11-01-2019 03:02 AM
i have ASA with vpn only perpetual license. i am going to buy another ASA for HA Standby.
Do i need to buy vpn only perpetual license for HA Box?
11-01-2019 04:58 AM
No you do not.
"For active/standby pairs, only the primary headend is required to have a VPN Only license."
Source: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200191-AnyConnect-Licensing-Frequently-Asked-Qu.html#anc6
If you should lose the primary unit due to equipment failure, the Secondary unit operating in Active role will continue to recognize the "shared" license for 30 days.
Source: http://www.ciscopress.com/articles/article.asp?p=2209314&seqNum=3
If the Primary unit is RMA'd under support, Cisco licensing will re-issue a new VPN only license for it.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community