configure it with a basic IP address, gateway etc. Only then would it appear in ASDM and be able to take the license file that you have.