05-19-2020 06:35 AM
Hi Team,
Our customer has acquired 425 licenses from Anyconnect, but after synchronizing the Firepower with the Smart License it is not reflected on the Cisco website.
flowerpower# sh licen all
Smart Licensing Status
======================
Smart Licensing is ENABLED
Registration:
Status: REGISTERED
Smart Account: xxxxxxxxxxxxx
Virtual Account: DEFAULT
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Mar 11 2020 18:08:22 CET
Last Renewal Attempt: SUCCEEDED on Mar 25 2020 13:25:01 CET
Next Renewal Attempt: Sep 21 2020 14:25:04 CEST
Registration Expires: Mar 25 2021 13:20:03 CET
License Authorization:
Status: AUTHORIZED on May 12 2020 23:13:57 CEST
Last Communication Attempt: SUCCEEDED on May 12 2020 23:13:57 CEST
Next Communication Attempt: Jun 11 2020 23:13:59 CEST
Communication Deadline: Aug 10 2020 23:08:57 CEST
Export Authorization Key:
Features Authorized:
<none>
Utility:
Status: DISABLED
Data Privacy:
Sending Hostname: yes
Callhome hostname privacy: DISABLED
Smart Licensing hostname privacy: DISABLED
Version privacy: DISABLED
Transport:
Type: Callhome
License Usage
==============
Firepower 1000 ASA Standard (FIREPOWER_1000_ASA_STANDARD):
Description: Firepower 1000 ASA Standard
Count: 1
Version: 1.0
Status: AUTHORIZED
Export status: NOT RESTRICTED
Product Information
===================
UDI: PID:FPR-1150,SN:xxxxxxxxxxxxxx
Agent Version
=============
Smart Agent for Licensing: 4.9.3_rel/34
Reservation Info
================
License reservation: DISABLED
flowerpower# show vpn-sessiondb summary
---------------------------------------------------------------------------
VPN Session Summary
---------------------------------------------------------------------------
Active : Cumulative : Peak Concur : Inactive
----------------------------------------------
AnyConnect Client : 273 : 2009 : 282 : 1
SSL/TLS/DTLS : 273 : 2009 : 282 : 1
---------------------------------------------------------------------------
Total Active and Inactive : 274 Total Cumulative : 2009
Device Total VPN Capacity : 800
Device Load : 34%
---------------------------------------------------------------------------
Cisco Website:
What can be the cause?
Thanks & Best Regards,
JuanMi
Solved! Go to Solution.
05-20-2020 07:43 AM
So it's showing 800 AnyConnect licenses. that's correct because adding any AC license at all to an ASA or FTD device will reflect in the device as the maximum entitlement for the platform (due to the per-unique-user vs. per-connection licensing change).
05-19-2020 09:49 AM
Please share the output of "show license features".
05-20-2020 04:12 AM
Hi Marvin,
flowerpower# sh lic fea
Serial Number: XXXXXXXXXXXX
Export Compliant: YES
License mode: Smart Licensing
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 1024
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 2
Carrier : Disabled
AnyConnect Premium Peers : 800
AnyConnect Essentials : Disabled
Other VPN Peers : 800
Total VPN Peers : 800
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 800
Cluster : Disabled
flowerpower#
Thanks & Best Regards,
JuanMi
05-20-2020 07:43 AM
So it's showing 800 AnyConnect licenses. that's correct because adding any AC license at all to an ASA or FTD device will reflect in the device as the maximum entitlement for the platform (due to the per-unique-user vs. per-connection licensing change).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide