Cisco ASA Series User Manual

1-2
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Remote Access IPsec VPNs
Licensing Requirements for Remote Access IPsec VPNs
You can configure the ASA to assign an IPv4 address, an IPv6 address, or both an IPv4 and an IPv6
address to an AnyConnect client by creating internal pools of addresses on the ASA or by assigning a
dedicated address to a local user on the ASA.
The endpoint must have the dual-stack protocol implemented in its operating system to be assigned both
types of addresses. In both scenarios, when no IPv6 address pools are left but IPv4 addresses are
available or when no IPv4 address pools are left but IPv6 addresses are available, connection still occurs.
The client is not notified; however, so the administrator must look through the ASA logs for the details.
Assigning an IPv6 address to the client is supported for the SSL protocol. This feature is not supported
for the IKEv2/IPsec protocol.
Licensing Requirements for Remote Access IPsec VPNs
The following table shows the licensing requirements for this feature:
Model License Requirement
1
ASA 5505 • IPsec remote access VPN using IKEv2 (use one of the following):
– AnyConnect Premium license:
Base license and Security Plus license: 2 sessions.
Optional permanent or time-based licenses: 10 or 25 sessions.
Shared licenses are not supported.
2
– AnyConnect Essentials license
3
: 25 sessions.
• IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
– Base license: 10 sessions.
– Security Plus license: 25 sessions.
ASA 5510
• IPsec remote access VPN using IKEv2 (use one of the following):
– AnyConnect Premium license:
Base and Security Plus license: 2 sessions.
Optional permanent or time-based licenses: 10, 25, 50, 100, or 250 sessions.
Optional Shared licenses
2
: Participant or Server. For the Server license, 500-50,000 in
increments of 500 and 50,000-545,000 in increments of 1000.
– AnyConnect Essentials license
3
: 250 sessions.
• IPsec remote access VPN using IKEv1 and IPsec site-to-site VPN using IKEv1 or IKEv2:
Base license and Security Plus license: 250 sessions.

Cisco ASA Series Specifications

General

Brand	Cisco
Model	ASA Series
Category	Network Hardware
Language	English