cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9876
Views
10
Helpful
4
Replies

Question on ASA 5505 Security Plus license and Inside Hosts

microserf76
Level 1
Level 1

I recently puchased an ASA 5505 that came with the base license only to have to randomly pick devices to not allow internet access to.  I found out that the base license only allows 10 inside hosts, so I upgraded to the Security Plus license.  According to the link below, the Security Plus license includes:

Includes Cisco ASA 5505, unlimited users, 8-port  Fast Ethernet switch, stateful firewall, 25 IPsec VPN peers, 2 SSL VPN  peers, stateless Active/Standby high availability, dual ISP support, DMZ  support, 3DES/AES license, and 1 expansion slot.

(taken from

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html)

I installed the license and now in a show version I get:

Licensed features for this platform:

Maximum Physical Interfaces       : 8              perpetual

VLANs                             : 20             DMZ Unrestricted

Dual ISPs                         : Enabled        perpetual

VLAN Trunk Ports                  : 8              perpetual

Inside Hosts                      : 10             perpetual

Failover                          : Active/Standby perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 25             perpetual

Total VPN Peers                   : 25             perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

This platform has an ASA 5505 Security Plus license.

Did I just waste $500 for nothing?  I still have hosts that can't get out and a device that is really getting on my nerves when it decides to randomly deny internet access to devices.

4 Replies 4

varrao
Level 10
Level 10

You might just need to do a "write mem" and then reload the device, to activate the new license file.

-Varun

Thanks,
Varun Rao

It's been saved and realoded a dozen times since the license upgrade.

Hello !

After upload my ASA 5505 to a Security License, here is below the "sh ver "command result :

ASA-5505# sh ver

Cisco Adaptive Security Appliance Software Version 8.3(1)
Device Manager Version 6.3(1)

Compiled on Thu 04-Mar-10 16:56 by builders
System image file is "disk0:/asa831-k8.bin"
Config file at boot was "startup-config"

ASA-5505 up 18 days 17 hours


Licensed features for this platform:
Maximum Physical Interfaces    : 8              perpetual
VLANs                          : 20             DMZ Unrestricted
Dual ISPs                      : Enabled        perpetual
VLAN Trunk Ports               : 8              perpetual
Inside Hosts                   : Unlimited      perpetual
Failover                       : Active/Standby perpetual
VPN-DES                        : Enabled        perpetual
VPN-3DES-AES                   : Enabled        perpetual
SSL VPN Peers                  : 2              perpetual
Total VPN Peers                : 25             perpetual
Shared License                 : Disabled       perpetual
AnyConnect for Mobile          : Disabled       perpetual
AnyConnect for Cisco VPN Phone : Disabled       perpetual
AnyConnect Essentials          : Disabled       perpetual
Advanced Endpoint Assessment   : Disabled       perpetual
UC Phone Proxy Sessions        : 2              perpetual
Total UC Proxy Sessions        : 2              perpetual
Botnet Traffic Filter          : Disabled       perpetual
Intercompany Media Engine      : Disabled       perpetual

This platform has an ASA 5505 Security Plus license.

Adam Makovecz
Level 1
Level 1

Hi,

if the reload doesn't help, please send an email to licensing@cisco.com with the PAK number of the license what you bought and they will generate a new activation key for you. Send them the link and show version output.

cheers

Adam

Review Cisco Networking products for a $25 gift card