cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2895
Views
0
Helpful
7
Replies

ASA 5585-X 10GE license

nantian021
Level 1
Level 1

hello 

 

  I have two ASA 5585-X in an Active/Standby failover.I  tried to install the 10GE license on both units. I am getting the below error. 

 

SHZF-DBFW-5585X-01# activation-key d81ace61 1838c7b5 7870a944 85949800 c73b0680
Validating activation key. This may take a few minutes...
The following features available in running permanent activation key are NOT
available in new permanent activation key:
Encryption-3DES-AES
WARNING: The running activation key was not updated with the requested key.
Proceed with update flash activation key? [confirm]
The flash permanent activation key was updated with the requested key,
and will become active after the next reload.
SHZF-DBFW-5585X-01#
SHZF-DBFW-5585X-01# wr

 after I reload the units, the license is not wok

SHZF-DBFW-5585X-01# show version

Cisco Adaptive Security Appliance Software Version 9.1(6)
Device Manager Version 7.12(1)

Compiled on Fri 27-Feb-15 14:30 PST by builders
System image file is "disk0:/asa916-smp-k8.bin"
Config file at boot was "startup-config"

SHZF-DBFW-5585X-01 up 2 mins 21 secs
failover cluster up 4 mins 35 secs

Hardware: ASA5585-SSP-10, 6144 MB RAM, CPU Xeon 5500 series 2000 MHz, 1 CPU (4 cores)
Internal ATA Compact Flash, 2048MB
BIOS Flash S25FL032P @ 0x0, 4096KB

Encryption hardware device : Cisco ASA-5585 on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-PLUS-T020
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1

Programmable device : Cisco CPLD revision 0x8

0: Int: Internal-Data0/0 : address is 0000.0001.0001, irq 5
2: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 10
3: Ext: Management0/0 : address is 0027.e373.2a44, irq 10
4: Ext: Management0/1 : address is 0027.e373.2a45, irq 5
16: Ext: GigabitEthernet0/0 : address is 0027.e373.2a46, irq 255
17: Ext: GigabitEthernet0/1 : address is 0027.e373.2a47, irq 255
18: Ext: GigabitEthernet0/2 : address is 0027.e373.2a48, irq 255
19: Ext: GigabitEthernet0/3 : address is 0027.e373.2a49, irq 255
20: Ext: GigabitEthernet0/4 : address is 0027.e373.2a4a, irq 255
21: Ext: GigabitEthernet0/5 : address is 0027.e373.2a4b, irq 255
22: Ext: GigabitEthernet0/6 : address is 0027.e373.2a4c, irq 255
23: Ext: GigabitEthernet0/7 : address is 0027.e373.2a4d, irq 255
24: Ext: TenGigabitEthernet0/8: address is 0027.e373.2a4e, irq 255
25: Ext: TenGigabitEthernet0/9: address is 0027.e373.2a4f, irq 255
26: Int: Internal-Data0/2 : address is 0000.0100.001b, irq 255
27: Int: Internal-Data0/3 : address is 0000.0100.001c, irq 255
28: Int: Not used : irq 255
29: Int: Not used : irq 255
30: Int: Not used : irq 255
31: Int: Not used : irq 255
32: Int: Not used : irq 255
33: Int: Not used : irq 255

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5585-SSP-10 VPN Premium license.


Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 4 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 4 perpetual
Total UC Proxy Sessions : 4 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5585-SSP-10 VPN Premium license.

Serial Number: JAD213400B2
Running Permanent Activation Key: 0xd81ace61 0x1838c7b5 0x7870a944 0x85949800 0xc73b0680
Configuration register is 0x1
Configuration last modified by enable_1 at 22:43:31.032 bjt Thu Oct 14 2021
SHZF-DBFW-5585X-01# $
SHZF-DBFW-5585X-01#
SHZF-DBFW-5585X-01# show version

Cisco Adaptive Security Appliance Software Version 9.1(6)
Device Manager Version 7.12(1)

Compiled on Fri 27-Feb-15 14:30 PST by builders
System image file is "disk0:/asa916-smp-k8.bin"
Config file at boot was "startup-config"

