VPN Licensing query

Hi All,
My company wants to place a Cisco Router on to a new lease line setup. With the requirement of
1) 3 site-to-site VPN to directors.
2) 30-40 client vpn from marketing team.
3) MPLS to other branch office
4) Also act as firewall.
I've suggested placing a Cisco 2951-HSEC/K9. It says recommended no. of users upto 150 and for 2921 its 100. Some forums suggest VPNs are part of the HSEC incense.
But am still not sure whether do I need to buy additional VPN licenses to cover-up all users or not. If yes, what kind of licenses shall we go for?
We have found FL-SSLVPN25-K9 compatible VPN license pack for Cisco 29XX but can we also use IPSec VPNs as well if we buy this pack. If not is there a pack that give us options to use both technologies. Are these licenses one-off or yearly subscription?
Also can Cisco 2921-HSEC/K9 do the job for us? We are use 1 LAN interface and 1 WAN along with HWIC ADSL for failover.
Thanks in advance.
Regards
Kuldeep

Hello Kuldeep,
Not sure if you found the answer in the meantime. For site to site VPN, you would need the security packets but for SSL VPN, staring from 15.0(1)M, you need a separate license as well. This link will explain it in more details:
http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/guide/sec_ssl_vpn.html
When it comes to the license, I can only see licenses for 25 and 100 users:
http://www.cisco.com/en/US/prod/collateral/routers/ps10616/white_paper_c11_556985_ps10537_Products_White_Paper.html#wp9000798
Warm Regards,
Rose

Similar Messages

  • CIsco ASA 5505 and VPN licenses

    Hi,
    Cisco ASA 5505 comes with 10 VPN licenses in a standard configuration.
    How those licenses are counted? Will I need a license per one IPSec SA?
    If I have two site connected with LAN-to-LAN VPN with 10 subnets at one site, how many licenses will be taken? 10 - one per IPSec SA or just 1 - one per point-to-point VPN?
    Thank you.
    Regards,
    Alex

    Alex,
    In an ASA 5505, it should say something like this...when you do sh ver.
    VPN Peers : 25
    It means that you can have so many peers connecting to the ASA. Its not per IPSec SA.
    Its a per tunnel license.
    Rate this, if it helps!
    Gilbert

  • How to read the output of 'tarantella license query' command?

    I'm trying to track my license usage (to better determine when to buy new licenses, and to track usage over time).
    When I issue the 'tarantella license query command, this is typical of the output I see:
    [root@sgdserver ~]# /opt/tarantella/bin/tarantella license query
    License usage at: Mon Feb 11 14:03:53 EST 2008
    Type                In use / Total
    Base                6      / 230
    UNIX                4      / 230
    Mainframe           0      / 230
    Windows             0      / 230
    AS/400              0      / 230
    [root@sgdserver ~]#What is the above saying? Is it saying that I am using 10 licenses out of my 230, or am I just using 6 licenses? In other words, do I add up the numbers or just use the highest one? Or do I just have to worry about the 'Base' license number?
    Thanks.

    The base license is the number of users that are logged into a webtop.
    From there you count then connectivity type.
    So you have 6 webtop licenses out of 230 consumed and of those 4 users have launched UNIX sessions out of 230 you have licensed.
    hope this helps.

  • VPN license in Cisco 1841

    Does the below BOQ configure for the cisco router allow me to config site to site VPN or do we need any othe VPN license
    CISCO1841
    Modular Router w/2xFE, 2 WAN slots, 64 FL/256 DR
    1
    00
    CAB-ACE
    AC Power Cord (Europe), C13, CEE 7, 1.5M
    1
    0
    S184ASK9-15101T
    Cisco 1841 IOS ADVANCED SECURITY
    1
    0
    HWIC-1ADSL
    1-port ADSLoPOTS HWIC
    1
    0
    CAB-ADSL-RJ11X
    ADSL Cable RJ11 to RJ11, Cross-over
    1
    0
    HWIC-AP-G-E
    AP HWIC w 2.4 Ghz Radio for 802.11 b/g Europe
    1
    00
    1
    0
    MEM1800-64CF
    64MB Cisco 1800 Compact Flash Memory
    1
    0
    MEM1841-128U256D
    128 to 256MB SODIMM DRAM factory upgrade for the Cisco 1841
    1
    0
    CAB-ADSL-RJ11
    Lavender Cable for xDSL, Straight-through, RJ-11, 6 feet
    1
    0
    AIR-ANT2422D-R
    2.4 GHz 2.2 dBi Dipole Swivel Antenna Black, RP-TNC
    2
    0
    ISR-CCP-EXP
    Cisco Config Pro Express on Router Flash
    1
    0
    CON-SNT-CISCO1841
    SMARTNET 8X5XNBD Modular Router w/2xF
    1
    139

