10

We have some existing ASA-5555X in multiple context mode, and we are using one context per-vlan as a transparent layer2 firewall. Over time, we have been adding to this solution, and we're about to exceed our original license of 5 security contexts.

We purchased L-ASA-SC-10=, but it is unclear whether applying this activation key will require us to reboot the ASAs. I do know it will require us to break the active-standby pair.

Does applying L-ASA-SC-10= to our running ASAs require a reboot? We have version 9.0(2) if that matters.

Improve this question

1 Answer 1

Reset to default
10

A reload is only required when changing encryption features or downgrading a permanent license. You shouldn't have to break your failover pair either. For a failover pair running >8.3(1), you only need a context license on the primary, and the secondary will inherit. Context licenses applied to both units in a failover pair will combine.

Improve this answer
1
  • 3
    TY. I applied the license to the ASA, but L-ASA-SC-10= doesn't come with encryption. That means when I applied the licenses, the ASA told me I had to reboot; fortunately you get a warning on the ASA when you have feature mismatches between the old and new licenses. I called TAC and pointed out that we were getting ripped off for our existing 3DES-AES feature license by applying the new 10 Context license. TAC sent us a complimentary encryption license PAK so we would have the same encryption feature licensing as before the upgrade. After the new 3DES-AES license, no reboot was required.
    – user2578997
    Jul 16, 2013 at 0:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.