What licensing is required for the IVE cluster functionality? (KB ID: KB9664)
| Article ID: | KB9664 |
|---|---|
| Former Article ID: | |
| Published: | Jan 15, 2008 |
| Last Modified: | Jan 15, 2008 |
| Visible By: | Employee, PTAC, Partner, Customer, Public |
Back to Previous Page | Knowledge Base Home
Article URL
Synopsis
For correct cluster functionality, review this article to understand the Cluster licensing changes that occurred in IVE OS Version 5.1.
Problem
What type of cluster licensing is needed for the different versions of IVE OS?
Solution
Licensing changes occurred with IVE OS version 5.1 that affects how a cluster is licensed. Here is a breakdown of how licensing works for a cluster
Licensing Schematic (for both the old and the new licensing schematic):
Part A:
- Pre - IVE OS 5.1 Licensing:
Each node in the cluster will have it's own licensing. This means each node will have the licensing for each feature that is being used (for example a license for each of the following: Network Connect, Secure Application Manager, Secure Meeting, Clustering, Central Manager, etc.). Here is an example of how each node will look in a Pre - 5.1 cluster:
- IVE OS 5.1 and later Licensing:
Only the primary node will have all the licensing, and each node of the cluster will only have one license, the CL license (also called the cluster license). Each node in the cluster will "share" the licensing from the primary node in the cluster. When you log into one of the nodes of the cluster, and view the licensing, it will display the licensing for all nodes in the cluster. Here is an example of what the licensing will look like when logging into a cluster member in a 5.1 or later cluster:
Part B:
The other part of the licensing schematic change is in how the licenses were generated. In Pre-5.1, licenses were generated against a company name. In 5.1 and later, licenses are generated against a hardware ID that is unique for each IVE. The company name/hardware ID can be found by logging into the IVE as an administrator; the company name/hardware ID (based on the IVE OS version) is in the bottom left hand of the page:
The page will say: Licensed to <company name/hardware ID>. This company name/hardware ID as well as the serial number of the IVE will be needed for generating new licenses.
Upgrading:
If upgrading a cluster from an IVE OS version below 5.1 to a version of 5.1 or above, it may be necessary to get a new license for any of the secondary nodes in the cluster with the new hardware ID(s) (this usually only occurs if the cluster is deleted before the upgrade process). If the secondary nodes in the cluster need a new license generated, get the company name/hardware ID and serial number from each of the IVE's that need new licenses and contact Juniper Support at 888-314-JTAC(5822) or at 408-745-9500 for domestic or international.
Replaced / RMA Device:
If a cluster member has been replaced due to a hardware failure (an RMA unit), the replacement unit will ship with a minimum IVE OS version of 5.1R2. If using a version below 5.1, the IVE can be downgraded to the needed version, and the existing licenses (the same licenses as the failed unit) can be installed. If using a version of 5.1 or above, new licenses will need to be generated for the replacement unit. Get the hardware ID and the serial number of the replacement unit (see the above screenshot to retrieve the hardware ID) and contact Juniper Support at 888-314-JTAC(5822) or at 408-745-9500 for domestic or international.
Category Description
By Product » Hardware » SSL VPN
By Product » Software » Network Operating Systems » SSL VPN Software (IVE OS)
Purpose
Troubleshooting