topic Re: ASA5505-50-BUN-K9 3DES license problem in Network Security

ASA5505-50-BUN-K9 3DES license problem [Resolved]

Houari DALI YOUCEF — Fri, 21 Feb 2020 12:47:20 GMT

Hi,

I have ASA505 with 3DES disabled, i heard that i can have the 3DES license without fee, so i contacted cisco more than 10 times to have the license, and every time they send me the same licence as my parmanent base key: 5321ec6e 102e534b fc21e96c 841c8ca8 ce1727aa

I don't understand the problem, here is the show activation key output:

Running Permanent Activation Key: 
0x5321ec6e 0x102e534b 0xfc21e96c 0x841c8ca8 0xce1727aa

Licensed features for this platform:

Maximum Physical Interfaces    : 8              perpetual

VLANs                          : 3              DMZ Restricted

Dual ISPs                      : Disabled       perpetual

VLAN Trunk Ports               : 0              perpetual

Inside Hosts                   : 50             perpetual

Failover                       : Disabled       perpetual

VPN-DES                        : Enabled        perpetual

VPN-3DES-AES                   : Disabled       perpetual

SSL VPN Peers                  : 2              perpetual

Total VPN Peers                : 10             perpetual

Shared License                 : Disabled       perpetual

AnyConnect for Mobile          : Disabled       perpetual

AnyConnect for Cisco VPN Phone : Disabled       perpetual

AnyConnect Essentials          : Disabled       perpetual

Advanced Endpoint Assessment   : Disabled       perpetual

Botnet Traffic Filter          : Disabled       perpetual

Intercompany Media Engine      : Disabled       perpetual

This platform has a Base license.

The flash permanent activation key is the SAME as the running permanent key.

And the license key that cisco send me every time isexactely the same but it should activate the 3DES encryption algorithm:

Inside Hosts                    : 50

Failover                        : Disabled

Encryption-DES                  : Enabled

Encryption-3DES-AES             : Enabled

Security Contexts               : Default

GTP/GPRS                        : Disabled

AnyConnect Premium Peers        : Default

Other VPN Peers                 : Default

Advanced Endpoint Assessment    : Disabled

AnyConnect for Mobile           : Disabled

AnyConnect for Cisco VPN Phone  : Disabled

Shared License                  : Disabled

UC Phone Proxy Sessions         : Default

Total UC Proxy Sessions         : Default

AnyConnect Essentials           : Disabled

Botnet Traffic Filter           : Disabled

Intercompany Media Engine       : Disabled

Platform = asa

JMX152040DW: 5321ec6e 102e534b fc21e96c 841c8ca8 ce1727aa

Can someone tell me where is the problem please?

Thank you in advance.

ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Wed, 21 Nov 2012 16:12:01 GMT

Plugging that serial number into the licensing tool get the activation key you noted but also the text:

"ASA5500-ENCR-K9

Warning, our records indicate that the Cisco ASA Firewall hardware serial NUMBER that you submitted during registration has previously been licensed FOR A higher feature SET."

What other licensing has been done on this ASA? Are you the original owner? You may have to call the TAC to sort it out if you aren't.

ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Wed, 21 Nov 2012 17:37:33 GMT

Hi Marvin,

Thank you for response

I bought it new from a reseller(not directly from cisco representative), and i unpacked it by my self(it was new).

I already called the TAC, and they sent me exactly the same activation key.

Should i recall them?

Thank you.

ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Sat, 24 Nov 2012 19:33:16 GMT

Yes, I would contact the TAC again and have them stay on the line with you to resolve completely. Something is amiss with your license and they should be able to make it right.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Tue, 27 Nov 2012 11:09:32 GMT

I called them twice time today, the first one i've received the same license.

The second time, TAC has leveled-up my request after that i send them the screen-shoot and the result of show version.

Hope that i will get the problem resolved.

I will keep you posted.

Thank you.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Wed, 05 Dec 2012 09:37:28 GMT

Here is there last response (04/12/2012 14:26 from Peter Christian Avengoza):

Dear Houari Dali Youcef,

This is the same license key.

JMX152040DW: 5321ec6e 102e534b fc21e96c 841c8ca8 ce1727aa

However please send me the ?show activation-key detail? and please try to reload the ASA5505 and see how it looks.

If you need further assistance with this software license request, please let me know and I will be glad to assist you. Otherwise, if I do not hear back from you, I will file this case as ?resolved?.

Thank you for contacting Cisco.

What can i do more ? i sent to them the show activation-key, and i reloaded the firewall !

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Sat, 15 Dec 2012 15:26:43 GMT

Here is there last response:

K8 and K9 are only license.

