Cisco ASA Series User Manual

1-3
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring IPsec and ISAKMP
Licensing Requirements for Remote Access IPsec VPNs
• For IKEv2, a separate pseudo-random function (PRF) used as the algorithm to derive keying
material and hashing operations required for the IKEv2 tunnel encryption and so on.
• A limit to the time the ASA uses an encryption key before replacing it.
With IKEv1 policies, you set one value for each parameter. For IKEv2, you can configure multiple
encryption and authentication types, and multiple integrity algorithms for a single policy. The ASA
orders the settings from the most secure to the least secure and negotiates with the peer using that order.
This ordering allows you to potentially send a single proposal to convey all the allowed transforms
instead of sending each allowed combination as with IKEv1.
Licensing Requirements for Remote Access IPsec VPNs
The following table shows the licensing requirements for this feature:
Model License Requirement
1
ASA 5505 • IPsec remote access VPN using IKEv2 (use one of the following):
– AnyConnect Premium license:
Base license and Security Plus license: 2 sessions.
Optional permanent or time-based licenses: 10 or 25 sessions.
Shared licenses are not supported.
2
– AnyConnect Essentials license
3
: 25 sessions.
• IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
– Base license: 10 sessions.
– Security Plus license: 25 sessions.
ASA 5510
• IPsec remote access VPN using IKEv2 (use one of the following):
– AnyConnect Premium license:
Base and Security Plus license: 2 sessions.
Optional permanent or time-based licenses: 10, 25, 50, 100, or 250 sessions.
Optional Shared licenses
2
: Participant or Server. For the Server license, 500-50,000 in
increments of 500 and 50,000-545,000 in increments of 1000.
– AnyConnect Essentials license
3
: 250 sessions.
• IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
Base license and Security Plus license: 250 sessions.

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English