Easy VPN

Answered Question
Dec 6th, 2009
User Badges:

Dear all,


I configured easy VPN on my ASA, but, when i type the following command, it gives  me this error as shown:


SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.



So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.


N.B.: sh version of ASA is attached.

Correct Answer by Jon Marshall about 7 years 5 months ago

EBIC-2007 wrote:


Dear all,


I configured easy VPN on my ASA, but, when i type the following command, it gives  me this error as shown:


SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.



So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.


N.B.: sh version of ASA is attached.


Your license is only for DES and not 3DES. You can get a free license upgrade to 3DES from Cisco. See this doc for details -http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/DES-lic.html


ASA 3DES


Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jon Marshall Sun, 12/06/2009 - 06:02
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

EBIC-2007 wrote:


Dear all,


I configured easy VPN on my ASA, but, when i type the following command, it gives  me this error as shown:


SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.



So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.


N.B.: sh version of ASA is attached.


Your license is only for DES and not 3DES. You can get a free license upgrade to 3DES from Cisco. See this doc for details -http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/DES-lic.html


ASA 3DES


Jon

Actions

This Discussion