You can get images for this ASA:

http://software.cisco.com/download/release.html?mdfid=280582808&flowid=4377&softwareid=280775065&release=9.1.1.ED&relind=AVAILABLE&rellifecycle=&reltype=latest

Please provide me with output of show tech for this ASA.

But i couldn't download the image beacause i don't have service contrat ID. Is it impossible to get this image without this service contrat ?

Thank you!

Re: ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Sat, 15 Dec 2012 15:32:24 GMT

As I noted ealier, request they escalate your service request to resolve satisfactorily.

This should have no connection to the image version. If the new device has a corrupted image and you do not have a support contract AND you are within the initial 90 day warranty, the TAC should be able to help you with direct access to a good image.

Again, you would still need to escalate the service request.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Sat, 15 Dec 2012 18:14:15 GMT

They already escalted my service request, here is:

2012/12/15 12.32:

Hi Houari,

I have escalated your issue again to the Business Unit to check what is the cause of the problem that you are getting. Kindly bear with us.

Best regards,

Peter Christian Avengoza

And i bought for about 6 month ago.

How do i chech if i have a corrupted image on my firewall?

Here is other email they sent to me:

2012/12/15 12:08:

I have opened a new TAC case (624204757) for you because you ASA device JMX152040DW is running a "NPE" image. This image is not capable of supporting K8/K9,we need to verify if the NPE device can be updated to K8/K9 simply by replacing the SW image (or if not, it would need to be RMA'ed).

Can you please explain me what this means ? (RMA'ed ??)

Thank you very much for your help Marvin.

Re: ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Sat, 15 Dec 2012 18:52:06 GMT

You're welcome.

NPE means No Payload Encryption. I did not think to ask earlier, but if you are in a country for whom the US has forbidden export of products containing strong encryption, you would not be eligible for a 3DES-AES image and activation.

General Reference:

http://www.cisco.com/web/about/doing_business/legal/global_export_trade/general_export/contract_compliance.html

List of countries affected:

http://www.cisco.com/web/about/doing_business/legal/global_export_trade/general_export/faqs.html#Q7

An RMA is a Return Material Authorization. It means Cisco will ship a new device in exchange for one they determine to be inoperable.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Sat, 15 Dec 2012 19:06:33 GMT

Yes, but i'm from Algeria, i don't belong to those group of country

Re: ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Sat, 15 Dec 2012 19:10:08 GMT

That's good - so the TAC should be able to get you resolved with a new image and activation key.

I'm just guessing but your equipment may have originally been part of an allocation that went to a reseller that did business with your neighboring country of Libya which is restricted.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Sat, 15 Dec 2012 19:14:50 GMT

I Hope not, i'm going to verify this tomorrow in morning.

I'll keep you posted.

Thank you again.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Thu, 20 Dec 2012 20:29:36 GMT

Hi,

I had to download this file: http://software.cisco.com/download/release.html?mdfid=280582808&flowid=4377&softwareid=280775065&release=9.1.1.ED&relind=AVAILABLE&rellifecycle=&reltype=latest

I asked a friend who get a valid service contrat and so have a ability to download the image for me.

The file is named: asa911-k8.bin

Do you know how to proceed the update? is there a risk that my firewall will not work correctly ?

Thank you.

Re: ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Thu, 20 Dec 2012 20:47:00 GMT

Houari,

Sorry the TAC did not provide your software. As a new purchase, it should have been entitled.

What is your current software version and how much memory does your 5505 have? Running 8.3 or later on the 5505 requires 512 MB of memory. Reference. You should also be upgrading the ASDM software image to the current release.

A system software upgrade will cause a loss of service while the system reloads. If done correctly it will only be brief (<5 minutes). The ASDM upgrade does not cause any service interruption.

There is always some risk but follow the upgrade procedure and it should go fine. It is most easily done via the ASDM GUI.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Thu, 20 Dec 2012 21:11:02 GMT

Result of the command: "show tech-support"

Cisco Adaptive Security Appliance Software Version 8.3(2)

Device Manager Version 6.3(2)

Compiled on Fri 30-Jul-10 20:17 by builders

System image file is "disk0:/asa832-npe-k8.bin"

Config file at boot was "startup-config"

ciscoasa up 11 days 12 hours

Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz

Internal ATA Compact Flash, 128MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB

It has all requirements.

I'm trying to find how to update my firewall using ASDM GUI...

Re: ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Thu, 20 Dec 2012 21:26:10 GMT

Yes, your memory is good.

