Firepower 1150 & Smart Licenses "Firepower 1000 ASA Standard & Anyconnect Apex License)

[jmhalegre]

Hi Team,

Our customer has acquired 425 licenses from Anyconnect, but after synchronizing the Firepower with the Smart License it is not reflected on the Cisco website.

flowerpower# sh licen all

Smart Licensing Status

======================

Smart Licensing is ENABLED

Registration:

  Status: REGISTERED

  Smart Account: xxxxxxxxxxxxx

  Virtual Account: DEFAULT

  Export-Controlled Functionality: ALLOWED

  Initial Registration: SUCCEEDED on Mar 11 2020 18:08:22 CET

  Last Renewal Attempt: SUCCEEDED on Mar 25 2020 13:25:01 CET

  Next Renewal Attempt: Sep 21 2020 14:25:04 CEST

  Registration Expires: Mar 25 2021 13:20:03 CET

License Authorization:

  Status: AUTHORIZED on May 12 2020 23:13:57 CEST

  Last Communication Attempt: SUCCEEDED on May 12 2020 23:13:57 CEST

  Next Communication Attempt: Jun 11 2020 23:13:59 CEST

  Communication Deadline: Aug 10 2020 23:08:57 CEST

Export Authorization Key:

  Features Authorized:

    <none>

Utility:

  Status: DISABLED

Data Privacy:

  Sending Hostname: yes

    Callhome hostname privacy: DISABLED

    Smart Licensing hostname privacy: DISABLED

  Version privacy: DISABLED

Transport:

  Type: Callhome

License Usage

==============

Firepower 1000 ASA Standard (FIREPOWER_1000_ASA_STANDARD):

  Description: Firepower 1000 ASA Standard

  Count: 1

  Version: 1.0

  Status: AUTHORIZED

  Export status: NOT RESTRICTED

Product Information

===================

UDI: PID:FPR-1150,SN:xxxxxxxxxxxxxx

Agent Version

=============

Smart Agent for Licensing: 4.9.3_rel/34

Reservation Info

================

License reservation: DISABLED

flowerpower# show vpn-sessiondb summary

---------------------------------------------------------------------------

VPN Session Summary

---------------------------------------------------------------------------

                               Active : Cumulative : Peak Concur : Inactive

                             ----------------------------------------------

AnyConnect Client            :    273 :       2009 :         282 :        1

  SSL/TLS/DTLS               :    273 :       2009 :         282 :        1

---------------------------------------------------------------------------

Total Active and Inactive    :    274             Total Cumulative :   2009

Device Total VPN Capacity    :    800

Device Load                  :    34%

---------------------------------------------------------------------------

Cisco Website:

What can be the cause?

Thanks & Best Regards,

JuanMi

[Marvin Rhoads]

Please share the output of "show license features".

[jmhalegre]

Hi Marvin,

flowerpower# sh lic fea

Serial Number:  XXXXXXXXXXXX

Export Compliant: YES

License mode: Smart Licensing

Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited

Maximum VLANs                     : 1024

Inside Hosts                      : Unlimited

Failover                          : Active/Active

Encryption-DES                    : Enabled

Encryption-3DES-AES               : Enabled

Security Contexts                 : 2

Carrier                           : Disabled

AnyConnect Premium Peers          : 800

AnyConnect Essentials             : Disabled

Other VPN Peers                   : 800

Total VPN Peers                   : 800

AnyConnect for Mobile             : Enabled

AnyConnect for Cisco VPN Phone    : Enabled

Advanced Endpoint Assessment      : Enabled

Shared License                    : Disabled

Total TLS Proxy Sessions          : 800

Cluster                           : Disabled

flowerpower#

Thanks & Best Regards,

JuanMi

[Marvin Rhoads · Accepted solution]

So it's showing 800 AnyConnect licenses. that's correct because adding any AC license at all to an ASA or FTD device will reflect in the device as the maximum entitlement for the platform (due to the per-unique-user vs. per-connection licensing change).