cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
8878
Views
5
Helpful
3
Replies

how can verify the 2500 user ASA anyconnect essential license is added successfully

yao yu jiang
Level 1
Level 1

i have  asa5540 firewall with default vpn plus license, when I show version, it show it has 2 ssl user  license.

  I active the 2500 users anyconnect essential license,  see below, but after I reload asa, it still show ssl 2 user license,

can do I know by show command there is 2500 users ssl anyconnct essential license adddes successfully?

-fw1(config)# activation-key no
  -fw1(config)# activation-key noconfirm 0a08f673 0432aaf5 9911c958 efc4$
Validating activation key. This may take a few minutes...

Licensed features for this platform:
Maximum Physical Interfaces    : Unlimited
Maximum VLANs                  : 200      
Inside Hosts                   : Unlimited
Failover                       : Active/Active
VPN-DES                        : Enabled  
VPN-3DES-AES                   : Enabled  
Security Contexts              : 2        
GTP/GPRS                       : Disabled 
SSL VPN Peers                  : 2        
Total VPN Peers                : 5000     
Shared License                 : Disabled
AnyConnect for Mobile          : Disabled 
AnyConnect for Cisco VPN Phone : Disabled 
AnyConnect Essentials          : Enabled  
Advanced Endpoint Assessment   : Disabled 
UC Phone Proxy Sessions        : 2        
Total UC Proxy Sessions        : 2        
Botnet Traffic Filter          : Disabled 

This platform has an ASA 5540 VPN Premium license.


**********************************************************************
WARNING: AnyConnect Essentials license active. Basic VPN support is
in effect. For specific details, please refer to Cisco AnyConnect VPN
Client Administrator Guide.
**********************************************************************

Both running and flash activation keys were updated with the requested key.
-fw1(config)#

reload the ASA

.......................

SHOW version

it show the same output the ssl peer number is 2 .

3 Replies 3

Jennifer Halim
Cisco Employee
Cisco Employee

The AnyConnect Essential license is not user based license, it's just an enabled or disabled feature license, and once you enabled it, it will be enabled for the maximum number of supported AnyConnect Full tunnel session for that platform. In ASA5540, that would be 2500 users.

The "SSL VPN Peers                  : 2" shows you the premium SSL VPN license which is user based.

To enable/activate the AnyConnect Essential license, you would also need to configure the following:

webvpn

   anyconnect-essentials

http://www.cisco.com/en/US/docs/security/asa/asa83/command/reference/a2.html#wp1721336

Hope this helps.

I have similar but little differen question, we purchased L-AC-PLS-LIC= for 25 Users and when i apply to ASA5585-X its showing following output ( i didn't reload ASA yet)

 

Following should be 25 users right? 

AnyConnect Premium Peers          : 5000           perpetual

 

Full output. 

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 1024           perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active  perpetual
Encryption-DES                    : Enabled        perpetual
Encryption-3DES-AES               : Enabled        perpetual
Security Contexts                 : 2              perpetual
Carrier                           : Disabled       perpetual
AnyConnect Premium Peers          : 5000           perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 5000           perpetual
Total VPN Peers                   : 5000           perpetual
AnyConnect for Mobile             : Enabled        perpetual
AnyConnect for Cisco VPN Phone    : Enabled        perpetual
Advanced Endpoint Assessment      : Enabled        perpetual
Shared License                    : Disabled       perpetual
Total TLS Proxy Sessions          : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
10GE I/O                          : Enabled        perpetual
Cluster                           : Disabled       perpetual 

 L-AC-PLS-LIC=number_of_allowed_users 

 

The below displays the number of concurrent connections allowed by the platform.

AnyConnect Premium Peers          : 5000           perpetual

This means one user could connect from 5000 devices. This would use up the 5000 connection limit preventing other users from connecting, and only use one  L-AC-PLS-LIC=

 

Hope that helps you and others.