ASAv10 private to private ipsec tunnel

[Shawn Leibert]

Hello,

We are in the process of deploying an ASAv10. I can not get an ipsec tunnel up. I am stuck at the line crypto isakmp. There is no policy option. I have tried to reach out to Cisco to get a pak but have not had luck thus far. I have read that I do not need to upgrade the license to create a private to private ipsec tunnel but I do not believe that. Can someone explain the process of obtaining a license please? 

[Aditya Ganjoo]

Hi Shawn,

I do not think you need a license on the ASA except 3DES/AES license.

You can check the following link for this:

https://supportforums.cisco.com/document/67701/asa-versions-image-names-and-licensing

Please share the show version of the ASAv.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[Shawn Leibert]

I do not have to essential commands needed. Below is the model and ver info:

Cisco Adaptive Security Appliance Software Version 9.5(2)207
Device Manager Version 7.5(2)

Compiled on Thu 05-May-16 19:42 PDT by builders
System image file is "boot:/asa952-207-smp-k8.bin"
Config file at boot was "startup-config"

GBB-ASA up 6 mins 52 secs

Hardware: ASAv, 14336 MB RAM, CPU Xeon E5 series 2194 MHz, 1 CPU (4 cores)
Model Id: ASAv10

Internal ATA Compact Flash, 9216MB
Slot 1: ATA Compact Flash, 9216MB
BIOS Flash Firmware Hub @ 0x0, 0KB

I do not have access to the crypto isakmp policy command. There is no policy option. Also I do not have access to the activation-key command. I can not create a tunnel like this. I have a ticket open with Cisco and they do not know either. 

[Marius Gunnerud]

boot:/asa952-207-smp-k8.bin your image does not contain the strong encryption license (3DES/AES license).  This is a free license that you can download from https://tools.cisco.com/SWIFT/LicensingUI/Quickstart

It would seem that the ASAv10 uses Cisco Smart Software Licensing.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa95/asav/quick-start/asav-quick/intro-asav.html

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/general/asa-94-general-config.html

--

Please remember to select a correct answer and rate helpful posts