    Does the below BOQ configure for the cisco router allow me to config site to site VPN or do we need any othe VPN license
    CISCO1841
    Modular Router w/2xFE, 2 WAN slots, 64 FL/256 DR
    1
    00
    CAB-ACE
    AC Power Cord (Europe), C13, CEE 7, 1.5M
    1
    0
    S184ASK9-15101T
    Cisco 1841 IOS ADVANCED SECURITY
    1
    0
    HWIC-1ADSL
    1-port ADSLoPOTS HWIC
    1
    0
    CAB-ADSL-RJ11X
    ADSL Cable RJ11 to RJ11, Cross-over
    1
    0
    HWIC-AP-G-E
    AP HWIC w 2.4 Ghz Radio for 802.11 b/g Europe
    1
    00
    1
    0
    MEM1800-64CF
    64MB Cisco 1800 Compact Flash Memory
    1
    0
    MEM1841-128U256D
    128 to 256MB SODIMM DRAM factory upgrade for the Cisco 1841
    1
    0
    CAB-ADSL-RJ11
    Lavender Cable for xDSL, Straight-through, RJ-11, 6 feet
    1
    0
    AIR-ANT2422D-R
    2.4 GHz 2.2 dBi Dipole Swivel Antenna Black, RP-TNC
    2
    0
    ISR-CCP-EXP
    Cisco Config Pro Express on Router Flash
    1
    0
    CON-SNT-CISCO1841
    SMARTNET 8X5XNBD Modular Router w/2xF
    1
    139

  • VPN License question on 5505 ASA Firewall

    Inherited a firewall project, it's getting a VPN running on a ASA 5505 Firewall for remote workers.  Firewall was configured by someone else who isn't available. 
    Basic question on the License: The current license is good for 2 SSL VPN Peers, and 20 "Total VPN Peers".  Can anyone elaborate on "Total VPN Peers"?  Can I configure Clientless SSL VPN connections, or do I need to go IPSec to get the 20 VPN sessions?
    Thank you in advance,
    Jeff

    Hi Linda,
    The default IKE SA lifetime is 86,400 seconds and the default IPSEC SA lifetime is 28,800 seconds. However, these values are configurable so you'll need to check your 5505 configuration to answer these questions. You can look at the output of 'show run crypto' to see the configured values.
    -Mike

  • ASA 5505 VPN licensing question

    I have three locations, that i want to connect via site-to-site vpn's deployed on three ASA 5505. How is the term "Peers" in the licensing text, affecting my scenario? Is each ASA one peer in a site-to-site solution, or is each user transmitting data in the established tunnels also counted?

    Users transmitting across the site to site tunnel are not counted. Only the peers themselves.

  • Yet Another ASA VPN Licensing Question :)

    I have a pretty good understanding of ASA VPN concepts, but not sure about this scenario.  Two questions regarding 5525 VPN SSL Anyconnect Premium Licensing.
    1.  Assuming we already own a ASA 5525-x with 750 Anyconnect Essentials and Mobile ( p/n ASA5525VPN-EM750K9 ) and want the ability for 200 Clientless (Anyconnect Premium) VPN connections, including mobile devices, what part number do I need?  
    2.  Assuming we do not yet own a ASA5525, but want the same 200 clientless VPN connections plus mobile device connectivity, what part number do I need?   I'm assuming this is correct  >>  ASA5525VPN-PM250K9
    Thanks!

    It's no problem - I sometimes look for an answer to a question myself and find my own 2 year old post explaining the answer. As long as I don't find my 2 week old answer, I'm OK with that. :)
    Anyhow, no there's not a SKU to upgrade Essentials to Premium. All the Premium upgrade SKUs are between Premium licensed user tiers (10-25, 25-50, 50-100 etc.).
    If you're a persuasive customer and make a strong case with your reseller they may be able to get a deal with Cisco outside the normal channels to get some relief as a customer satisfaction issue. That's very much a case by case thing though and not the normal fulfillment method.

  • IP Phone SSL VPN - Licenses required.

