cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9379
Views
10
Helpful
4
Replies

Question on ASA 5505 Security Plus license and Inside Hosts

microserf76
Beginner
Beginner

I recently puchased an ASA 5505 that came with the base license only to have to randomly pick devices to not allow internet access to.  I found out that the base license only allows 10 inside hosts, so I upgraded to the Security Plus license.  According to the link below, the Security Plus license includes:

Includes Cisco ASA 5505, unlimited users, 8-port  Fast Ethernet switch, stateful firewall, 25 IPsec VPN peers, 2 SSL VPN  peers, stateless Active/Standby high availability, dual ISP support, DMZ  support, 3DES/AES license, and 1 expansion slot.

(taken from

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html)

I installed the license and now in a show version I get:

Licensed features for this platform:

Maximum Physical Interfaces       : 8              perpetual

VLANs                             : 20             DMZ Unrestricted

Dual ISPs                         : Enabled        perpetual

VLAN Trunk Ports                  : 8              perpetual

Inside Hosts                      : 10             perpetual

Failover                          : Active/Standby perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 25             perpetual

Total VPN Peers                   : 25             perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

This platform has an ASA 5505 Security Plus license.

Did I just waste $500 for nothing?  I still have hosts that can't get out and a device that is really getting on my nerves when it decides to randomly deny internet access to devices.

4 Replies 4

varrao
Advocate
Advocate

You might just need to do a "write mem" and then reload the device, to activate the new license file.

-Varun

Thanks,
Varun Rao

It's been saved and realoded a dozen times since the license upgrade.

Hello !

After upload my ASA 5505 to a Security License, here is below the "sh ver "command result :

ASA-5505# sh ver

Cisco Adaptive Security Appliance Software Version 8.3(1)
Device Manager Version 6.3(1)

Compiled on Thu 04-Mar-10 16:56 by builders
System image file is "disk0:/asa831-k8.bin"
Config file at boot was "startup-config"

ASA-5505 up 18 days 17 hours


Licensed features for this platform:
Maximum Physical Interfaces    : 8              perpetual
VLANs                          : 20             DMZ Unrestricted
Dual ISPs                      : Enabled        perpetual
VLAN Trunk Ports               : 8              perpetual
Inside Hosts                   : Unlimited      perpetual
Failover                       : Active/Standby perpetual
VPN-DES                        : Enabled        perpetual
VPN-3DES-AES                   : Enabled        perpetual
SSL VPN Peers                  : 2              perpetual
Total VPN Peers                : 25             perpetual
Shared License                 : Disabled       perpetual
AnyConnect for Mobile          : Disabled       perpetual
AnyConnect for Cisco VPN Phone : Disabled       perpetual
AnyConnect Essentials          : Disabled       perpetual
Advanced Endpoint Assessment   : Disabled       perpetual
UC Phone Proxy Sessions        : 2              perpetual
Total UC Proxy Sessions        : 2              perpetual
Botnet Traffic Filter          : Disabled       perpetual
Intercompany Media Engine      : Disabled       perpetual

This platform has an ASA 5505 Security Plus license.

Adam Makovecz
Beginner
Beginner

Hi,

if the reload doesn't help, please send an email to licensing@cisco.com with the PAK number of the license what you bought and they will generate a new activation key for you. Send them the link and show version output.

cheers

Adam

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers