I have a pair of 4110s, and I had a problem SSHing to the logical ASA's. Having looked at the licensing, it appears that the "Encryption-3DES-AES" is disabled, which is causing it to only accept SSHv1 connections. The problem is, I have no idea if this even has a base-license??? I've posted the show license all output below.
ASA# show license all Smart licensing enabled: Yes Compliance status: In compliance Overall licensed status: Eval period (6) Entitlement(s): Feature tier: Tag: regid.2015-11.com.cisco.FIREPOWER_4100_ASA_STANDARD,1.0_7d7f3ff2-13 98-4b0e-aced-b3f7fb1cacfc Version: 1.0 Enforcement mode: Eval period Handle: 2 Requested time: Mon, 12 Nov 2018 15:38:58 UTC Requested count: 1 Request status: Complete Strong encryption: Tag: regid.2015-11.com.cisco.FIREPOWER_4100_ASA_ENCRYPTION,1.0_00_7d7f3f- c5ad-40da-97b1-ee0438d3b2c9 Version: 1.0 Enforcement mode: Eval period Handle: 3 Requested time: Tue, 13 Nov 2018 10:43:07 UTC Requested count: 1 ASA# ASA# ASA# ASA# ASA# show license all Smart licensing enabled: Yes Compliance status: In compliance Overall licensed status: Eval period (6) Entitlement(s): Feature tier: Tag: regid.2015-10.com.cisco.FIREPOWER_4100_ASA_STANDARD,1.0_7d7fbbe2-1378-45b0e-aced-b3fefafefc Version: 1.0 Enforcement mode: Eval period Handle: 2 Requested time: Mon, 12 Nov 2018 15:38:58 UTC Requested count: 1 Request status: Complete Strong encryption: Tag: regid.2015-10.com.cisco.FIREPOWER_4100_ASA_ENCRYPTION,1.0_052986db-c5ad-50fa-97b1-b3fefafefc Version: 1.0 Enforcement mode: Eval period Handle: 3 Requested time: Tue, 13 Nov 2018 10:43:07 UTC Requested count: 1 Request status: Complete Serial Number: XXXXXXXXX License mode: Smart Licensing Licensed features for this platform: Maximum Physical Interfaces : Unlimited Maximum VLANs : 1024 Inside Hosts : Unlimited Failover : Active/Active Encryption-DES : Enabled Encryption-3DES-AES : Disabled Security Contexts : 10 Carrier : Disabled AnyConnect Premium Peers : 10000 AnyConnect Essentials : Disabled Other VPN Peers : 10000 Total VPN Peers : 10000 AnyConnect for Mobile : Enabled AnyConnect for Cisco VPN Phone : Enabled Advanced Endpoint Assessment : Enabled Shared License : Disabled Total TLS Proxy Sessions : 10000 Cluster : Enabled
On previous generations of ASA's, there used to be a message at the bottom that says something like:
"This platform has an ASA5580-40 VPN Premium license"
This is no longer present on the 4110's. So I can't tell what licensing it's using here. Will a base license enable this "Encryption-3DES-AES"?
No comments:
Post a Comment