ASA5505 License Question

[ronald.lawrimore]

I have a spare ASA5505 w/Base License that we want to use as the router/firewall between our wi-fi network and our secondary internet connection. Currently we have a NetGear box as the router there and it is on its last legs.  In order for the ASA w/Base license to be able to issue over 150 IP address via DHCP which license do I need to purchase for it.

Thanks in advance.

[JORGE RODRIGUEZ]

Ronald,

If you are trying to have ASA  to act as a DHCP server  you need Security plus license ,  the base license will not provide  anthing over 128 addresses based on your user license where you can retreave by doing " show version " 

To help you understand how to read license off the firewall  in your current firewall the   output of " show version"  shoudl tell you how many inside hosts , if it saids  10 users   then the DHCP feature will be limited to 32 hosts,  if  show version saids 50 users  DHCP will be limited to 128 hosts..

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/d2.html#wp1904997

Best is to aquire the SEC PLUS license  where the DHCP feature will be a complete /24   network..

Regards

[ronald.lawrimore]

Would this license do the same thing since it is cheaper than the Sec Plus.

http://www.cdw.com/shop/products/Cisco-ASA-5505-Software-license/1672222.aspx

[kmccourt]

A Sec Plus license on its own will NOT upgrade the users; it will convert your box into a 10-user Sec Plus, still with 32 DHCP clients maximum.

See Table 1 at

http://www.cisco.com/en/US/customer/docs/security/asa/asa84/license/license_management/license.html

An unlimited user license should allow you to have the maximum 250 DHCP clients, but it will still be a base license model unless you also add Sec Plus.

[ronald.lawrimore]

Does anyone have the PN for SecPlus w/ unlimited license for the ASA5505.

[kmccourt · Accepted solution]

You have to do it with two separate licenses:

ASA5505-SW-10-UL (10 to unlimited upgrade)

ASA5505-SEC-PL=

If these codes are preceded by 'L' it means electronic license delivery instead of a physical shipment.

Note the distinction from the ASA 5505 Sec Plus 'bundle' that incudes the hardware as well as the unlimited license (ASA5505-SEC-BUN-K9)

[ronald.lawrimore]

Thank you very much. I think we will go with just the 10 to Unlimited for now. We don't need the other features the sec plus offers.

[kmccourt]

Good luck with the upgrade.

Page 10 of this pdf, http://www.cisco.com/web/tsweb/edelivery/pilot/SKUS.pdf

gives the full SKUs for the various licenses.