To update via the GUI, Choose "Tools, Upgrade Software from Local Computer". In the dialog box that pops up pick "Image to upload" as ASA (not the default APCF) and then browse to your local copy of the new software. It will then upload the file using https to your ASA disk0, ask you if you want to make this the new boot image (choose yes) and then ask if you want to reload and upgrade now.

Remember the updated ASDM (asdm-711.bin) will give you the most functionality with the new release. You should follow the similar process to get it on the ASA, choosing instead ASDM from the "Image to Upload" drop down menu. You won't have to reload the ASA itself after you do that, only the ASDM client.

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Fri, 21 Dec 2012 19:31:41 GMT

I update the ASA with asa911-k8.bin correctly.

But after i reloaded to install the new ASDM, i got message showig that the ASA 9.1 is not supported by ASDM 6.

After i could not connect to firewall using ASDM, i tryed the ssh:

I uploaded the asdm file asdm-711-52.bin, and when i try to make it default, i got an error:

ciscoasa# asdm image disk0:/asdm-711-52.bin

ERROR: % Invalid input detected at '^' marker.

The command is wrong ?

I proceeded using this article:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008067e9f9.shtml#maintask2

Here is some output:

Writing file disk0:/asdm-711-52.bin...

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

17790720 bytes copied in 37.990 secs (480830 bytes/sec)

ciscoasa# show disk0:

--#-- --length-- -----date/time------ path

154 15962112 May 13 2011 14:12:22 asa832-npe-k8.bin

155 2048 Apr 02 2012 20:21:40 syslog

191 0 Apr 02 2012 20:21:40 syslog/LOG-2012-04-02-202141.TXT

156 2048 Jan 01 1980 01:00:00 FSCK0000.REC

20 2048 May 13 2011 14:13:36 coredumpinfo

21 59 Dec 20 2012 23:25:36 coredumpinfo/coredump.cfg

157 14457072 May 13 2011 14:14:22 asdm-632.bin

10 2048 May 13 2011 14:15:34 log

19 2048 Aug 06 2012 15:43:38 crypto_archive

193 410212 Aug 06 2012 15:43:38 crypto_archive/crypto_arch_1.bin

158 27260928 Dec 20 2012 23:18:18 asa911-k8.bin

159 4096 Jan 01 1980 01:00:00 FSCK0001.REC

161 4096 Jan 01 1980 01:00:00 FSCK0002.REC

162 12998641 May 13 2011 14:19:40 csd_3.5.2008-k9.pkg

163 2048 May 13 2011 14:19:42 sdesktop

195 1462 May 13 2011 14:19:42 sdesktop/data.xml

164 6487517 May 13 2011 14:19:44 anyconnect-macosx-i386-2.5.2014-k9.pkg

165 6689498 May 13 2011 14:19:46 anyconnect-linux-2.5.2014-k9.pkg

166 4678691 May 13 2011 14:19:48 anyconnect-win-2.5.2014-k9.pkg

167 4096 Jan 01 1980 01:00:00 FSCK0003.REC

168 4096 Jan 01 1980 01:00:00 FSCK0004.REC

169 6144 Jan 01 1980 01:00:00 FSCK0005.REC

170 6144 Jan 01 1980 01:00:00 FSCK0006.REC

171 6144 Jan 01 1980 01:00:00 FSCK0007.REC

172 22528 Jan 01 1980 01:00:00 FSCK0008.REC

173 38912 Jan 01 1980 01:00:00 FSCK0009.REC

174 34816 Jan 01 1980 01:00:00 FSCK0010.REC

175 43008 Jan 01 1980 01:00:00 FSCK0011.REC

176 2048 Jan 01 1980 01:00:00 FSCK0012.REC

177 26624 Jan 01 1980 01:00:00 FSCK0013.REC

178 2048 Jan 01 1980 01:00:00 FSCK0014.REC

179 26624 Jan 01 1980 01:00:00 FSCK0015.REC

180 2048 Jan 01 1980 01:00:00 FSCK0016.REC

181 26624 Jan 01 1980 01:00:00 FSCK0017.REC

182 2048 Jan 01 1980 01:00:00 FSCK0018.REC

183 26624 Jan 01 1980 01:00:00 FSCK0019.REC

184 2048 Jan 01 1980 01:00:00 FSCK0020.REC

120 6791 Dec 21 2012 19:30:48 8_3_2_0_startup_cfg.sav

185 568 Dec 20 2012 23:25:36 upgrade_startup_errors_201212202225.log

186 568 Dec 21 2012 17:39:28 upgrade_startup_errors_201212211639.log

189 568 Dec 21 2012 19:30:56 upgrade_startup_errors_201212211830.log

190 17790720 Dec 21 2012 20:19:06 asdm-711-52.bin

128704512 bytes total (21164032 bytes free)

ciscoasa# asdm image disk0:/asdm-711-52.bin

ERROR: % Invalid input detected at '^' marker.

ciscoasa# asdm ?

disconnect Specify ASDM session id to be disconnected after this keyword

Can you help me please ?

