Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 187 / 2164

1-25
Cisco ASA Series CLI Configuration Guide
Chapter 1 Managing Feature Licenses
Information About Feature Licenses
How the Time-Based License Timer Works
•
The timer for the time-based license starts counting down when you activate it on the ASA.
•
If you stop using the time-based license before it times out, then the timer halts. The timer only starts
again when you reactivate the time-based license.
•
If the time-based license is active, and you shut down the ASA, then the timer continues to count
down. If you intend to leave the ASA in a shut down state for an extended period of time, then you
should deactivate the time-based license before you shut down.
Note
We suggest you do not change the system clock after you install the time-based license. If you set the
clock to be a later date, then if you reload, the ASA checks the system clock against the original
installation time, and assumes that more time has passed than has actually been used. If you set the clock
back, and the actual running time is greater than the time between the original installation time and the
system clock, then the license immediately expires after a reload.
How Permanent and Time-Based Licenses Combine
When you activate a time-based license, then features from both permanent and time-based licenses
combine to form the running license. How the permanent and time-based licenses combine depends on
the type of license.
Table 1-18 lists the combination rules for each feature license.
Note
Even when the permanent license is used, if the time-based license is active, it continues to count down.
Table 1-18 Time-Based License Combination Rules
Time-Based Feature Combined License Rule
AnyConnect Premium
Sessions The higher value is used, either time-based or permanent. For example,
if the permanent license is 1000 sessions, and the time-based license is
2500 sessions, then 2500 sessions are enabled. Typically, you will not
install a time-based license that has less capability than the permanent
license, but if you do so, then the permanent license is used.
Unified Communications
Proxy Sessions The time-based license sessions are added to the permanent sessions, up
to the platform limit. For example, if the permanent license is 2500
sessions, and the time-based license is 1000 sessions, then 3500 sessions
are enabled for as long as the time-based license is active.
Security Contexts The time-based license contexts are added to the permanent contexts, up
to the platform limit. For example, if the permanent license is 10
contexts, and the time-based license is 20 contexts, then 30 contexts are
enabled for as long as the time-based license is active.
Botnet Traffic Filter There is no permanent Botnet Traffic Filter license available; the
time-based license is used.
All Others The higher value is used, either time-based or permanent. For licenses
that have a status of enabled or disabled, then the license with the
enabled status is used. For licenses with numerical tiers, the higher value
is used. Typically, you will not install a time-based license that has less
capability than the permanent license, but if you do so, then the
permanent license is used.