Cisco ASA 5505 User Manual

Page 123

Advertising
background image

3-3

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 3 Managing Feature Licenses

Supported Feature Licenses Per Model

ASA 5510

Encryption

Base (DES)

Opt. lic.: Strong (3DES/AES)

Base (DES)

Opt. lic.: Strong (3DES/AES)

Failover

No support

Active/Standby (no stateful failover)

Interfaces of all types, Max. 52

120

Security Contexts

No support

No support

Inside Hosts, concurrent

2

10

3

Opt. licenses:

50

Unlimited

10

3

Opt. licenses:

50

Unlimited

VLANs, maximum

Routed mode: 3 (2 regular and 1 restricted)
Transparent mode: 2

Routed mode: 20
Transparent mode: 3 (2 regular and 1 failover)

VLAN Trunks, maximum

No support

8 trunks

1.

The total number of VPN sessions depends on your licenses. If you enable AnyConnect Essentials, then the total is the model maximum of 25. If you
enable AnyConnect Premium, then the total is the AnyConnect Premium value plus the Other VPN value, not to exceed 25 sessions.

2.

In routed mode, hosts on the inside (Business and Home VLANs) count toward the limit when they communicate with the outside (Internet VLAN),
including when the inside initiates a connection to the outside as well as when the outside initiates a connection to the inside. Note that even when the
outside initiates a connection to the inside, outside hosts are not counted toward the limit; only the inside hosts count. Hosts that initiate traffic between
Business and Home are also not counted toward the limit. The interface associated with the default route is considered to be the outside Internet interface.
If there is no default route, hosts on all interfaces are counted toward the limit. In transparent mode, the interface with the lowest number of hosts is counted
toward the host limit. Use the show local-host command to view host limits.

3.

For a 10-user license, the max. DHCP clients is 32. For 50 users, the max. is 128. For unlimited users, the max. is 250, which is the max. for other models.

Table 3-1

ASA 5505 License Features (continued)

Licenses

Description (Base License in Plain Text)

Description (Security Plus Lic. in Plain Text)

Table 3-2

ASA 5510 License Features

Licenses

Description (Base License in Plain Text)

Description (Security Plus Lic. in Plain Text)

Firewall Licenses

Botnet Traffic Filter

Disabled

Optional Time-based license:
Available

Disabled

Optional Time-based license:
Available

Firewall Conns, Concurrent

50,000

130,000

GTP/GPRS

No support

No support

Intercompany Media Eng.

Disabled

Optional license: Available

Disabled

Optional license: Available

UC Phone Proxy Sessions

2

Optional licenses:

2

Optional licenses:

24

50

100

24

50

100

VPN Licenses

Adv. Endpoint Assessment

Disabled

Optional license: Available

Disabled

Optional license: Available

AnyConnect for Cisco VPN
Phone

Disabled

Optional license: Available

Disabled

Optional license: Available

AnyConnect Essentials

Disabled

Optional license: Available
(250 sessions)

Disabled

Optional license: Available
(250 sessions)

AnyConnect for Mobile

Disabled

Optional license: Available

Disabled

Optional license: Available

Advertising