Installing Licenses
Tasks to install an SDX license are:
- For server licenses, configure properties for the license server. See Configuring Initial Settings for a Server License.
- Install the license. See the section that explains how to install the type of license that you have:
- Verify that the license is installed properly. See Verifying a License.
- For a server license, start the license server. See Starting the License Server.
Configuring Initial Settings for a Server License
The license server monitors the consumption of the license resources and allocates licenses to client SAEs up to the number supported by the license. The license server obtains most of its information from the directory. A local configuration file, /opt/UMC/licsvr/etc/bootstrap.properties, stores bootstrapping information that cannot be stored in the directory, such as the attributes to connect to the directory. Use the information in this section to create and modify the configuration file.
Use the local configuration tool to configure the bootstrap.properties file. For information about using the local configuration tool, see Chapter 15, Configuring Local Properties.
To create the local configuration file and configure the properties for the license server:
- On the SAE host, log in as
rootor as an authorized nonroot admin user. - Start the local configuration tool from the license server installation directory.
/opt/UMC/licsvr/etc/config -l
The first time that you issue this command, it creates the bootstrap.properties file and displays the local configuration tool window for the properties.
- Using the field descriptions in the following sections, configure the bootstrap properties, and then click OK.
Configuring Directory Information
Use the Main tab to configure directory information.
Configuration Directory URL
- URL of the directory server that stores the license server configuration information.
- Value—ldap://<URL>
- Default—ldap://127.0.0.1:389
Backup Configuration Directory URLs
- URL of a backup directory server that stores the license server configuration information.
- Value—ldap://<URL>
- Default—List of directory URLs, with URLs separated by commas
Configuration Location
- Name of the directory that stores the license server bootstrap.properties file.
- Value—Text string in the format /<DIRECTORY_NAME>
where <DIRECTORY_NAME> is the name of directory where the license server bootstrap.properties file is stored
Directory Base DN
- Distinguished name (DN) of the root directory for the SAE.
- Value—DN of the root directory for the SAE
- Guidelines—You must set this attribute if you use a directory-naming scheme different from the default.
- Default—o=umc
Configuration Directory Authentication DN
- DN of the entry in the directory that authenticates the license server's directory bind.
- Value—DN of the entry used to authenticate the directory bind for the license server
- Default—cn=conf, o=operators, <base>
Configuration Directory Password
Connect Timeout
- Interval during which a connection must be made.
- Value—Number of seconds in the range 0-2147483647
- Default—10
Configuring Miscellaneous Properties
Use the Other tab to configure parameters for Java, the object request broker (ORB), and the SNMP agent.
Java Runtime Environment
ORB Port
- Port on which the application server ORB listens for requests
- Value—Any valid port number
- Default—9000
Enable Sysman Client
- Whether or not you can configure support for viewing license server information with the SNMP agent.
- Value
- Yes—If you are using the SNMP agent, enables the client.
- No—Disables client support. Select NO If you are not using the SNMP agent.
Sysman Agent IOR Directory
- Folder that contains the interoperable object reference (IOR) file for the license server. The license server writes its object references to this folder, and the SNMP agent discovers license server components by monitoring the license server IOR file in this folder.
- Value—Path to the folder that contains the IOR
- Guidelines—By default, the license server IOR file is in the var folder, which is relative to the SNMP agent installation folder (/opt/UMC/agent). You need to change this property only if you installed the SNMP agent in a folder other than the default folder, or if you previously changed this property and now need it to point to the folder where the IOR file currently resides.
- Default—/opt/UMC/agent/var
Installing a Pilot License
After you configure the SAE local parameters, you can install a pilot license in the directory with either the instlic command (recommended) or SDX Admin.
Installing a Pilot License by Using the instlic Command
- Save the pilot license provided by Juniper Networks into a text file in the desired directory.
- Issue the instlic command.
/opt/UMC/sae/etc/instlic
This command has the following syntax; see Table 15 for details on the syntax:
instlic [-h <ldapHost>] [-D <bindDN>] [-b <baseDN>] [-w <password>] [-W ] <fileName>
The installation script reads the license from the specified file.
The following sample command specifies a nondefault host address and base DN, prompts you for the password, and establishes the license contained in the pilot.txt file as the license:
/opt/UMC/sae/etc/instlic -h 10.25.2.4 -D cn=umcadmin,o=SDXbase -W pilot.txt
Installing a Pilot License by Using SDX Admin
- Start SDX Admin.
NOTE: See Chapter 16, Using SDX Admin, for information about starting and using SDX Admin.
- In the navigation pane of SDX Admin, expand the Management folder, right-click Licenses, select New, and click License.
The New License dialog box appears.
- Enter the host ID value that you determined in the section Pilot License, and click OK.
The value appears in the HostID field of the Main tab of the License pane.
- Enter the license provided by Juniper Networks in the SSP License field of the Main tab of the License pane, and click Save.
- Repeat Steps 3 and 4 for each host with its related host ID and license.
Installing a Server License
After you configure the SAE local properties and you configure bootstrap properties for the license server, you can install a server license.
To install a server license in the directory:
This command has the following syntax; see Table 15 for details on the syntax:
instlic [-h <ldapHost>] [-D <bindDN>] [-b <baseDN>] [-m ] [-w <password>] [-W ] <fileName>
The instlic command applies the name @License to the first license you install; this is the master license. Any subsequent licenses that you install are automatically named by the command as Lic-<#>; <#> is a sequence number starting at 0. SAE clients read the address of the license server from the master license.
When you upgrade the SDX software to a higher release, you must replace the current master license with a new master license obtained from Juniper Networks. The new master license will incorporate the version number of the higher release and a new signature. The instlic command automatically renames the old master license to Lic-<#> to retain it as a secondary license.
The following sample command specifies a nondefault host address and base DN, prompts you for the password, and establishes the license contained in the second.txt file as the master license:
/opt/UMC/licsvr/etc/instlic -h 10.25.2.4 -D cn=umcadmin,o=SDXbase -m -W second.txt
Verifying a License
After you install the license, you can use the licchk command to verify the license installation and to verify connectivity to the SDX license server. The command returns the license's relative distinguished name (RDN) and its attributes to a specified file. This command has the following syntax; see Table 15 for details on the syntax:
licchk [-h <ldaphost>] [-D <bindDN>] [-b <baseDN>] [-w <password>] -[o <outputFile>]
If you have configured nondefault bind credentials (in the LDAP Connection dialog box) for the directory server, then you must use one or more of the command options to specify the attribute value.
The following sample command specifies a nondefault host address, base DN, and password:
/opt/UMC/sae/etc/licchk -h 10.13.1.5 -D cn=umcadmin,o=SDXbase -w acp45
If the directory server uses the default bind credentials, you can simply issue the following command:
/opt/UMC/sae/etc/licchk