cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
975
Views
0
Helpful
2
Replies

Are VPN Clients supported in multiple context mode?

Boudewijn Plomp
Level 1
Level 1

Hi,

Recently our company has bought two Cisco ASA 5515-X firewalls for at our datacenter. I am new on configuring a Cisco ASA but sofar things are looking good. I have configured them both with HA (active/active) in multiple context mode. Currently they host two security contexts.

I want to configure VPN Client functionallity for Remote Access. As far as I know they come with two user licenses. But there is no VPN Client wizard available and I can't find a way to enable it.

- Is VPN Client supported in Multiple Context mode?

- What is AnyWhere Essentials vs Premium Peers?

Boudewijn

Here is some additional output fromt he current configuration:

Cisco Adaptive Security Appliance Software Version 9.1(2) <context>

Device Manager Version 7.1(3)

Encryption hardware device : Cisco ASA-55xx on-board accelerator (revision 0x1)

                             Boot microcode        : CNPx-MC-BOOT-2.00

                             SSL/IKE microcode     : CNPx-MC-SSL-PLUS-T020

                             IPSec microcode       : CNPx-MC-IPSEC-MAIN-0024

                             Number of accelerators: 1

Baseboard Management Controller (revision 0x1) Firmware Version: 2.4

Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 100            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

Encryption-DES                    : Enabled        perpetual

Encryption-3DES-AES               : Enabled        perpetual

Security Contexts                 : 2              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 250            perpetual

Total VPN Peers                   : 250            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual

IPS Module                        : Disabled       perpetual

Cluster                           : Disabled       perpetual

This platform has an ASA 5515 Security Plus license.

1 Accepted Solution

Accepted Solutions

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

No form of VPN Client is supported when you are using an ASA in Multiple Context mode.

The only type of VPN supported in the newer 9.x softwares is L2L VPN / Site to Site VPN

This might answer the VPN Licensing related question

http://packetpushers.net/cisco-asa-licensing-explained/

I never seem to remember it exactly myself even.

- Jouni

View solution in original post

2 Replies 2

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

No form of VPN Client is supported when you are using an ASA in Multiple Context mode.

The only type of VPN supported in the newer 9.x softwares is L2L VPN / Site to Site VPN

This might answer the VPN Licensing related question

http://packetpushers.net/cisco-asa-licensing-explained/

I never seem to remember it exactly myself even.

- Jouni

Thanks Jouni. That is exactly what I thought and what I was afraid of.

Review Cisco Networking products for a $25 gift card