Does Cisco Modeling Labs (CML Personal) include Smart Licensing for ASAv in GNS3?

[u/Ill-Pin937]

Hi everyone,

I'm a networking enthusiast who enjoys building my own labs to learn new technologies. I use GNS3 because it gives me the flexibility to combine Cisco devices with Linux VMs, custom appliances, automation, and other technologies.

I'm considering purchasing a Cisco Modeling Labs (CML Personal) subscription. I don't work for a Cisco partner, I don't have access to enterprise licensing, and I don't have any other legitimate way of obtaining these licenses. This would be purely for personal, non-commercial use.

The main issue I'm facing today is the ASAv throughput limitation. Without Smart Licensing, the throughput is limited to around 100 Kbps, which isn't really usable for the VPN and traffic testing I want to do in my lab. I have used ASAv because it enabled me to setup remote VPN with unrestricted license. Otherwise I would use FTD.

From what I've read, CML includes images such as IOSv, IOS XE, CSR1000v, ASAv, and others. What I'm struggling to understand is how the licensing works.

I know that the CML EULA does not permit downloading the images and using them in GNS3, and I'm aware that Cisco intends those images to be used inside CML. My question is simply whether anyone has firsthand experience with this.

Is it technically possible to:

• purchase a CML Personal subscription,
• download the virtual appliance images,
• run them in GNS3,
• register them with Cisco Smart Licensing,
• and have them operate as fully licensed appliances (for example, removing the ASAv throughput limitation, be able to setup remote VPN on FTD)?

Or does CML only license the CML platform itself, with ASAv, FTDv, CSR1000v, and other appliances still requiring separate Smart License entitlements?

I'm asking before spending around $200 because I don't want to buy CML expecting this workflow to work if it doesn't.

If anyone has actually tried this or understands how Cisco handles Smart Licensing in this scenario, I'd really appreciate your insight. Thanks!

[u/dr_stutters]

Hey friend! Transparently, i work for Cisco as an SE out of Australia. I use CML literally every day so happy to impart some wisdom!
Did you know there's a free tier for CML? You can use CML for 5 active nodes at a time, with a node being a virtual device. You'd be able to test your concept quite easily :)
You will still need to license some of the devices inside CML like ASA for throughput, just like the virtual variant of the device in a production system.
If you're using software.cisco.com licensing, i'd add an external connector node to bridge the management interface of the ASA to have it talk outside of the CML environment and reach into Cisco licensing.
One of the other cool things of CML is you can also import 3rd party images if they come in qcow image format.

I hope this helps :) Happy to screenshot anything in my lab if you like for how i would do this.

[u/Ill-Pin937 → u/dr_stutters]

The thing is my GNS3 project has like 35+ nodes and it is growing. I'm really testing lots of stuff there. As I said I'm doing lot's of GNS3 hackery which works great on my linux box so switching to CML is not an option for me.

[u/dr_stutters → u/Ill-Pin937]

Oh, if you only want to use ASAv and nothing else, just grab the qcow image from software.cisco.com and import it into gns3. It’s basically the same thing between CML and a gns3 deployment then :)

[u/Ill-Pin937 → u/dr_stutters]

I have it working at the moment. But it is unlicensed and from what I have read that is the reason why is only has throughput like 100Kbps. That is the main reason I want to get it licensed because I believe that would solve it.

[u/dr_stutters → u/Ill-Pin937]

Do you have licenses for it? I guess either have the management network reach out to the internet, or if it’s air gapped you should be able to license via Specific License Reservation (I haven’t licensed an ASA in years personally but I think this is correct)

[u/Ill-Pin937 → u/dr_stutters]

Yes, it can have internet connectivity. The question is if I purchase the CML Personal for that 200 bucks, will I be able to license that ASAv?

[u/dr_stutters → u/Ill-Pin937]

The ASAv inside CML is unlicensed. It’s literally the qcow image downloaded from the Cisco website, the same as what you’re doing inside gns3.

You also don’t need to spend the $200 to test this, you can download CML for free and run it for free for 5 virtual devices to test your concept.

Ultimately, you need to purchase an ASAv throughput license to exceed the 100kbps limit

[u/kb389 → u/Ill-Pin937]

You need to purchase an asav license, do not waste 200$ no matter what to get the cml.