Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
2206
Views
0
Helpful
7
Replies

problem upgrading cisco asa 5505 license

joelyaari
Level 1
Level 1

‎09-14-2011 04:55 AM - edited ‎03-11-2019 02:24 PM

Hi,

one fo our clients has recently purchesed upgrade licenses for thier cisco asa as

follows

L-ASA5505-10-50=

and

L-ASA5505-SEC-PL=

after retrieving the activation key from the cisco website we tried entering the activation key to the asa both via ASDM and telnet

when entering the command on telnet the shell becomes unresponsive

when entering the command on ASDM we receive a "success" message followed by a request to restart ASDM and save the configuration

after a minute or so i get an error screen saying "write mem"

the asdm restarts and nothing changes

will appriciate any help

EDIT: sceenshot of error message

Labels:
Preview file
10 KB
0 Helpful
7 Replies 7

Jennifer Halim
Cisco Employee
Cisco Employee

‎09-14-2011 05:07 AM

What version of ASA are you running? and also did you get one activation key for both 10-50 user upgrade as well as SEC Plus license?

What do you mean nothing changes, and you share the output of "show version"?

0 Helpful

joelyaari
Level 1
Level 1
In response to Jennifer Halim

‎09-14-2011 06:00 AM

1. ASA version 8.0(3)

2. i got one activation key for both PAKs

3. after entering the key to asdm it requests a reboot, prompts that there was a problem and shows the line "write mem" after it restarts there is no change to the license status

show ver before entering the key:


Cisco Adaptive Security Appliance Software Version 8.0(3)
Device Manager Version 6.0(3)

Compiled on Tue 06-Nov-07 22:59 by builders
System image file is "disk0:/asa803-k8.bin"
Config file at boot was "startup-config"

blah blah up 14 days 23 hours

Hardware:   ASA5505, 256 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                             Boot microcode   :  CN1000-MC-BOOT-2.00
                             SSL/IKE microcode:  CNLite-MC-SSLm-PLUS-2.01
                             IPSec microcode  :  CNlite-MC-IPSECm-MAIN-2.04
0: Int: Internal-Data0/0    : address is 001e.be9e.4d2d, irq 11
1: Ext: Ethernet0/0         : address is 001e.be9e.4d25, irq 255
2: Ext: Ethernet0/1         : address is 001e.be9e.4d26, irq 255
3: Ext: Ethernet0/2         : address is 001e.be9e.4d27, irq 255
4: Ext: Ethernet0/3         : address is 001e.be9e.4d28, irq 255
5: Ext: Ethernet0/4         : address is 001e.be9e.4d29, irq 255
6: Ext: Ethernet0/5         : address is 001e.be9e.4d2a, irq 255
7: Ext: Ethernet0/6         : address is 001e.be9e.4d2b, irq 255
8: Ext: Ethernet0/7         : address is 001e.be9e.4d2c, irq 255
9: Int: Internal-Data0/1    : address is 0000.0003.0002, irq 255
10: Int: Not used            : irq 255
11: Int: Not used            : irq 255

Licensed features for this platform:
Maximum Physical Interfaces  : 8        
VLANs                        : 3, DMZ Restricted
Inside Hosts                 : 10       
Failover                     : Disabled
VPN-DES                      : Enabled  
VPN-3DES-AES                 : Enabled  
VPN Peers                    : 10       
WebVPN Peers                 : 2        
Dual ISPs                    : Disabled 
VLAN Trunk Ports             : 0        
AnyConnect for Mobile        : Disabled 
AnyConnect for Linksys phone : Disabled 
Advanced Endpoint Assessment : Disabled 

This platform has a Base license.

Serial Number: blah blah blah

Running Activation Key: blah blah blah

Configuration register is 0x1
Configuration has not been modified since last system restart.

thanks,

0 Helpful

varrao
Level 10
Level 10

‎09-14-2011 05:11 AM

Hi Joel,

For installing the license, it is a 3 step process:

Through CLI,

enter the command:

activation-key

save the config:

write memory

and then reaload the firewall to take the changes.

When the firewall comes up , you need to do "show version" and check whether the new license has taken effect or not. It should say security plus license.

Refer to this doc:

http://www.cisco.com/en/US/partner/docs/security/asa/asa82/license/license82.html#wp190062

Thanks,

Varun

Thanks,
Varun Rao
0 Helpful

joelyaari
Level 1
Level 1
In response to varrao

‎09-14-2011 05:54 AM

Hi Varun,

in CLI after entering the activation-key command the telnet shell becomes unresponsive no further commands can be entered. i have tried this via putty and via ASDM command line tool

0 Helpful

varrao
Level 10
Level 10
In response to joelyaari

‎09-14-2011 05:59 AM

Can you provide an ooutput of "show version" from the firewall?

Varun

Thanks,
Varun Rao
0 Helpful

joelyaari
Level 1
Level 1
In response to varrao

‎09-14-2011 06:08 AM

Cisco Adaptive Security Appliance Software Version 8.0(3)

Device Manager Version 6.0(3)

Compiled on Tue 06-Nov-07 22:59 by builders
System image file is "disk0:/asa803-k8.bin"
Config file at boot was "startup-config"

blah blah up 14 days 23 hours

Hardware:   ASA5505, 256 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                             Boot microcode   :  CN1000-MC-BOOT-2.00
                             SSL/IKE microcode:  CNLite-MC-SSLm-PLUS-2.01
                             IPSec microcode  :  CNlite-MC-IPSECm-MAIN-2.04
0: Int: Internal-Data0/0    : address is 001e.be9e.4d2d, irq 11
1: Ext: Ethernet0/0         : address is 001e.be9e.4d25, irq 255
2: Ext: Ethernet0/1         : address is 001e.be9e.4d26, irq 255
3: Ext: Ethernet0/2         : address is 001e.be9e.4d27, irq 255
4: Ext: Ethernet0/3         : address is 001e.be9e.4d28, irq 255
5: Ext: Ethernet0/4         : address is 001e.be9e.4d29, irq 255
6: Ext: Ethernet0/5         : address is 001e.be9e.4d2a, irq 255
7: Ext: Ethernet0/6         : address is 001e.be9e.4d2b, irq 255
8: Ext: Ethernet0/7         : address is 001e.be9e.4d2c, irq 255
9: Int: Internal-Data0/1    : address is 0000.0003.0002, irq 255
10: Int: Not used            : irq 255
11: Int: Not used            : irq 255

Licensed features for this platform:
Maximum Physical Interfaces  : 8        
VLANs                        : 3, DMZ Restricted
Inside Hosts                 : 10       
Failover                     : Disabled
VPN-DES                      : Enabled  
VPN-3DES-AES                 : Enabled  
VPN Peers                    : 10       
WebVPN Peers                 : 2        
Dual ISPs                    : Disabled 
VLAN Trunk Ports             : 0        
AnyConnect for Mobile        : Disabled 
AnyConnect for Linksys phone : Disabled 
Advanced Endpoint Assessment : Disabled 

This platform has a Base license.

Serial Number: blah blah blah

Running Activation Key: blah blah blah

Configuration register is 0x1
Configuration has not been modified since last system restart.

thanks,

0 Helpful

varrao
Level 10
Level 10
In response to joelyaari

‎09-14-2011 06:34 AM

Hi Joel,

Can you try installing the license through console connection. If that also doesn't work I woudl suggest you contact licensing again for it. If there is any issue with the license they would let you know or direct you to TAC for troubleshooting on it.

Thanks,

Varun

Thanks,
Varun Rao
0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking for a $25 gift card