3DES activation key resets user count on PIX 501

Answered Question
May 22nd, 2010

Hi,

I have a PIX-501 that has the following licenses:

Licensed Features:
Failover:                    Disabled
VPN-DES:                     Enabled
VPN-3DES-AES:                Disabled
Maximum Physical Interfaces: 2
Maximum Interfaces:          2
Cut-through Proxy:           Enabled
Guards:                      Enabled
URL-filtering:               Enabled
Inside Hosts:                50
Throughput:                  Unlimited
IKE peers:                   10

This PIX has a Restricted (R) license.

I would like to enable the 3DES/AES features, so I went to the http://www.cisco.com/go/license site and entered the serial number and requested the 3DES key.  When I enter this key, the Inside Hosts are changed to 10.  How do I go about getting 3DES and retaining the 50 hosts?  I purchased the PIX used and do not have any paperwork showing the 50 user license was additive, however I would think that by virute of the fact that I can produce a running activation key for that serial number that should be sufficient proof that the device does indeed have a 50-host license.  I emailed [email protected] but they sent me the same activation key that I generated off of the website.

Best regards,

Greg

I have this problem too.
0 votes
Correct Answer by Magnus Mortensen about 6 years 8 months ago

Check your inbox.

Correct Answer by Magnus Mortensen about 6 years 8 months ago

Greg,

     I found the records for the 50 user license on the PIX. I have private messaged you the details.

- Magnus

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
Greg Palumbo Sun, 05/23/2010 - 20:23

Thanks Halijenn,

I figured I should be able to do that.  In fact, I did include the show version output when I requested the license, but the person assigned to the case must have missed that detail.  I'll open a new case with licensing and make sure I point that out.

Best regards,

Greg

Greg Palumbo Mon, 05/24/2010 - 08:36

Halijenn,

I have sent the Show Version output to licensing (at) cisco (dot) com for a second time, and have been told (both times) that the unit was originally sold with a 10-user license, and that I need to show proof of purchase of the 50 user license (first time) or that I need to send them a different serial number (second time). The show version clearly shows it's now at 50, and there is a valid activation key for that serial number in that show version output.  Since the only way to generate that activation key for a given serial number is through Cisco's licensing tool, can't they look up that serial number against the database of what the licensing tool has generated keys for?  Is there someone at licensing I need to talk to?  This keeps getting dismissed with a one-line reply from the licensing group, it doesn't appear that they're even reading my request.

Thanks and Best regards,

Greg

Jennifer Halim Tue, 05/25/2010 - 03:24

Call in the TAC number and ask to speak to the case owner, and I guess you can show them the show version output directly from your PIX firewall to them so they will see it for themselves.

Correct Answer
Magnus Mortensen Tue, 05/25/2010 - 05:39

Greg,

     I found the records for the 50 user license on the PIX. I have private messaged you the details.

- Magnus

Greg Palumbo Tue, 05/25/2010 - 09:44

Thanks Magnus!  Unfortunately, that was the wrong serial number, but I PM'd you the correct S/N, so if you could find the sales order on that one, I'd be very grateful.  I've been asked for that a couple of times by the licensing folks, but I don't have that as I bought the PIX used.

Best regards,

Greg

Greg Palumbo Wed, 05/26/2010 - 12:07

Magnus,

Again, many thanks for your help!  I was indeed able to get the proper 3DES/50-host key once I provided licensing the PAK and Sales Order number for that PIX's 50-seat upgrade.  I do actually still have the first one you looked up yesterday, so if you can find the PAK for that I should hopefully be able to fix that one too.  Details are in you PM.

Thanks again,

Greg

Actions

This Discussion