12-06-2012 11:39 AM - edited 03-11-2019 05:33 PM
Hi everyone,
I bought a Cisco ASA 5510 (P/N: ASA5510-BUN-K9) and i would like to know if i have to buy some license!
What i mean is, for the basics, it still being necessary aquire some license?
Best regards,
JL
Solved! Go to Solution.
12-06-2012 11:45 AM
Hi,
To my understanding it should be enough as it is.
Addiotional Licenses would allow you to have more VPN users and to my understanding also allow use some of the ASA ports asa GigabitEthernet.
Heres a quote from a Cisco document
Table 2. Cisco ASA 5510 Adaptive Security Appliance Platform Capabilities and Capacities
Feature
Description
Firewall Throughput
Up to 300 Mbps
Maximum Firewall and IPS Throughput
• Up to 150 Mbps with AIP SSM-10
• Up to 300 Mbps with AIP SSM-20
VPN Throughput
Up to 170 Mbps
Concurrent Sessions
50,000; 130,0001
IPsec VPN Peers
250
Premium AnyConnect VPN Peer License Levels2
2,10, 25, 50, 100, or 250
Security Contexts
Up to 53
Interfaces*
5 Fast Ethernet ports; 2 Gigabit Ethernet + 3 Fast Ethernet*
Virtual Interfaces (VLANs)
50; 100*
Scalability*
VPN clustering and load balancing
High Availability
Not supported; Active/Active4, Active/Standby*
1Upgrade available with Cisco ASA 5510 Security Plus license
2Separately licensed feature; includes two with the base system
3Separately licensed feature; includes two with the Cisco ASA 5510 Security Plus license
4Available for the firewall feature set
Performance numbers tested and validated with Cisco ASA Software Release 7.2.
Link to document:
- Jouni
12-06-2012 12:04 PM
Hi Jose,
It depends what features you want to implement. For such features as NAT, ACL etc. you don't need additional licenses. You can check your licenses using this this command:
"sh version"
Under section "Licensed features for this platform:" you will see what options do you have.
Please rate helpful posts
Best Regards,
Eugene
12-06-2012 11:45 AM
Hi,
To my understanding it should be enough as it is.
Addiotional Licenses would allow you to have more VPN users and to my understanding also allow use some of the ASA ports asa GigabitEthernet.
Heres a quote from a Cisco document
Table 2. Cisco ASA 5510 Adaptive Security Appliance Platform Capabilities and Capacities
Feature
Description
Firewall Throughput
Up to 300 Mbps
Maximum Firewall and IPS Throughput
• Up to 150 Mbps with AIP SSM-10
• Up to 300 Mbps with AIP SSM-20
VPN Throughput
Up to 170 Mbps
Concurrent Sessions
50,000; 130,0001
IPsec VPN Peers
250
Premium AnyConnect VPN Peer License Levels2
2,10, 25, 50, 100, or 250
Security Contexts
Up to 53
Interfaces*
5 Fast Ethernet ports; 2 Gigabit Ethernet + 3 Fast Ethernet*
Virtual Interfaces (VLANs)
50; 100*
Scalability*
VPN clustering and load balancing
High Availability
Not supported; Active/Active4, Active/Standby*
1Upgrade available with Cisco ASA 5510 Security Plus license
2Separately licensed feature; includes two with the base system
3Separately licensed feature; includes two with the Cisco ASA 5510 Security Plus license
4Available for the firewall feature set
Performance numbers tested and validated with Cisco ASA Software Release 7.2.
Link to document:
- Jouni
12-06-2012 12:04 PM
Hi Jose,
It depends what features you want to implement. For such features as NAT, ACL etc. you don't need additional licenses. You can check your licenses using this this command:
"sh version"
Under section "Licensed features for this platform:" you will see what options do you have.
Please rate helpful posts
Best Regards,
Eugene
02-13-2015 03:31 AM
Dear Eugene,
Is this item a ASA5510-SSL250-K9 or ASA5510-SEC-BUN-K9?
It is really deficult to compare cause already AnyConnect Essentials : 250 perpetual
if it would be disable, the item is then a ASA5510-SEC-BUN-K9...but now i am just confused..
"ciscoasa> sh ver
Cisco Adaptive Security Appliance Software Version 9.1(4)
Device Manager Version 7.1(5)100
Compiled on Thu 05-Dec-13 19:37 by builders
System image file is "disk0:/asa914-k8.bin"
Config file at boot was "startup-config"
ciscoasa up 19 mins 40 secs
Hardware: ASA5510, 1024 MB RAM, CPU Pentium 4 Celeron 1600 MHz,
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xfff00000, 1024KB
Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode : CNLite-MC-SSLm-PLUS-2_05
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.09
Number of accelerators: 1
0: Ext: Ethernet0/0 : address is xxxxxxxx
1: Ext: Ethernet0/1 : address is xxxxxxxx
2: Ext: Ethernet0/2 : address is xxxxxxxxx
3: Ext: Ethernet0/3 : address is xxxxxxxxxx
4: Ext: Management0/0 : address is xxxxxxxx
5: Int: Not used : irq 11
6: Int: Not used : irq 5
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 100 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : 250 perpetual
Other VPN Peers : 250 perpetual
Total VPN Peers : 250 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
Cluster : Disabled perpetual
This platform has an ASA 5510 Security Plus license.
Serial Number:
Running Permanent Activation Key:
Configuration register is 0x1
"
best Regards
02-13-2015 05:55 AM
The two part number refer to bundles that include certain software licenses in addition to the hardware appliance. The hardware is the same in either case.
If one adds different licenses later it can change the output of the "show version" or related commands.
From the output you've provided, it's most likely an ASA5510-SEC-BUN-K9 that had an addition of AnyConnect Essentials license.
It would be very unusual to see the ASA5510-SSL250-K9 "downgraded" to the much less costly Essential licenses since that would be overwriting and essentially discarding the more expensive Premium licenses that already do everything the Essentials licenses do and more.
02-17-2015 06:47 AM
Dear Rhoads,
Thank You for the quick reply...it was really helpful
Yes, it is a ASA5510-SEC-BUN-K9 that had an addition of AnyConnect Essentials license.
It is a 250 AC Essential license(ASA-AC-E-5510=) as i thought....please let me know, if i was thought wrong....
best Regards
12-06-2012 12:50 PM
Thank you Jouni and Eugene for your quickly answers!
As Jouni, for my scenário the base license its enough.
Best regards,
JL
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide