Failover Requirements 8.2.(4) and 8.3

[samuel.heinrich]

Hi Everyone

I have an ASA 5510 with 25SSL  licenses and also a CSC module installed with 250Seats and security plus license.  The ASA itself has no security plus license.

Now I want to install a second ASA and make an Active/ Standby HA. I'am not quite sure what exactely the requirements are, since it's possible to merge licenses with 8.3.

Iam sure both ASA need e security plus license, but...

1. ..Do i need the CSC module also twice and do they need to have same licenses to create a/s? does is make a difference in 8.3?
2. ..Is it possible to create a/s with unequal licenses in 8.2.(4)  or is this feature only reserved for the 8.3 line?

[PAUL GILBERT ARIAS · Accepted solution]

Hello.

You will need a second SSM for the new unit. For the licenses please read:

Failover License Requirements

•Failover units do not require the same license on each unit.

Older versions of adaptive security appliance software required that the licenses match on each unit. Starting with Version 8.3(1), you no longer need to install identical licenses. Typically, you buy a license only for the primary unit; for Active/Standby failover, the secondary unit inherits the primary license when it becomes active. If you have licenses on both units, they combine into a single running failover cluster license.

•For the ASA 5505 and 5510 adaptive security appliances, both units require the Security Plus license; the Base license does not support failover, so you cannot enable failover on a standby unit that only has the Base license.

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/license.html#wpxref93942

Here are the failover requirements:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/ha_overview.html#wp1077521

I hope this helps