    Hi,
    Can someone confirm the linceses required for me to get this working. I understand that it needs the 'AnyConnect for Cisco VPN Phone' license but do I also need to have anyconnec essentials? This is for ASA version 8.2 and the a license info below is for the ASA i intend to delpoy this on.
    Thanks
    Licensed features for this platform:
    Maximum Physical Interfaces    : Unlimited
    Maximum VLANs                  : 250
    Inside Hosts                   : Unlimited
    Failover                       : Active/Active
    VPN-DES                        : Enabled
    VPN-3DES-AES                   : Enabled
    Security Contexts              : 2
    GTP/GPRS                       : Disabled
    SSL VPN Peers                  : 2
    Total VPN Peers                : 5000
    Shared License                 : Disabled
    AnyConnect for Mobile          : Disabled
    AnyConnect for Cisco VPN Phone : Disabled
    AnyConnect Essentials          : Disabled
    Advanced Endpoint Assessment   : Disabled
    UC Phone Proxy Sessions        : 2
    Total UC Proxy Sessions        : 2
    Botnet Traffic Filter          : Disabled
    This platform has an ASA 5550 VPN Premium license.

    Hi,
    You would need Anyconnect Premium license along with Cisco Ip phone feature enabled on ASA for Cisco IP phone to use anyconnect vpn feature.
    You can find more details from following link:
    http://www.cisco.com/en/US/products/ps12726/products_qanda_item09186a0080bf292f.shtml
    Regards,
    Varinder
    P.S. Please mark this post as 'Answered' if you find the above information helpful so that it brings goodness to other community users

  • Cisco ASA 5505 - 2 questions - VPN Licensing; Routing

    Hi,
    I have a client that has a Cisco ASA 5505 security appliance.  Currently it is setup as a "proof of concept" for clientless browser-based SSL VPN.  The device came with 2 licenses for this service, and we need to increase that somewhere between 10-25 users.  25 users is the max on this device I believe.
    I have searched Cisco.com and tried Googling the ASA 5505 for licensing but I can't find the correct license that I need for this.
    The second question I have is routing capability.  We have a WAN connection to another branch of the computer from this location where the ASA 5505 is located.  A Cisco 2851 is used for this connection.  We are wanting to bring in a high speed Internet connection for the VPN access and Internet access.  What I need to know is can we put the WAN and Internet connections behind the ASA 5505 and have that route appropriately to the branch WAN for that traffic and all other traffic to the Internet?
    Thanks!
    --Kent

    Hi Kent,
    Thank you for your question.  This community is for Cisco Small Business products and your question is in reference to a Cisco Elite/Classic product.  Please post your question in the Cisco NetPro forums located here: http://forums.cisco.com/eforum/servlet/NetProf?page=main (http://forums.cisco.com/eforum/servlet/NetProf?page=main) This forum has subject matter experts on Cisco Elite/Classic products that may be able to answer your question.
    Regards,
    David Dunlap
    SBSC Engineer

  • Oracle 10g Licensing Query

    Hi,
    I have a query with regards to Oracle 10g licensing for additional options (OLAP, Data Mining, Partitioning, Spatial & Database Vault) on top of enterprise edition.
    Even though i am not using any of the options, i have them installed along with enterprise edition. Do i still need to pay for these additional options?
    From 10g, you can always prove to oracle that any of the features/options are not in use via DBA_FEATURE_USAGE_STATISTICS.
    We are using shared infrastructure for hosting many application databases. Today we have a application that uses only partitioning, but tommorrow we might have to create a database within the same oracle home that uses OLAP & data mining as well.
    would be interested in knowing what is oracle stand on this i.e. we pay for additional options only if we are using them or we pay just because they are installed regardless of we are using them or not??
    Thanks & Regards
    Chandar

    Chandark,
    You need to pay licenses if you are using it commercially and if it is installed and you haven't paid for it then how would you stop anyone not using it because its not paid but its there. This will be against your contractual agreement and they may fine you or you have to pay for the options. So I recommend not to install options you haven't paid for to avoid any issues. But if you are using for learning purpose and not commercial then you are good. You can further contact local Oracle Support or local Sales rep for more information
    Hope this helps, regards
    OrionNet

  • License query

    Hi,
    I have a query about licensing. This should be the realm of the suppliers, but I'm finding it hard to get an answer without going off and having a meeting wherein we commit to a purchase.
    I know most vendors with an "educational" license, allow this license for use in all non for profit applications (such as Microsoft). With the development license for Oracle being "free", what is the status of a "not for profit" license, for 11G database, if in fact such a thing exists?

