RE: ASA 5510 License Requirement for Security Lab

From: Zahid Hassan (zhassan@gmx.net)
Date: Sun Feb 04 2007 - 07:11:27 ART


Hi Kamal,

Many thanks for your reply.

I was actually referring to the ASA platform.
The requirement on a PIX is very clear as its documented
several times on CCO.

Unfortunately, I haven't come across any document which clarifies the
license requirement for BOTH units to run failover on the ASA platform.

Its clear that one unit MUST have Security Plus license,
the question was about the second unit.

Zahid

-----Original Message-----
From: Kamal N Malhotra [mailto:kmalhotr@cisco.com]
Sent: Saturday, February 03, 2007 9:02 PM
To: 'Zahid Hassan'; 'Security GroupStudy'; 'R&S CCIE GroupStudy'
Subject: RE: ASA 5510 License Requirement for Security Lab

Hi Zahid,

No. You need not have security plus on both for failover to work. Whoever
says that you need it, is wrong. In order to have failover work, you need
security plus on atleast one box, the other might have "failover only"
license. But if you want Active/Active failover to work, then you need
security plus on both.

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/
failover.htm#wp1047269

HTH,

Thanks and warm regards,

Kamal N Malhotra
TAC Engineer - VPN
Cisco Systems Inc.

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Zahid Hassan
Sent: Saturday, February 03, 2007 2:06 PM
To: Security GroupStudy; R&S CCIE GroupStudy
Subject: ASA 5510 License Requirement for Security Lab

Dear All,

Can anyone please clarify if its really necessary
to have two ASA 5510 with Security Plus license.

Will failover configuration work if one is with
Security Plus and the other with Base license ?

Thanks in advance for any input on this.

Regards,

Zahid
CCIE #14103 (R&S/SP)



This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:45 ART