We currently have an ASA 5512x failolver pair in production running security plus licences (see below). We recenly purchased 2 Anyconnect Mobility licences and I am tasked with installing them on the appliances. I have redeemed the PAKs accociated with these licences and received the activation keys. Will applying these activation key's "merge" with the existing security plus licences or will it overwrite them and we will lose functionality\features ? We require both the security plus and anyconnect for mobile functionality.
I disabled failover on the 2nd passive ASA and installed the new activation key (generated from the Anyconnect mobility PAK) on the ASA and reloaded. The key did not merge with the exististing security plus license. It overworte the license with a Base license that included Any Connect Mobility functionality. We lost all security plus features. I had to revert to my original activation key.
AnyConnect for Mobile is only required on one of the members in an 8.3 or later installation (as are all X series since they require 8.6 or later). I've put a couple of these on and they've never had any impact on the other licensed features.
I suspect someone may have either ordered the wrong SKU or issued an incorrect license. You should open a TAC case and ask for the Global licensing team to resolve.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...