    The latest signature release (as of this writing) is S600, released October 5, 2011.
    You need to be running E4 release of software to have these installed.
    See if you have S600 on your sensor (show ver), if you don't then you do not have automatic signature updates working without a valid license.(as expected)
    - Bob

  • SQL Server 2008 R2 Licensing Query

    Hi,
    If i have SQL Server 2008 R2 Enterprise License key for a single instance and I am installing all the shared features from the setup. Then is my license counted as being used or no?
    Or is it only used when i install Database Engine?
    Please mark the answer as helpful if i have answered your query. Thanks and Regards, Kartar Rana

    No, a separate license is not required for
    Management Tools.
    However, any device that has SQL Server tools or technologies installed must have a valid SQL Server license. 
    Hope this clears your question..
    Raju Rasagounder Sr MSSQL DBA

  • SAP Crystal Dashboard licensing query

    Hello All,
    We need to purchase Xcelsius license, SAP Accounts rep has provided following link for online store where I can see Departmental edition, Personal edition and dashboard viewing licenses.
    http://store.businessobjects.com/store/bobjamer/en_US/DisplayCategoryProductListPage/ThemeID.29254600/categoryID.57065800/parentCategoryID.57065700
    My question is we already have SAP BO premium 10 CPU licenses, we just need dashboard feature to be added on top of it. We need 3 dashboard developer licenses and a large audience should view the live dashboards.
    Please suggest which license should we go with, as per my understanding we dont require viewing license as we already have 10 CPU premium license with which we can use all the features.
    I know this query should be asked to the accounts rep but unfortunately I am not getting proper response from them and we need to purchase this ASAP.
    Any idea would be of great help.
    Thanks,
    Sohel

    Hi Sohel,
    I look after pricing and licensing for SAP BusinessObjects BI.
    BOE Premium does not provide for Xcelsius Dashboard viewing rights. BOE Premium includes Crystal Reports, Webi and OLAP Intelligence viewing rights. Xcelsius was acquired after the release of BOE Premium and it is an add-on to that license model.
    To view dashboards integrated with BO Premium, you will need the Xcelsius Interactive Viewing license.
    Note that this is a legacy license model. Current customers can purchase more of this but we have been positioning the BI Suite to new customers since 2011.
    -Blair

  • Oracle data lookup - Licensing query

    Hi,
    Not finding the right forum to post this query, so i hope the coffee shop folks can be helpful
    We are running SAP R/3 4.7 Enterprise with Oracle 9.2.0 as the backend database (on Windows Server 2003 OS).
    Our Oracle license is embedded with SAP i.e., not acquired separately.
    For business needs we intend to make read only queries to the backend database (Oracle database lookup) programmatically through Microsoft's SharePoint portal.
    For the access methods, one option is to use Business Data Catalog - BDC of sharepoint which queries the Oracle database directly (using xml).
    Would appreciate comments on whether this is authorized or we need any additional component / license?
    I have already noted the restrictions mentioned in note 581312, particularly point 3 which speaks about SAP provided Oracle license
    Thank you
    Zubair

    Hi Jurjen / Hi Matt
    Thanks for the responses. These have been very helpful
    A couple of followup thoughts:
    1. Actually, the current need i am trying to fill is to read the 'reports to' relationship from SAP so as to fill the manager field/attribute in the Sharepoint User profile. I understand that the right way to do this is through standard interfaces of SAP like RFC/BAPI with the authorization checks in place but unfortunately, my sharepoint developer is unable to use RFC with Business Data Catalog (xml based). Says only a database query is possible. Perhaps he is wrong and i am trying to confirm this. If you have any thoughts on it, please do share.
    2.
    >If I remember correctly even read only access can muck up the db statistics and so have an adverse effect on the applications.
    So this means, database performance logs such as ST02 & ST04 may show incorrect information and it might also have an adverse impact on performance right? or anything else too.
    Many thanks
    Regards,
    Edited by: Matt on Feb 4, 2010 1:49 PM - message restored, formatting fixed

  • Adobe licensing query

    I have installed Flash CS5 and Flash 8 on single computer system to frequently work on both softwares Hence, my query is that how many Flash licenses required to purchase to me to complain with adobe licensing?
    If I have purchased one Flash CS5 license then is it possible to use any old version of flash software on the same system which already have installed license Flash CS5?
    Please suggest!
    Thanks in advance

    Hi Sir,
    Thanks!
    Actually, I have tried to see in Adobe Software license Agreements but still not get this information in written form.
    But, Thanks you to clear my doubts.

Maybe you are looking for