SHZF-DBFW-5585X-01 up 2 mins 31 secs
failover cluster up 4 mins 45 secs

Hardware: ASA5585-SSP-10, 6144 MB RAM, CPU Xeon 5500 series 2000 MHz, 1 CPU (4 cores)
Internal ATA Compact Flash, 2048MB
BIOS Flash S25FL032P @ 0x0, 4096KB

Encryption hardware device : Cisco ASA-5585 on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-PLUS-T020
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1

Programmable device : Cisco CPLD revision 0x8

0: Int: Internal-Data0/0 : address is 0000.0001.0001, irq 5
2: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 10
3: Ext: Management0/0 : address is 0027.e373.2a44, irq 10
4: Ext: Management0/1 : address is 0027.e373.2a45, irq 5
16: Ext: GigabitEthernet0/0 : address is 0027.e373.2a46, irq 255
17: Ext: GigabitEthernet0/1 : address is 0027.e373.2a47, irq 255
18: Ext: GigabitEthernet0/2 : address is 0027.e373.2a48, irq 255
19: Ext: GigabitEthernet0/3 : address is 0027.e373.2a49, irq 255
20: Ext: GigabitEthernet0/4 : address is 0027.e373.2a4a, irq 255
21: Ext: GigabitEthernet0/5 : address is 0027.e373.2a4b, irq 255
22: Ext: GigabitEthernet0/6 : address is 0027.e373.2a4c, irq 255
23: Ext: GigabitEthernet0/7 : address is 0027.e373.2a4d, irq 255
24: Ext: TenGigabitEthernet0/8: address is 0027.e373.2a4e, irq 255
25: Ext: TenGigabitEthernet0/9: address is 0027.e373.2a4f, irq 255
26: Int: Internal-Data0/2 : address is 0000.0100.001b, irq 255
27: Int: Internal-Data0/3 : address is 0000.0100.001c, irq 255
28: Int: Not used : irq 255
29: Int: Not used : irq 255
30: Int: Not used : irq 255
31: Int: Not used : irq 255
32: Int: Not used : irq 255
33: Int: Not used : irq 255

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5585-SSP-10 VPN Premium license.


Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 4 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 4 perpetual
Total UC Proxy Sessions : 4 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5585-SSP-10 VPN Premium license.

Serial Number: JAD213400B2
Running Permanent Activation Key: 0xd81ace61 0x1838c7b5 0x7870a944 0x85949800 0xc73b0680
Configuration register is 0x1
Configuration last modified by enable_1 at 22:43:31.032 bjt Thu Oct 14 2021
SHZF-DBFW-5585X-01# $

 

Please let me know if you have further questions.

 

 

 

 

 

1 Accepted Solution

Accepted Solutions

Thank you for your reply

 

The license on the secondary ASA is installed,The only primary ASA is not installede,But the both units is installed befor I install the 10GE license.

 

I  will to try installing the strong encryption license 

View solution in original post

7 Replies 7

Marvin Rhoads
Hall of Fame
Hall of Fame

What was your source for the activation key?

the activation key is ok, it was given by Cisco license team

Have you tried installing / re-installing the strong encryption license?  It is free and can be retrieved from the Cisco licensing portal.

--
Please remember to select a correct answer and rate helpful posts

Thank you for reply

The  strong encryption license have been enabled

Do I remove the license befor i re-install it, and how do i remove it?

For the host you are running the show version command on, the strong encryption license is not installed:

Encryption-3DES-AES : Disabled perpetual

So you would just need to install the strong encryption license on that one.  Have you checked the license on the secondary ASA?

--
Please remember to select a correct answer and rate helpful posts

Thank you for your reply

 

The license on the secondary ASA is installed,The only primary ASA is not installede,But the both units is installed befor I install the 10GE license.

 

I  will to try installing the strong encryption license 

The post is marked as solved.  Could you please provide us with the solution.

--
Please remember to select a correct answer and rate helpful posts
Review Cisco Networking for a $25 gift card