Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

AnyConnect License

Hi i have 2 cisco ASA 5550 in Active/standby.

I want to upgrade anyconnect license to 5000 users, Do i need to buy two license one for each ASA, or i can go with only one for the active ASA ????

thankssss

Everyone's tags (3)
2 ACCEPTED SOLUTIONS

Accepted Solutions
Hall of Fame Super Silver

AnyConnect License

If you're depending on these devices for 5000 remote users I would hope that you have Smartnet support and thus be eligible to upgrade.

I'd definitely recommend upgrading to 8.4 and then applying your single new license to be shared between the HA pair.

Super Bronze

AnyConnect License

When you perform the upgrade, it will automatically convert your 8.2 configuration to 8.4 configuration.

8.4 has the same configuration as 8.3, so you can refer to the same document to upgrade from 8.2 to 8.3.

Here is the documentation that list down the changes in version 8.3 and later (inc. the old config and the new config):

http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.html

9 REPLIES
Super Bronze

AnyConnect License

Depends on which ASA version you are currently running.

ASA version 8.2 and older, you would need to have the same license on both Active and Standby ASA, ie: in your case, 2x 5000 Anyconnect user license.

ASA version 8.3 and later, you can just get the license for the active ASA. here is the doc for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa84/license/license_management/license.html#wp1487973

Hope that helps.

New Member

AnyConnect License

hi Jennifer,

I am using

Cisco Adaptive Security Appliance Software Version 8.2(1)


so i guess i need two license for each box,

What will happen if i upgrade only the active device ????

Super Bronze

AnyConnect License

if you upgrade only the active device, the ASA failover will get disabled as it detects that the license is not the same between the 2 devices.

Hall of Fame Super Silver

AnyConnect License

If you're depending on these devices for 5000 remote users I would hope that you have Smartnet support and thus be eligible to upgrade.

I'd definitely recommend upgrading to 8.4 and then applying your single new license to be shared between the HA pair.

Super Bronze

AnyConnect License

Just FYI, if you decide to upgrade to version 8.3 or higher, please ensure that you are familiar with the new configuration as there is a fair bit of configuration change from version 8.3 onwards, particularly NAT.

New Member

AnyConnect License

thx Jennifer, i think i will not be able to upgrade to 8.3.

I will buy 2 license one for each box, how should i apply those lincses, should i start with standby device or start with active ?? as i understand once i apply the activation key for new license the failover will be broke between both devices so both of them become active.

Super Bronze

AnyConnect License

Here is the steps to upgrade license on failover pair:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/license.html#wp1361966

In your case, you do not need to reload the ASA.

New Member

AnyConnect License

thxxxxxxxxxxxxxxxxx Jennifer

If i want to upgrade to 8.4, is there any tool that i can paste my running config (8.2) and generate 8.4 config or i have to do it manually ??

also is there any document i can read for diffence between 8.2 and 8.4, i have search and i only found upgrade from 8.2 to 8.3 ??

thx again

Super Bronze

AnyConnect License

When you perform the upgrade, it will automatically convert your 8.2 configuration to 8.4 configuration.

8.4 has the same configuration as 8.3, so you can refer to the same document to upgrade from 8.2 to 8.3.

Here is the documentation that list down the changes in version 8.3 and later (inc. the old config and the new config):

http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.html

525
Views
0
Helpful
9
Replies