There is no Essentials license for a 5506-X! Don’t bother looking, you need to get your head into An圜onnect 4 licensing, I’ve already written about that at length.Īn圜onnect 4 – Plus and Apex Licensing Explained On a 5506 they are actually called An圜onnect now, and it supports up to 50. The 5505 could support up to 25 SSL VPN connections.
If you use An圜onnect then prepare for a little hand wringing. So let’s say your 5505 has three interfaces called inside, outside, and DMZ, (yours might have different names, and you may only have two,) the relevant parts of the 5505 config would be ĪSA 5506-X Physical Interface configuration * UPDATE: After version 9.7 This has changed (on the 5506-X) See the following article for an explanation Note: the 5506 still supports VLANs, (5 or 30 with a security plus license).* Where as the 5505 had IP addresses applied to VLANs and then the physical interfaces were added to the appropriate VLAN. The 5506 has IP addresses applied to its physical interfaces.The 5506 Interfaces are the opposite way round (left to right).Unlike its predecessor (and just about all other Cisco equipment), the interfaces start at number 1 (the 5505 starts at 0).Q: Can I just copy the config from an ASA 5505 to an ASA 5506-X?Ī: No, that would be nice, truth be told if the 5505 is running an OS newer than 8.3, about 90% of the config can be copy/pasted if you know what you are doing. I’m probably going to have to do a few of these over the next couple of years so I’ll update this article as things surface. Given the amount of ASA work I do it’s surprising that the first time I saw an ASA 5506-X was last week (I’ve been working on larger firewalls for a while).
0 kommentar(er)
