02-26-2008 02:06 AM - edited 02-21-2020 03:35 PM
hi everyone,
having two ASA 5510 configured in active/standby failover, do i have to buy ssl vpn licences to both devices to extend capabilities? what if i change it to active/active? license in question is ASA5500-SSL-25=. thanks!
peter
02-28-2008 12:26 AM
can anyone pls give me an answer?
02-28-2008 03:38 AM
Hi all,
I too am looking for an answer to this; running 2x 5520's in A/S and looking to purchase 750 SSL VPN licenses for the failover cluster.
Do we indeed need to purchase licenses for BOTH pieces of hardware, given that they are in a f/o pair?
Many thanks,
Tom
02-28-2008 04:09 PM
Yes you need the licenses for both. As far as active active goes that requires multiple context mode to work. I know that multiple context mode doesn't support VPN failover so just keep that in mind.
Also active active failover is not supported on the 5510 only active standby.
HTH
Chris
02-28-2008 04:20 PM
Actually I was mistaken.
I have one doc that shows active/standby only for the 5510 and another that shows it is available so I apoligize about that. You do need the sec plus license for that.
2 referencing docs
http://cisco.com/en/US/partner/docs/security/asa/asa71/asdm51/webhelp/gen_info_licenses.html
http://cisco.com/en/US/partner/products/ps6120/prod_models_comparison.html
02-29-2008 02:47 AM
hi Chris,
thanks for your answer! so a/a failover is not an option anymore... but even in a/s, having to buy twice the amount of licences we need is a bit of a rip off. are you absolutely sure we need to have the extra license for both devices?
03-11-2008 12:00 PM
Yes, you have to buy the license for both devices.
Edgar
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide