cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
485
Views
0
Helpful
1
Replies

Can AnyConnect Premium Licenses Be Shared Among Two ASA Pairs?

CiscoMedMed
Level 1
Level 1

I have one ASA pair licensed for 750 AnyConnect Premium and a second ASA pair licensed for just 100.
I only need fewer than 200 connections to either pair. I had read that there is somewhere that multiple ASAs
could not share AnyConnect Premium licensing.  Is there a way to have both ASA pairs share in these 750 
AnyConnect Premium licenses? Does anything else need to be purchased? Thank you.

 

Secondary:

ASA01/sec/act# sh vpn-sessiondb license-summary
---------------------------------------------------------------------------
VPN Licenses and Configured Limits Summary
---------------------------------------------------------------------------
Status : Capacity : Installed : Limit
-----------------------------------------
AnyConnect Premium : ENABLED : 750 : 750 : NONE
AnyConnect Essentials : DISABLED : 750 : 0 : NONE
Other VPN (Available by Default) : ENABLED : 750 : 750 : NONE
Shared License Server : DISABLED
Shared License Participant : DISABLED
AnyConnect for Mobile : ENABLED(Requires Premium or Essentials)
Advanced Endpoint Assessment : ENABLED(Requires Premium)
AnyConnect for Cisco VPN Phone : ENABLED
VPN-3DES-AES : ENABLED
VPN-DES : ENABLED
---------------------------------------------------------------------------

---------------------------------------------------------------------------
VPN Licenses Usage Summary
---------------------------------------------------------------------------
All : Peak : Eff. :
In Use : In Use : Limit : Usage
---------------------------------
AnyConnect Premium : : 54 : 188 : 750 : 7%
Anyconnect Client : : 54 : 188 : 750 : 7%
AnyConnect Mobile : : 218 : 218 : 750 : 29%
Clientless VPN : : 0 : 3 : 750 : 0%
Other VPN : : 2 : 4 : 750 : 0%
L2TP Clients
Site-to-Site VPN : : 2 : 2 : 750 : 0%

Primary

ASA01/pri/stby# sh vpn-sessiondb license-summary
---------------------------------------------------------------------------
VPN Licenses and Configured Limits Summary
---------------------------------------------------------------------------
Status : Capacity : Installed : Limit
-----------------------------------------
AnyConnect Premium : ENABLED : 750 : 750 : NONE
AnyConnect Essentials : DISABLED : 750 : 0 : NONE
Other VPN (Available by Default) : ENABLED : 750 : 750 : NONE
Shared License Server : DISABLED
Shared License Participant : DISABLED
AnyConnect for Mobile : ENABLED(Requires Premium or Essentials)
Advanced Endpoint Assessment : ENABLED(Requires Premium)
AnyConnect for Cisco VPN Phone : ENABLED
VPN-3DES-AES : ENABLED
VPN-DES : ENABLED
---------------------------------------------------------------------------

---------------------------------------------------------------------------
VPN Licenses Usage Summary
---------------------------------------------------------------------------
All : Peak : Eff. :
In Use : In Use : Limit : Usage
---------------------------------
AnyConnect Premium : : 54 : 188 : 750 : 7%
Anyconnect Client : : 54 : 188 : 750 : 7%
AnyConnect Mobile : : 3 : 3 : 750 : 0%
Clientless VPN : : 0 : 3 : 750 : 0%
Other VPN : : 2 : 2 : 750 : 0%
L2TP Clients
Site-to-Site VPN : : 2 : 2 : 750 : 0%
---------------------------------------------------------------------------

1 Accepted Solution

Accepted Solutions

Today it is not relevant what the ASA says in regards of Licenses, but only which licenses you bought. If you still use old "Premium" Licenses that you bought many years ago, you are not allowed to use an actual AnyConnect Client any more.

But if you bought AnyConnect PLUS or AnyConnect APEX licenses, you can use these licenses on as many ASAs as you want.

This is the actual ordering guide (yes, they changed again how these licenses work and their naming):

https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html

View solution in original post

1 Reply 1

Today it is not relevant what the ASA says in regards of Licenses, but only which licenses you bought. If you still use old "Premium" Licenses that you bought many years ago, you are not allowed to use an actual AnyConnect Client any more.

But if you bought AnyConnect PLUS or AnyConnect APEX licenses, you can use these licenses on as many ASAs as you want.

This is the actual ordering guide (yes, they changed again how these licenses work and their naming):

https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html