08-30-2007 04:42 AM - edited 03-11-2019 04:04 AM
I have 2 PIX515e's with a crossover cable on e5. I get the following error when I start the secondary unit. pix(config-if)# Mate's license (VPN-3DES-AES Enabled) is not compatible with my
license (VPN-3DES-AES Disabled). Failover will be disabled. Any ideas? Thanks........
Primary unit sho ver:
Cisco PIX Security Appliance Software Version 7.2(1)2
Device Manager Version 5.2(1)
Compiled on Wed 14-Jun-06 15:54 by builders
System image file is "flash:/image.bin"
Config file at boot was "startup-config"
pix up 18 hours 4 mins
Hardware: PIX-515E, 128 MB RAM, CPU Pentium II 433 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
Encryption hardware device : VAC+ (Crypto5823 revision 0x1)
0: Ext: Ethernet0 : address is 0012.7fa6.96ae, irq 10
1: Ext: Ethernet1 : address is 0012.7fa6.96af, irq 11
2: Ext: Ethernet2 : address is 000d.88ef.7908, irq 11
3: Ext: Ethernet3 : address is 000d.88ef.7909, irq 10
4: Ext: Ethernet4 : address is 000d.88ef.790a, irq 9
5: Ext: Ethernet5 : address is 000d.88ef.790b, irq 5
Licensed features for this platform:
Maximum Physical Interfaces : 6
Maximum VLANs : 25
Inside Hosts : Unlimited
Failover : Active/Active
VPN-DES : Enabled
VPN-3DES-AES : Enabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : Unlimited
This platform has an Unrestricted (UR) license.
Secondary unit sho ver:
Device Manager Version 5.2(1)
Compiled on Wed 14-Jun-06 15:54 by builders
System image file is "flash:/image.bin"
Config file at boot was "startup-config"
pix up 32 mins 54 secs
Hardware: PIX-515E, 128 MB RAM, CPU Pentium II 433 MHz
Flash E28F128J3 @ 0xfff00000, 16MB
BIOS Flash AM29F400B @ 0xfffd8000, 32KB
Encryption hardware device : VAC+ (Crypto5823 revision 0x1)
0: Ext: Ethernet0 : address is 0012.7fa6.969b, irq 10
1: Ext: Ethernet1 : address is 0012.7fa6.969c, irq 11
2: Ext: Ethernet2 : address is 000d.88ef.76f0, irq 11
3: Ext: Ethernet3 : address is 000d.88ef.76f1, irq 10
4: Ext: Ethernet4 : address is 000d.88ef.76f2, irq 9
5: Ext: Ethernet5 : address is 000d.88ef.76f3, irq 5
Licensed features for this platform:
Maximum Physical Interfaces : 6
Maximum VLANs : 25
Inside Hosts : Unlimited
Failover : Active/Standby
VPN-DES : Enabled
VPN-3DES-AES : Disabled
Cut-through Proxy : Enabled
Guards : Enabled
URL Filtering : Enabled
Security Contexts : 2
GTP/GPRS : Disabled
VPN Peers : Unlimited
This platform has a Failover Only-Active/Standby (FO) license.
08-30-2007 09:03 AM
The error says it all. you need to apply for the 3des/aes license for the secondary unit. the good news is its free.
https://tools.cisco.com/SWIFT/Licensing/jsp/formGenerator/Pix3DesMsgDisplay.jsp
08-31-2007 10:09 AM
Srue,
I applied it to the primary but not the secondary. Oops. It works now. Thanks...
Jay
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide