Issues with ASA 5505 License activation

[Erich Schommarz]

Maybe somebody has some valid information for my issues. We have a customer who is running a Cisco ASA5505. I run into the issue that he had more than the allowed inside hosts. So the customer bought a new license for Inside Hosts Unlimited "L-ASA5505-10-UL=".

Before license Upgrade the situation was the following, see picture. AnyConnect Essentials 25 devices was enabled:

Customer registered new license and received the following. Comparision with old and new situation looks actually also very ok. All the features he had before are still Enabled like before, in addition the new feature Inside Hosts:

Product Authorization Key   : 

Inside Hosts                             : Unlimited 
Failover                                 : Disabled  
Encryption-DES                           : Enabled   
Encryption-3DES-AES                      : Enabled   
Security Contexts                        : Default   
GTP/GPRS                                 : Disabled  
AnyConnect Premium Peers                 : Default   
Other VPN Peers                          : Default   
Advanced Endpoint Assessment             : Disabled  
AnyConnect for Mobile                    : Disabled  
AnyConnect for Cisco VPN Phone           : Disabled  
Shared AnyConnect Premium License server : Disabled  
Shared License                           : Disabled  
UC Phone Proxy Sessions                  : Default   
Total UC Proxy Sessions                  : Default   
AnyConnect Essentials                    : Enabled   
Botnet Traffic Filter                    : Disabled  
Intercompany Media Engine                : Disabled  
Cluster License                          : Disabled  
vCPUs                                    : 0    

After activation of license, AnyConnect Essential disabled, inside Host unlimited active. So one problem is solved but now we have a new one:

salvpn02# show activation-key
Serial Number:  JMX1549Z0JH
Running Permanent Activation Key: 0xc920fa40 0xe400d0cd 0x6c3065b8 0x9650d4f4 0x043c1289

Licensed features for this platform:
Maximum Physical Interfaces       : 8              perpetual
VLANs                             : 3              DMZ Restricted
Dual ISPs                         : Disabled       perpetual
VLAN Trunk Ports                  : 0              perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Disabled       perpetual
Encryption-DES                    : Enabled        perpetual
Encryption-3DES-AES               : Enabled        perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 10             perpetual
Total VPN Peers                   : 12             perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
Cluster                           : Disabled       perpetual
              
This platform has a Base license.

The flash permanent activation key is the SAME as the running permanent key.

So the question is now if we did something wrong with the procedure buying a new license and activating it on the device or is there something else we can do to activate the AnyConnect Essential License again?

Thanks for any support / feedback with this matter.

Erich

[Marvin Rhoads · Accepted solution]

It appears the Cisco licensing team (or the self-service portal) generated the activation-key incorrectly.

I'd recommend opening a TAC case and having them re-issue a correct key that includes the previously purchased AnyConnect Essentials..

[teatrodelsogno]

I'm agree with Marvin.

Seems one problem with license generation.
Call the TAC system with licensing problem matter.

regards

[Erich Schommarz]

Hi Marvin, teatrodelsogno

Thanks for your feedback on my issue. It helped me that we actually did everything correct Upgrade License. So I opened a request TAC and they have send me the keys again.

I was now able to find the problem. The person who has activated the keys took the wrong one. After configuring it with the correct one it works as expected. Is always not easy to troubleshoot something when you haven't configured it yourself. Even when it is something so simple.

Enclosed details what I mean:

Key which works

------------------------------------------
THE FOLLOWING ACTIVATION KEY IS VALID FOR:
ASA SOFTWARE RELEASE 8.2+ ONLY.
 
Platform = asa
 
SERIAL NR:   xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx
 
Key which didn't work and was configured initially:
------------------------------------------
THE FOLLOWING ACTIVATION KEY IS VALID FOR:
ALL ASA SOFTWARE RELEASES, BUT EXCLUDES ANY
8.2+ FEATURES FOR BACKWARDS COMPATIBILITY.
 
Platform = asa
 
SERIAL NR:   xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxxxxxx