Chapter 1
Configuring Remote Access IPsec VPNs
Model
License Requirement
•
ASA 5545-X
•
•
ASA 5555-X
•
•
ASA 5585-X with
SSP-10
•
1
IPsec remote access VPN using IKEv2 (use one of the following):
–
AnyConnect Premium license:
Base license: 2 sessions.
Optional permanent or time-based licenses: 10, 25, 50, 100, 250, 500, 750, 1000, or 2500
sessions.
Optional Shared licenses
increments of 500 and 50,000-545,000 in increments of 1000.
–
AnyConnect Essentials license
IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
Base license: 2500 sessions.
IPsec remote access VPN using IKEv2 (use one of the following):
–
AnyConnect Premium license:
Base license: 2 sessions.
Optional permanent or time-based licenses: 10, 25, 50, 100, 250, 500, 750, 1000, 2500, or
5000 sessions.
Optional Shared licenses
increments of 500 and 50,000-545,000 in increments of 1000.
–
AnyConnect Essentials license
IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
Base license: 5000 sessions.
IPsec remote access VPN using IKEv2 (use one of the following):
–
AnyConnect Premium license:
Base license: 2 sessions.
Optional permanent or time-based licenses: 10, 25, 50, 100, 250, 500, 750, 1000, 2500, or
5000 sessions.
Optional Shared licenses
increments of 500 and 50,000-545,000 in increments of 1000.
–
AnyConnect Essentials license
IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
Base license: 5000 sessions.
Licensing Requirements for Remote Access IPsec VPNs
2
: Participant or Server. For the Server license, 500-50,000 in
3
: 2500 sessions.
2
: Participant or Server. For the Server license, 500-50,000 in
3
: 5000 sessions.
2
: Participant or Server. For the Server license, 500-50,000 in
3
: 5000 sessions.
Cisco ASA Series CLI Configuration Guide
1-5