Cisco Anyconnect subscription License increase user count

operations123 · ‎10-07-2017

We have purshased and acticated L-AC-PLS-LIC= license for 25 Users but now i realize we need 50 Users license so i have purchased second L-AC-PLS-LIC= license for 25, and try to generate key with second PAK but it generated key base on Device Serial number and its exactly same key, when i try to acticate got following error.

fw1/pri/act(config)# activation-key <cisco key>
Validating activation key. This may take a few minutes...
The requested key is the SAME as the flash permanent activation-key.
The flash activation key will not be modified.

Also in my output i am not seeing licence count anywhere like 25 users license, How do i know how many license we have, I failed to find help on cisco website and any cisco forum. it is showing following.

AnyConnect Premium Peers : 5000 perpetual

Full output, Now question is how i can merge two 25 QTY license and make it 50 QTY??

fw5b1/sec/act# sh activation-key
...
...
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 5000 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
AnyConnect for Mobile : Enabled perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Advanced Endpoint Assessment : Enabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
10GE I/O : Enabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5585-SSP-10 VPN Premium license.

Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 4 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 5000 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
AnyConnect for Mobile : Enabled perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Advanced Endpoint Assessment : Enabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 4 perpetual
Botnet Traffic Filter : Disabled perpetual
10GE I/O : Enabled perpetual
Cluster : Disabled perpetual

This platform has an ASA5585-SSP-10 VPN Premium license.

Karsten Iwen · ‎10-08-2017

It‘s all as expected. The license is not enforced on the ASA. With your first activation-key, the ASA can handle AnyConnect connections up to the platform-limit. Now it‘s your responsibility to have one license per user (beating heart), but the ASA doesn‘t care any more.

operations123 · ‎10-08-2017

you mean say i can use more than 50 users with my 25 User license key?

what is the point of licensing then if its showing 5000 and i can use more than my license limit? make no sense or am i reading wrong?

Karsten Iwen · ‎10-08-2017

Technically this is correct, you could use it with 5000 users. You could also steal a kids scooter. Would you? ;-) No, same as with operating-systems and other software you typically want to get your licensing right in your company. With AnyConnect it's your sole responsibility to make sure that you have enough licenses. Here is more on the AnyConenct licensing:

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200191-AnyConnect-Licensing-Frequently-Asked-Qu.html#anc30