03-27-2021 05:28 AM
Hi Guys
I need get a license and activate-key for this Firewall below.
Any thoughts?
activation-key ?
<0x0-0xffffffff> Enter four-or-five-tuple activation-key
noconfirm Do not prompt for confirmation
Serial Number: XXXXXXXX
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Cisco ASA5516 FirePOWER IPS, AMP and URL Licenses
Hardware: ASA5516, 8192 MB RAM, CPU Atom C2000 series 2416 MHz, 1 CPU (8 cores)
Internal ATA Compact Flash, 8000MB
BIOS Flash M25P64 @ 0xfed01000, 16384KB
Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1
1: Ext: GigabitEthernet1/1 : address is e41f.7b9a.1302, irq 255
2: Ext: GigabitEthernet1/2 : address is e41f.7b9a.1303, irq 255
3: Ext: GigabitEthernet1/3 : address is e41f.7b9a.1304, irq 255
4: Ext: GigabitEthernet1/4 : address is e41f.7b9a.1305, irq 255
5: Ext: GigabitEthernet1/5 : address is e41f.7b9a.1306, irq 255
6: Ext: GigabitEthernet1/6 : address is e41f.7b9a.1307, irq 255
7: Ext: GigabitEthernet1/7 : address is e41f.7b9a.1308, irq 255
8: Ext: GigabitEthernet1/8 : address is e41f.7b9a.1309, irq 255
9: Int: Internal-Data1/1 : address is e41f.7b9a.1301, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is e41f.7b9a.1301, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0
The Running Activation Key is not valid, using default settings:
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 150 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 300 perpetual
Total VPN Peers : 300 perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 1000 perpetual
Botnet Traffic Filter : Disabled perpetual
Cluster : Disabled perpetual
VPN Load Balancing : Enabled perpetual
Serial Number: XXXXXXXX
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
Image type : Release
Key Version : A
I already open Cisco TAC Case as well.
03-27-2021 05:26 AM
Hi Guys
I need get a license and activate-key for this Firewall below.
Any thoughts?
activation-key ?
<0x0-0xffffffff> Enter four-or-five-tuple activation-key
noconfirm Do not prompt for confirmation
Serial Number: XXXXXXXX
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Cisco ASA5516 FirePOWER IPS, AMP and URL Licenses
Hardware: ASA5516, 8192 MB RAM, CPU Atom C2000 series 2416 MHz, 1 CPU (8 cores)
Internal ATA Compact Flash, 8000MB
BIOS Flash M25P64 @ 0xfed01000, 16384KB
Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1
1: Ext: GigabitEthernet1/1 : address is e41f.7b9a.1302, irq 255
2: Ext: GigabitEthernet1/2 : address is e41f.7b9a.1303, irq 255
3: Ext: GigabitEthernet1/3 : address is e41f.7b9a.1304, irq 255
4: Ext: GigabitEthernet1/4 : address is e41f.7b9a.1305, irq 255
5: Ext: GigabitEthernet1/5 : address is e41f.7b9a.1306, irq 255
6: Ext: GigabitEthernet1/6 : address is e41f.7b9a.1307, irq 255
7: Ext: GigabitEthernet1/7 : address is e41f.7b9a.1308, irq 255
8: Ext: GigabitEthernet1/8 : address is e41f.7b9a.1309, irq 255
9: Int: Internal-Data1/1 : address is e41f.7b9a.1301, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is e41f.7b9a.1301, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0
The Running Activation Key is not valid, using default settings:
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 150 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 300 perpetual
Total VPN Peers : 300 perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 1000 perpetual
Botnet Traffic Filter : Disabled perpetual
Cluster : Disabled perpetual
VPN Load Balancing : Enabled perpetual
Serial Number: XXXXXXXX
Running Permanent Activation Key: 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Configuration register is 0x1
Image type : Release
Key Version : A
I already open Cisco TAC Case as well.
03-27-2021 07:12 AM - edited 03-27-2021 07:52 AM
From that link I provided go to Get Licenses > Request Crypto, IPS and Other License.
Select Security Products > Cisco ASA 3DES/AES License
When request enter your serial number and you will receive the activation key by email.
Then from the ASA CLI you run the activation key command and paste the key
03-27-2021 06:19 PM
hi,
you didn't specify what feature license needed on your ASA.
assuming it's the 3DES/AES free license as everyone has mentioned, you just go to the cisco license portal (a valid CCO is needed).
see helpful link:
https://ccnpsecuritywannabe.blogspot.com/2018/07/cisco-asa-3desaes-free-license.html
03-27-2021 05:58 AM
Send an email to the Licensing Team.
03-27-2021 07:28 AM
The ASA doesn't need internet access to install an activation key. You need a cisco.com account though to get the free 3DES-AES activation key.
For the Firepower service module licenses you need to have purchased those but similarly you can just put info into the portal to get a key that you can then apply on your manager (local - ASDM or remote - FMC).
Email to licensing@cisco.com will autoreply directing you to open a TAC case.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide