anyconnect for mobile VPN ASA5520-SSL500-K9

Answered Question
Jul 24th, 2012

Hellow everyone.

I have VPN ASA5520-SSL500-K9.

About:

This platform has an ASA 5520 VPN Plus license.

VPN Peers                    : 750

AnyConnect for Mobile        : Disabled

I need to know which type of license shoud I buy to activate AnyConnect for mobile devices (android, iphone, etc)?

Th's.

I have this problem too.
0 votes
Correct Answer by Jennifer Halim about 1 year 8 months ago

Ahh, if it's failover pair, then ensure that you have 2 activation keys, one for each ASA.

Enter the activation key on the ASA, and click enter at the same time to apply the activation key.

If you don't apply it at the same time, it will disable the failover as failover requires exactly the same license on both ASA on version 8.0.4

Correct Answer by Jennifer Halim about 1 year 8 months ago

For mobile, license should be ASA-AC-M-5520=

You don't need AnyConnect Essential or premium anymore since you already have 500 AnyConnect premium license as per your output earlier.

  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 5 (2 ratings)
Jennifer Halim Tue, 07/24/2012 - 08:42

Here is the part# for AnyConnect Mobile:

AnyConnect Mobile-ASA 5520 (req. Essentials or Premium)

ASA-AC-M-5520=

levadnuyig Tue, 07/24/2012 - 23:17

I'm little confuse.

What type of licence shoud I buy?



L-ASA-AC-E-5520=

AnyConnect Essentials VPN License - ASA 5520 (750 Users)


Or



ASA-AC-M-5520=

AnyConnect Mobile - ASA 5520 (req. Essentials or Premium)


Th’s a lot!

Sorry for the stupid question.

Correct Answer
Jennifer Halim Wed, 07/25/2012 - 01:37

For mobile, license should be ASA-AC-M-5520=

You don't need AnyConnect Essential or premium anymore since you already have 500 AnyConnect premium license as per your output earlier.

Jennifer Halim Wed, 07/25/2012 - 02:20

pls kindly mark your question answered so others can learn from your post. Thank you.

levadnuyig Wed, 07/25/2012 - 06:48

Halim, pl's say.

What is step by step instruction to install license in production network.

Are there any additional requirements, such as their version of asa821-k8.bin or higher, for example use only asdm-621.bin?

I mean:

need to buy licence, than I open my asdm go to licensing=>activation key=> enter the license key (which I will buy)=>

than restrart vpn

That's all?

Can you help with this?

I apologize that might take away from you time wasting

I want to know all the details that would be the introduction to the network, all was ok.

Jennifer Halim Wed, 07/25/2012 - 07:34

Here is the requirement for Android mobile:

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect25/administration/guide/ac10_admin_mobile_android.html

And here is for Apple mobile:

http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect25/release/notes/rn-ac2.5-iOS.html#wp1132648

So it requires version 8.0.4 or higher.

If you just have a single ASA, not in failover pair, then your step is correct, buy license --> get the activation key --> apply the activation key to the ASA, and if you check "show version", it should have the AnyConnect for Mobile: Enabled.

levadnuyig Wed, 07/25/2012 - 07:50

I have

ASA version 8.0(4)

ASDM version 6.1.(5)

2 device in failover pair

Correct Answer
Jennifer Halim Wed, 07/25/2012 - 08:14

Ahh, if it's failover pair, then ensure that you have 2 activation keys, one for each ASA.

Enter the activation key on the ASA, and click enter at the same time to apply the activation key.

If you don't apply it at the same time, it will disable the failover as failover requires exactly the same license on both ASA on version 8.0.4

levadnuyig Thu, 07/26/2012 - 04:26

Did you do this before?

In practice (production), you do it?

With your words get the following:

I went over to the asdm ASA1 active and ASA2 standby the same time.

Buy 2 licenses mobile.

At the same time click on the 1st and the 2nd ASA activate the license.

That's it?

P.S. Just when I'm doing manipulations with active, all information is instantly duplicated on the standby. I have no doubt that it will work.

Since I do not have to test the possibilities, it is alarming.

That's why I ask the did you do this before?

Th's a lot.

Jennifer Halim Thu, 07/26/2012 - 10:00

Yup, did that before successfully.

The activation key does not get replicated to the standby ASA.

levadnuyig Thu, 07/26/2012 - 23:24

Cool

I have correctly described the action?

You clicked on standby ASA first, then active ASA second activate licence?

Th's.

Jennifer Halim Fri, 08/03/2012 - 00:44

Enter the activation key on both ASA, then if you use ASDM, send the command at the same time (or click Enter on one ASA then immediately on the other ASA). Basically sending the command to both ASA at more or less the same time.

Actions

Login or Register to take actions

This Discussion

Posted July 24, 2012 at 7:37 AM
Stats:
Replies:15 Avg. Rating:5
Views:2238 Votes:0
Shares:0

Related Content

Discussions Leaderboard