ASA 5510 failover + SSL VPN licences

lenpet_hun · ‎02-26-2008

hi everyone,

having two ASA 5510 configured in active/standby failover, do i have to buy ssl vpn licences to both devices to extend capabilities? what if i change it to active/active? license in question is ASA5500-SSL-25=. thanks!

peter

lenpet_hun · ‎02-28-2008

can anyone pls give me an answer?

tomranson · ‎02-28-2008

Hi all,

I too am looking for an answer to this; running 2x 5520's in A/S and looking to purchase 750 SSL VPN licenses for the failover cluster.

Do we indeed need to purchase licenses for BOTH pieces of hardware, given that they are in a f/o pair?

Many thanks,

Tom

cdusio · ‎02-28-2008

Yes you need the licenses for both. As far as active active goes that requires multiple context mode to work. I know that multiple context mode doesn't support VPN failover so just keep that in mind.

Also active active failover is not supported on the 5510 only active standby.

HTH

Chris

cdusio · ‎02-28-2008

Actually I was mistaken.

I have one doc that shows active/standby only for the 5510 and another that shows it is available so I apoligize about that. You do need the sec plus license for that.

2 referencing docs

http://cisco.com/en/US/partner/docs/security/asa/asa71/asdm51/webhelp/gen_info_licenses.html

http://cisco.com/en/US/partner/products/ps6120/prod_models_comparison.html

lenpet_hun · ‎02-29-2008

hi Chris,

thanks for your answer! so a/a failover is not an option anymore... but even in a/s, having to buy twice the amount of licences we need is a bit of a rip off. are you absolutely sure we need to have the extra license for both devices?

edgar.reinke · ‎03-11-2008

Yes, you have to buy the license for both devices.

Edgar