Solved

Overcoming an ASA 10 User Limit

Posted on 2014-04-25
5
340 Views
Last Modified: 2014-05-05
I have a client that has a phone system that links up with another client at another location.

Before making changes, the PCs and Tablets at my clients site were using a cable internet connection, and the VoIP phones were running through some sort of Point to Point connection.  The phone connection would drop and to get it back online, someone had to climb a tower and reset a relay (not fun).  To stop having to do this, my client contacted the other company and they said they could put in an ASA and use the cable connection that is there to go through the internet, rather than the buggy relay system (not sure exactly how it was setup or if I'm describing it correctly).

The problem is the ASA the other company put in (and billed my client an arm and a leg for) has a 10 user limit.  Since the site has 4 phones, 2 PCs, and 3 tablets that are all constantly connected,  there aren't many available connections for phones, laptops, or other devices on the network.  As devices connect, other devices go offline causing problems.

Without upgrading the ASA to accommodate more users or getting a separate Internet connection, do I have any options?  The ASA is only there to link to the other company for phones.

Could I do this:  Get another static IP from the ISP and separate the connection, 1 static going to the ASA that would have the phones connected and another to a different router for the local PCs and other devices?
0
Comment
Question by:pmitllc
  • 2
  • 2
5 Comments
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 334 total points
ID: 40023160
You can buy a Smart Net contract (support contract) and an upgrade license to allow 50 or unlimited users, priced accordingly.  The VPN limit will stay at 10 tunnels, but that is not currently an issue.

Though I recommend buying from a local Cisco partner who can explain options, pros, and cons, the following link is a sample of one option. (For ASA 55050)
http://www.newegg.com/Product/Product.aspx?Item=N82E16833422133

Locate a Cisco Partner:
https://tools.cisco.com/WWChannels/LOCATR/openBasicSearch.do
0
 
LVL 35

Assisted Solution

by:Ernie Beek
Ernie Beek earned 166 total points
ID: 40025854
What you could do is: set up a proxy. All machines that use the asa to connect to the internet (so all except the phones) will go behind the proxy. From the asa point of view it will only see the phones (4 hosts) and the proxy (1 host though there are a number of tablets and pc's behind it).
If those machine aren't connecting to the internet in a fancy way, that should do the trick.
0
 
LVL 6

Author Comment

by:pmitllc
ID: 40029367
I am having the other company get us a quote on either a new license or hardware.

I did look at the proxy option, but could not figure out how to run a wireless network through it.
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 40029373
Wireless with separate IP range?
You could try VLANs (depending on your switching hardware),
or have a proxy with 3 NICs (one for each network).
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 334 total points
ID: 40029444
Depending on your network requirements you can also add a simple router between the existing router and LAN, however if you have any incoming traffic such as remote access, e-mail or web server, it complicates matters and if you have a VPN even more so.   For the few hundred dollars the license is probably worth it as it keeps it simple and you are not trying to thwart Cisco licensing.  For the record many commercial routers have licensing limits.
0

Featured Post

Don't miss ATEN at NAB Show April 24-27!

Visit ATEN at NAB Show to learn how our "Seamlessly Entertaining" solutions deliver fast, precise video streaming without delays for the broadcasting and media environment. ATEN will showcase its 16x16 Modular Matrix Switch (VM1600) and KVM Over IP Solution (KE6900 series).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question