PS: resolved by entring the command: conf t

Re: ASA5505-50-BUN-K9 3DES license problem

Houari DALI YOUCEF — Fri, 21 Dec 2012 20:10:19 GMT

Yeeeesssssss!

The problem is solved!

Upgraded ASA version from 6.3(2) to 7.1(1) 52

Upgraded ASDM version from 8.3(2) to 9.1(1)

And result: the 3DES enabled like a charm:

Result of the command: "show version"

Cisco Adaptive Security Appliance Software Version 9.1(1)

Device Manager Version 7.1(1)52

Compiled on Wed 28-Nov-12 10:38 by builders

System image file is "disk0:/asa911-k8.bin"

Config file at boot was "startup-config"

ciscoasa up 11 mins 51 secs

Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz,

Internal ATA Compact Flash, 128MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)

Boot microcode : CN1000-MC-BOOT-2.00

SSL/IKE microcode : CNLite-MC-SSLm-PLUS-2.03

IPSec microcode : CNlite-MC-IPSECm-MAIN-2.08

Number of accelerators: 1

0: Int: Internal-Data0/0 : address is e8b7.4836.9f54, irq 11

1: Ext: Ethernet0/0 : address is e8b7.4836.9f4c, irq 255

2: Ext: Ethernet0/1 : address is e8b7.4836.9f4d, irq 255

3: Ext: Ethernet0/2 : address is e8b7.4836.9f4e, irq 255

4: Ext: Ethernet0/3 : address is e8b7.4836.9f4f, irq 255

5: Ext: Ethernet0/4 : address is e8b7.4836.9f50, irq 255

6: Ext: Ethernet0/5 : address is e8b7.4836.9f51, irq 255

7: Ext: Ethernet0/6 : address is e8b7.4836.9f52, irq 255

8: Ext: Ethernet0/7 : address is e8b7.4836.9f53, irq 255

9: Int: Internal-Data0/1 : address is 0000.0003.0002, irq 255

10: Int: Not used : irq 255

11: Int: Not used : irq 255

Licensed features for this platform:

Maximum Physical Interfaces : 8 perpetual

VLANs : 3 DMZ Restricted

Dual ISPs : Disabled perpetual

VLAN Trunk Ports : 0 perpetual

Inside Hosts : 50 perpetual

Failover : Disabled perpetual

Encryption-DES : Enabled perpetual

Encryption-3DES-AES : Enabled perpetual

AnyConnect Premium Peers : 2 perpetual

AnyConnect Essentials : Disabled perpetual

Other VPN Peers : 10 perpetual

Total VPN Peers : 12 perpetual

Shared License : Disabled perpetual

AnyConnect for Mobile : Disabled perpetual

AnyConnect for Cisco VPN Phone : Disabled perpetual

Advanced Endpoint Assessment : Disabled perpetual

UC Phone Proxy Sessions : 2 perpetual

Total UC Proxy Sessions : 2 perpetual

Botnet Traffic Filter : Disabled perpetual

Intercompany Media Engine : Disabled perpetual

Cluster : Disabled perpetual

This platform has a Base license.

Serial Number: JMX152040DW

Running Permanent Activation Key: 0x5321ec6e 0x102e534b 0xfc21e96c 0x841c8ca8 0xce1727aa

Configuration register is 0x1

Configuration last modified by enable_15 at 20:56:49.179 CET Fri Dec 21 2012

Last thing please, do i have to delete the old asa and asdm files from firewall ? (asa832-npe-k8.bin and

asdm-632.bin)

Thank you so much Mr Marvin Rhoads

Re: ASA5505-50-BUN-K9 3DES license problem

Marvin Rhoads — Fri, 21 Dec 2012 21:28:58 GMT

You're welcome Houari. I'm glad it worked out well for you.

Yes you can delete the old ASA and ASDM binary images if eerything is working OK on the new images.

You can also delete all of those fsck____.rec files (file system check records - usually due to the box reloading after software having crashed or being shut down by hard power off).

The "upgrade_startup_errors: fiules can also be deleted once you've reviewed them for any issues reported during the upgrade process. (You can look at those plain text files from CLI with the command "more" followed by the filename.)

Thanks for the ratings.