ASA 5510 Anyconnect Licensing with Cisco IP phone using Anyconnect VPN

[leoruben2308]

Hi, hoping anyone can shed some light on this I am just getting more confused the more I try to work it out.

We have an ASA 5510 with the base license. We are needing to install IP Phones at remote workers homes, and I understand there are Cisco IP phones which have VPN clients built in to allow a tunnel to the central private network. IT appears that you can only use Anyconnect VPN for this, ans I am trying to work out what licencing upgrade we need to apply to the ASA, as the two Anyconnect licenses you get free on the ASA is not enough.

This is the phone we are looking to get;

http://www.cisco.com/en/US/prod/collateral/voicesw/ps6788/phones/ps10499/ps11005/data_sheet_c78-603725.html

What I want to know is will the Anyconnect Essentials license work with these IP phones?

When I do a show version,

Licensed features for this platform:

Maximum Physical Interfaces  : Unlimited

Maximum VLANs                : 50       

Inside Hosts                 : Unlimited

Failover                     : Disabled

VPN-DES                      : Enabled  

VPN-3DES-AES                 : Enabled  

Security Contexts            : 0        

GTP/GPRS                     : Disabled 

SSL VPN Peers                : 2        

Total VPN Peers              : 250      

Shared License               : Disabled

AnyConnect for Mobile        : Disabled 

AnyConnect for Linksys phone : Disabled 

AnyConnect Essentials        : Disabled 

Advanced Endpoint Assessment : Disabled 

UC Phone Proxy Sessions      : 2        

Total UC Proxy Sessions      : 2        

Botnet Traffic Filter        : Disabled 

This platform has a Base license.

It shows "AnyConnect for Linksys phone : Disabled", is this the same for Cisco IP Phones? Is this the specific licensing type I should be looking to get for Anyconnect on IP phones or will Essentials do?

[tpfrankli]

Take a look at the following for licensing information. The feature you're looking for is Cisco Phone Proxy on the ASA.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-509624.pdf

Also the configuration guide.

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/unified_comm_phoneproxy.html

~~~
Rate helpful posts
Blog - http://tripplehelix.net

[etamminga]

Hi,

have a look at this document https://supportforums.cisco.com/docs/DOC-9124.

The Phone Proxy is kind of old. You now need the any connect VPN for phone licenses.

Regards,
Erik

Sent from Cisco Technical Support iPad App

[leoruben2308]

Hi etamminga,

Thanks - reading that there is a part;

Note: A "Premium" license and an "AnyConnect for Cisco VPN Phone" license is required.

The ASA 5510 output shows;

"AnyConnect for Linksys phone : Disabled"

Instead of the "AnyConnect for Cisco VPN phone : Disabled" which it looks like it requires. I have no idea why this is the case, is this available on my 5510 with a newer version of the ASA? Im currently on ASA 8.2(1) .

And secondly, for the premuim licensing, if I were to buy the 10 user premium licensing, (L-ASA-SSL-10), is the

"AnyConnect for Cisco VPN Phone" another type of license I would have to buy on top of that then ? Or is this just enabled once you buy the premium licensing?

And another thing, would installing a 10 user premuim license have any effect on my current IPSec remote access VPN that users are using? The 250 IPSec vpn seats/licenses remain inchanged and usable right?

Why does Cisco make this so confusing!!!