ASA 5510 w/ Security Plus License lost contexts

[Ricardo Velazquez]

I have a ASA 5510 with Security Plus License and when I looked at the devices a few days ago I had 2 contexts, however after configuring the Mgm port as a regular port the contexts show 0, why?  I can not find any post on the internet where this issue has happen:  here is the output from show ver:

Cisco Adaptive Security Appliance Software Version 7.0(8)

Compiled on Sat 31-May-08 23:48 by builders

System image file is "disk0:/asa708-k8.bin"

Config file at boot was "startup-config"

SHIELDASA01 up 21 hours 16 mins

Hardware:   ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode   : CNlite-MC-Boot-Cisco-1.2

                             SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03

                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05

0: Ext: Ethernet0/0         : address is 0021.a025.2d3c, irq 9

1: Ext: Ethernet0/1         : address is 0021.a025.2d3d, irq 9

2: Ext: Ethernet0/2         : address is 0021.a025.2d3e, irq 9

3: Ext: Ethernet0/3         : address is 0021.a025.2d3f, irq 9

4: Ext: Management0/0       : address is 0021.a025.2d3b, irq 11

5: Int: Not used            : irq 11

6: Int: Not used            : irq 5

Licensed features for this platform:

Maximum Physical Interfaces : Unlimited

Maximum VLANs               : 25       

Inside Hosts                : Unlimited

Failover                    : Active/Standby

VPN-DES                     : Enabled  

VPN-3DES-AES                : Enabled  

Security Contexts           : 0        

GTP/GPRS                    : Disabled 

VPN Peers                   : 150      

This platform has an ASA 5510 Security Plus license.

I am not showing the serial number and licese keys for obivious reasons.  Any help? Thanks in advance.

[Rudy Sanjoko · Accepted solution]

You might want to try upgrading your IOS on the ASA, see if this helps, can you verify the firewall mode(single or multiple) you are currently on? is your asa transparant or routed?

[Ricardo Velazquez]

Upgrading the ASA from asa708-k8.bin to asa805-k8 worked!  Once I TFTP a newer version (not the latest) but it worked:  Here is the show ver result:  (some parts omitted)

Cisco Adaptive Security Appliance Software Version 8.0(5)

Compiled on Mon 02-Nov-09 21:22 by builders

System image file is "disk0:/asa805-k8.bin"

Config file at boot was "startup-config"

Licensed features for this platform:

Maximum Physical Interfaces  : Unlimited

Maximum VLANs                : 100      

Inside Hosts                 : Unlimited

Failover                     : Active/Active

VPN-DES                      : Enabled  

VPN-3DES-AES                 : Enabled  

Security Contexts            : 2        

GTP/GPRS                     : Disabled 

VPN Peers                    : 250      

WebVPN Peers                 : 2        

AnyConnect for Mobile        : Disabled 

AnyConnect for Linksys phone : Disabled 

Advanced Endpoint Assessment : Disabled 

UC Proxy Sessions            : 2        

This platform has an ASA 5510 Security Plus license.

Thanks Rudy great job!

[Rudy Sanjoko]

You're welcome, I believe you are also aware that the amount of peers and vlans also changed by upgrading the software, now you have the number that you should have by having security plus license on asa5510, which is good.