Easy VPN

Answered Question
Dec 6th, 2009

Dear all,

I configured easy VPN on my ASA, but, when i type the following command, it gives  me this error as shown:

SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.

So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.

N.B.: sh version of ASA is attached.

I have this problem too.
0 votes
Correct Answer by Jon Marshall about 7 years 1 month ago

EBIC-2007 wrote:

Dear all,

I configured easy VPN on my ASA, but, when i type the following command, it gives  me this error as shown:

SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.

So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.

N.B.: sh version of ASA is attached.

Your license is only for DES and not 3DES. You can get a free license upgrade to 3DES from Cisco. See this doc for details -http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/DES-lic.html

ASA 3DES

Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jon Marshall Sun, 12/06/2009 - 06:02

EBIC-2007 wrote:

Dear all,

I configured easy VPN on my ASA, but, when i type the following command, it gives  me this error as shown:

SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.

So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.

N.B.: sh version of ASA is attached.

Your license is only for DES and not 3DES. You can get a free license upgrade to 3DES from Cisco. See this doc for details -http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/DES-lic.html

ASA 3DES

Jon

Actions

This Discussion