ASA 5510 failover + SSL VPN licences

Unanswered Question
Feb 26th, 2008
User Badges:

hi everyone,

having two ASA 5510 configured in active/standby failover, do i have to buy ssl vpn licences to both devices to extend capabilities? what if i change it to active/active? license in question is ASA5500-SSL-25=. thanks!


peter

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
tomranson Thu, 02/28/2008 - 03:38
User Badges:

Hi all,


I too am looking for an answer to this; running 2x 5520's in A/S and looking to purchase 750 SSL VPN licenses for the failover cluster.


Do we indeed need to purchase licenses for BOTH pieces of hardware, given that they are in a f/o pair?


Many thanks,


Tom

cdusio Thu, 02/28/2008 - 16:09
User Badges:
  • Bronze, 100 points or more

Yes you need the licenses for both. As far as active active goes that requires multiple context mode to work. I know that multiple context mode doesn't support VPN failover so just keep that in mind.



Also active active failover is not supported on the 5510 only active standby.


HTH


Chris



cdusio Thu, 02/28/2008 - 16:20
User Badges:
  • Bronze, 100 points or more

Actually I was mistaken.


I have one doc that shows active/standby only for the 5510 and another that shows it is available so I apoligize about that. You do need the sec plus license for that.


2 referencing docs


http://cisco.com/en/US/partner/docs/security/asa/asa71/asdm51/webhelp/gen_info_licenses.html


http://cisco.com/en/US/partner/products/ps6120/prod_models_comparison.html

lenpet_hun Fri, 02/29/2008 - 02:47
User Badges:

hi Chris,

thanks for your answer! so a/a failover is not an option anymore... but even in a/s, having to buy twice the amount of licences we need is a bit of a rip off. are you absolutely sure we need to have the extra license for both devices?

Actions

This Discussion