01-31-2017 06:22 AM - edited 02-21-2020 09:08 PM
Hello I have a qeustion
For Anyconnect plus licence L-AC-PLS-LIC= I need to count all possible authized users.
How do the license counts users if I authenticate the users against a radius?
regards.
Solved! Go to Solution.
02-01-2017 01:01 AM
I don't know hoy many users I have that can connect, local users + ad users...
That's a problem that you have to solve ... The licensing doesn't change the way the ASA handles VPN-connections. Counting different authenticated users doesn't help as one user is allowed to have more than one simultaneous connection (for example mobile, tablet, PC) and still only counts as one licensed user.
If you can't figure out how many different users are using AnyConnect, then you can use the employee-count if you know that all users have to use VPN from time to time or you can use an assumption based on user count of departments that use VPN.
If you still can't figure out how many users there are and you don't have many VPN-gateways, then there is also the VPN-Only license which is not based on user count but on simultaneous connections to the ASA.
01-31-2017 08:34 AM
Licensing is independent of the way users are authenticated. It doesn't matter if you use RADIUS, LDAP, LOCAL or whatever
01-31-2017 11:47 PM
How does it count the user base?
regards
02-01-2017 12:35 AM
You count the users, not the system. The licensing is (at least at the moment) based on a
02-01-2017 12:49 AM
I don't understand, if I have an AAA policy that allows certain AD group to connect does it count every user connecting to the vpn?
I don't know hoy many users I have that can connect, local users + ad users...
Its important in order to calculate the license to purchase.
02-01-2017 01:01 AM
I don't know hoy many users I have that can connect, local users + ad users...
That's a problem that you have to solve ... The licensing doesn't change the way the ASA handles VPN-connections. Counting different authenticated users doesn't help as one user is allowed to have more than one simultaneous connection (for example mobile, tablet, PC) and still only counts as one licensed user.
If you can't figure out how many different users are using AnyConnect, then you can use the employee-count if you know that all users have to use VPN from time to time or you can use an assumption based on user count of departments that use VPN.
If you still can't figure out how many users there are and you don't have many VPN-gateways, then there is also the VPN-Only license which is not based on user count but on simultaneous connections to the ASA.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide