asa vpn perpetual count

[suthomas1]

Hi,

We have an asa 5585X, the output shows following. What does perpetual count indicate here?

Does below mean we have vpn licenses that can be used for configuring vpn for client login/ssl vpn?

Maximum Physical Interfaces       : Unlimited      perpetual

Encryption-DES                    : Enabled        perpetual

Encryption-3DES-AES               : Enabled        perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 5000           perpetual

Total VPN Peers                   : 5000           perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

Thanks in advance for the reply.

[Richard Burts]

In this output perpetual means permanent which is a license that is valid for the life of the ASA.

Perpetual is not a count. If you look at the output some lines with perpetual do have a count (such as AnyConnect Permuim Peers which is 2) but other lines with perpetual have no count at all such as Encryption-DES.

At this point your ASA has licenses that will allow 2 clients to have SSL VPN sessions.

HTH

Rick

[suthomas1]

Thanks Rick.

How about any other kind of vpn ( ipsec/client vpn ), can they be done using the existing licensing.

If yes, how many can they accomodate.

[Richard Burts]

According to your output this ASA can support up to 5000 client sessions with the IPSec VPN client.

HTH

Rick

[suthomas1]

Thanks Rick. Does it mean, we can only have two clients max using Any connect VPN client based connectivity ?

Also, 5000 client sessions is ipsec based vpn client. How about if we want to setup vpn on the ASA & have users connect to this using vpn client, how many user sessions are possible with this.

AnyConnect Premium Peers          : 2              perpetual

Total VPN Peers                   : 5000           perpetual

[Richard Burts]

Using AnyConnect requires a separate license. Using the traditional IPSec client does not require a separate license. The ASA comes with a license for AnyConnect that allows you to have 2 concurrent user sessions using AnyConnect. The licensing that comes on this ASA will allow up to 5000 VPN sessions. So without purchase of any additional licenses you would be able to have 2 users with AnyConnect and up to 4998 users with IPSec client for a total of 5000 users on VPN sessions.

HTH

Rick