Cisco ASA - AnyConnect License for 250 Users

[Ramraj Sivagnanam Sivajanam]

Hi Friends

Based on the show version output below, does this FW have 250 user license for AnyConnect? The reason I asked is because, 4 users could connect to the Cisco ASA FW concurrently but based on the show version output, it doesn't state 250 at all. Total VPN Peers : 250 means IPSEC VPN, am I right? Please kindly advice, as I'm confused.

FW01# show version

Cisco Adaptive Security Appliance Software Version 8.2(5)
Device Manager Version 6.0(2)

Compiled on Fri 20-May-11 16:00 by builders
System image file is "disk0:/asa825-k8.bin"
Config file at boot was "startup-config"

FW01 up 3 hours 59 mins

Hardware:   ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 1600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
                             Boot microcode   : CN1000-MC-BOOT-2.00
                             SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05

0: Ext: Ethernet0/0         : address is 001d.4524.a31e, irq 9
1: Ext: Ethernet0/1         : address is 001d.4524.a31f, irq 9
2: Ext: Ethernet0/2         : address is 001d.4524.a320, irq 9
3: Ext: Ethernet0/3         : address is 001d.4524.a321, irq 9
4: Ext: Management0/0       : address is 001d.4524.a31d, irq 11
5: Int: Internal-Data0/0    : address is 0000.0001.0002, irq 11
6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5

Licensed features for this platform:
Maximum Physical Interfaces    : Unlimited
Maximum VLANs                  : 50
Inside Hosts                   : Unlimited
Failover                       : Disabled
VPN-DES                        : Enabled
VPN-3DES-AES                   : Enabled
Security Contexts              : 0
GTP/GPRS                       : Disabled
SSL VPN Peers                  : 2
Total VPN Peers                : 250
Shared License                 : Disabled
AnyConnect for Mobile          : Enabled
AnyConnect for Cisco VPN Phone : Disabled
AnyConnect Essentials          : Enabled
Advanced Endpoint Assessment   : Disabled
UC Phone Proxy Sessions        : 2
Total UC Proxy Sessions        : 2
Botnet Traffic Filter          : Disabled

This platform has a Base license.

Serial Number: JMX1138ABCD
Running Activation Key: 0xaa3fc14e 0xa87c75fa 0x1dd39dd8 0xeba070d4 0x4337fc8f
Configuration register is 0x1
Configuration last modified by enable_15 at 00:48:50.629 GMT Thu Nov 15 2012

[Collin Clark]

From what I was told (by TAC) the following shows that the Essentials license is installed. I too was hoping for something more substantial.

AnyConnect Essentials          : Enabled

[Karsten Iwen]

"250" is the platform-limit. This can be used with IKEv1-IPSec or with the Ayconnect-Client when the Essentials-License is enabled. The "SSL-Vpn=2" are the AnyConnect Premium" licenses.


Sent from Cisco Technical Support iPad App

[Ramraj Sivagnanam Sivajanam]

Thanks Collin and Karsten for the kind feedback.

By any chance, do you have a Cisco document that states this. With this document or URL, I can then show my client. Please kindly assist.

[Karsten Iwen · Accepted solution]

It's in the document "Managing Feature Licenses":

http://www.cisco.com/en/US/docs/security/asa/asa82/license/license82.html#wp190732

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Ramraj Sivagnanam Sivajanam]

Hi Karsten

I saw that document but it doesn't state what I wanted to know. Please kindly advice if I've misunderstood the document.

The reason I asked is because, based on this URL http://tunnelsup.com/tag/licencing/

it states that I should be seeing "Other VPN Peers 250"...

Please kindly advice your opinion in this matter.

[Karsten Iwen]

The output depends on the version you are running. The never versions are more specific. But it doesn't change the way the peers are counted.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Ramraj Sivagnanam Sivajanam]

Thanks Karsten. You the man