Cisco ASA Series Cli Configuration Manual page 195

Chapter 1 Managing Feature Licenses
A.
Q.
A.
Q.
A.
Q.
A.
Q.
A.
Guidelines and Limitations
See the following guidelines for activation keys.
Context Mode Guidelines
•
•
Firewall Mode Guidelines
All license types are available in both routed and transparent mode.
Failover Guidelines
•
•
Yes. For identical licenses, the time limit is combined when you install multiple time-based licenses.
For non-identical licenses (for example, a 1000-session AnyConnect Premium license and a
2500-session license), the ASA automatically activates the next time-based license it finds for the
feature.
Can I install a new permanent license while maintaining an active time-based license?
Yes. Activating a permanent license does not affect time-based licenses.
For failover, can I use a shared licensing server as the primary unit, and the shared licensing backup
server as the secondary unit?
No. The secondary unit has the same running license as the primary unit; in the case of the shared
licensing server, they require a server license. The backup server requires a participant license. The
backup server can be in a separate failover pair of two backup servers.
Do I need to buy the same licenses for the secondary unit in a failover pair?
No. Starting with Version 8.3(1), you do not have to have matching licenses on both units. Typically,
you buy a license only for the primary unit; the secondary unit inherits the primary license when it
becomes active. In the case where you also have a separate license on the secondary unit (for
example, if you purchased matching licenses for pre-8.3 software), the licenses are combined into a
running failover cluster license, up to the model limits.
Can I use a time-based or permanent AnyConnect Premium license in addition to a shared
AnyConnect Premium license?
Yes. The shared license is used only after the sessions from the locally installed license (time-based
or permanent) are used up. Note: On the shared licensing server, the permanent AnyConnect
Premium license is not used; you can however use a time-based license at the same time as the
shared licensing server license. In this case, the time-based license sessions are available for local
AnyConnect Premium sessions only; they cannot be added to the shared licensing pool for use by
participants.
In multiple context mode, apply the activation key in the system execution space.
Shared licenses are not supported in multiple context mode.
Shared licenses are not supported in Active/Active mode. See the
section on page 1-29 for more information.
Failover units do not require the same license on each unit.
Guidelines and Limitations
"Failover and Shared Licenses"
Cisco ASA Series CLI Configuration Guide
1-33