topic ASA5505 License Question in Network Security

ASA5505 License Question

ronald.lawrimore — Mon, 11 Mar 2019 20:43:33 GMT

I have a spare ASA5505 w/Base License that we want to use as the router/firewall between our wi-fi network and our secondary internet connection. Currently we have a NetGear box as the router there and it is on its last legs. In order for the ASA w/Base license to be able to issue over 150 IP address via DHCP which license do I need to purchase for it.

Thanks in advance.

Re: ASA5505 License Question

JORGE RODRIGUEZ — Thu, 09 Jun 2011 13:49:39 GMT

Ronald,

If you are trying to have ASA to act as a DHCP server you need Security plus license , the base license will not provide anthing over 128 addresses based on your user license where you can retreave by doing " show version "

To help you understand how to read license off the firewall in your current firewall the output of " show version" shoudl tell you how many inside hosts , if it saids 10 users then the DHCP feature will be limited to 32 hosts, if show version saids 50 users DHCP will be limited to 128 hosts..

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/d2.html#wp1904997

Best is to aquire the SEC PLUS license where the DHCP feature will be a complete /24 network..

Regards

ASA5505 License Question

ronald.lawrimore — Thu, 09 Jun 2011 13:53:40 GMT

Would this license do the same thing since it is cheaper than the Sec Plus.

http://www.cdw.com/shop/products/Cisco-ASA-5505-Software-license/1672222.aspx

ASA5505 License Question

kmccourt — Thu, 09 Jun 2011 14:50:17 GMT

A Sec Plus license on its own will NOT upgrade the users; it will convert your box into a 10-user Sec Plus, still with 32 DHCP clients maximum.

See Table 1 at

http://www.cisco.com/en/US/customer/docs/security/asa/asa84/license/license_management/license.html

An unlimited user license should allow you to have the maximum 250 DHCP clients, but it will still be a base license model unless you also add Sec Plus.

ASA5505 License Question

ronald.lawrimore — Thu, 09 Jun 2011 14:59:11 GMT

Does anyone have the PN for SecPlus w/ unlimited license for the ASA5505.

ASA5505 License Question

kmccourt — Thu, 09 Jun 2011 15:04:50 GMT

You have to do it with two separate licenses:

ASA5505-SW-10-UL (10 to unlimited upgrade)

ASA5505-SEC-PL=

If these codes are preceded by 'L' it means electronic license delivery instead of a physical shipment.

Note the distinction from the ASA 5505 Sec Plus 'bundle' that incudes the hardware as well as the unlimited license (ASA5505-SEC-BUN-K9)

ASA5505 License Question

ronald.lawrimore — Thu, 09 Jun 2011 15:06:33 GMT

Thank you very much. I think we will go with just the 10 to Unlimited for now. We don't need the other features the sec plus offers.

ASA5505 License Question

kmccourt — Thu, 09 Jun 2011 15:16:44 GMT

Good luck with the upgrade.

Page 10 of this pdf, http://www.cisco.com/web/tsweb/edelivery/pilot/SKUS.pdf

gives the full SKUs for the various licenses.