Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Licenses for Network Management

 

Licenses for Junos Space

Viewing Licenses With Edge Services Director

Juniper Networks devices require a license to operate some features. You can view the licenses for devices connected to Edge Services Director.

To view the license for a Juniper Networks device on your network:

  1. Select the Build icon in the Edge Services Director banner.
  2. In the View pane, select a wireless or wired device.
  3. In the Tasks pane, select View License Information.

    The Licenses page for that object is displayed with the fields listed in Table 1.

    Table 1: Viewing Licenses with Edge Services Director

    Field

    Description

    Feature Name

    Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this.

    License Count

    Number of times an item has been licensed. This value can have contributions from more than one licensed SKU or feature. Alternatively, it can be 1, no matter how many times it has been licensed.

    Used Count

    Number of times the feature is used. For some types of licenses, the license count will be 1, no matter how many times it is used. For capacity-based licensable items, if infringement is supported, the license count can exceed the given count, which has a corresponding effect on the need count.

    Need Count

    Number of times the feature is used without a license. Not all devices can provide this information.

    Given Count

    Number of instances of the feature that are provided by default.

    If a device does not have a license, a blank page is displayed with the message, No license is installed on this device. If you are sure the device has a license, try resynchronizing the device before displaying the license again.

  4. Optionally, expand the license information by feature name to view the feature SKU information. Table 2 describes the additional fields that are displayed.

    Table 2: Additional Licensing Information

    Field

    Description

    Validity Type

    Validity type can be Databased (license expires on end date), Permanent, Countdown (license expires when time remaining is zero), or Trial. If the validity type is either Databased or Countdown, more information is displayed—License Name, License Version, License State, and Time Remaining. Additional information can be added in the details grid based on the SKU type (SKU or Feature)—Start Date, End Date, or Original Time Allowed.

    License Name

    If the validity type is either Databased or Countdown, the identifier associated with a license key is displayed.

    License Version

    If the validity type is either Databased or Countdown, the version of a license is displayed. The version indicates how the license is validated, the type of signature, and the signer of the license key.

    License State

    If the validity type is either Databased or Countdown, the state of the license is displayed—Valid, Invalid, or Expired.

    Time Remaining

    If the validity type is either Databased or Countdown, the remaining time left on the license is displayed. For a trial license, the number of days remaining after you installed the device is displayed. For a commercial license, the time remaining is unlimited.

    Start Date

    Based on the SKU type, the start date of the license can be displayed in the details grid.

    End Date

    Based on the SKU type, the end date of the license can be displayed in the details grid.

    Original Time Allowed

    Based on the SKU type, the original license timeframe can be displayed here.

If you apply a new license to an existing device, you must resynchronize the device before the new license is seen in Edge Services Director. For directions, see Resynchronizing Device Configuration.

Viewing Licenses With Connectivity Services Director

Juniper Networks devices require a license to operate some features. You can view the licenses for devices connected to Connectivity Services Director.

To view the license for a Juniper Networks device on your network:

  1. Select the Build icon in the Connectivity Services Director banner.
  2. In the View pane, select a device.
  3. In the Tasks pane, select View License Information.

    The Licenses page for that object is displayed with the fields listed in Table 3.

    Table 3: Viewing Licenses with Connectivity Services Director

    Field

    Description

    Feature Name

    Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this.

    License Count

    Number of times an item has been licensed. This value can have contributions from more than one licensed SKU or feature. Alternatively, it can be 1, no matter how many times it has been licensed.

    Used Count

    Number of times the feature is used. For some types of licenses, the license count will be 1, no matter how many times it is used. For capacity-based licensable items, if infringement is supported, the license count can exceed the given count, which has a corresponding effect on the need count.

    Need Count

    Number of times the feature is used without a license. Not all devices can provide this information.

    Given Count

    Number of instances of the feature that are provided by default.

    If a device does not have a license, a blank page is displayed with the message, No license is installed on this device. If you are sure the device has a license, try resynchronizing the device before displaying the license again.

If you apply a new license to an existing device, you must resynchronize the device before the new license is seen in Connectivity Services Director. For directions, see Resynchronizing Device Configuration.

Viewing Licenses With Network Director

Juniper Networks devices require a license to operate some features. You can view the licenses for devices connected to Network Director.

To view the license for a Juniper Networks device on your network:

  1. Select the Build icon in the Network Director banner.
  2. In the View pane, select a wireless or wired device.
  3. In the Tasks pane, select View License Information.

    The Licenses page for that object is displayed with the fields listed in Table 4.

    Table 4: Viewing Licenses with Network Director

    Field

    Description

    Feature Name

    Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this.

    License Count

    Number of times an item has been licensed. This value can have contributions from more than one licensed SKU or feature. Alternatively, it can be 1, no matter how many times it has been licensed.

    Used Count

    Number of times the feature is used. For some types of licenses, the license count will be 1, no matter how many times it is used. For capacity-based licensable items, if infringement is supported, the license count can exceed the given count, which has a corresponding effect on the need count.

    Need Count

    Number of times the feature is used without a license. Not all devices can provide this information.

    Given Count

    Number of instances of the feature that are provided by default.

    If a device does not have a license, a blank page is displayed with the message, No license is installed on this device. If you are sure the device has a license, try resynchronizing the device before displaying the license again.

  4. Optionally, expand the license information by feature name to view the feature SKU information. Table 5 describes the additional fields that are displayed.

    Table 5: Additional Licensing Information

    Field

    Description

    Validity Type

    Validity type can be Databased (license expires on end date), Permanent, Countdown (license expires when time remaining is zero), or Trial. If the validity type is either Databased or Countdown, more information is displayed—License Name, License Version, License State, and Time Remaining. Additional information can be added in the details grid based on the SKU type (SKU or Feature)—Start Date, End Date, or Original Time Allowed.

    License Name

    If the validity type is either Databased or Countdown, the identifier associated with a license key is displayed.

    License Version

    If the validity type is either Databased or Countdown, the version of a license is displayed. The version indicates how the license is validated, the type of signature, and the signer of the license key.

    License State

    If the validity type is either Databased or Countdown, the state of the license is displayed—Valid, Invalid, or Expired.

    Time Remaining

    If the validity type is either Databased or Countdown, the remaining time left on the license is displayed. For a trial license, the number of days remaining after you installed the device is displayed. For a commercial license, the time remaining is unlimited.

    Start Date

    Based on the SKU type, the start date of the license can be displayed in the details grid.

    End Date

    Based on the SKU type, the end date of the license can be displayed in the details grid.

    Original Time Allowed

    Based on the SKU type, the original license timeframe can be displayed here.

If you apply a new license to an existing wireless LAN controller, you must resynchronize the device before the new license is seen in Network Director. For directions, see Resynchronizing Device Configuration.

Installing VCF Software Licenses

To install a VCF software license:

  1. Purchase two VCF software license keys (QFX-VCF-LIC) from your Juniper Networks sales representative.

    The sales representative will provide you with the feature license files and license keys. You will be asked to supply the chassis serial number of your switch; you can obtain the serial number by issuing the show virtual-chassis command.

  2. Install the first software license on one device in the VCF (for example, the device acting in the master role):
  3. Install the second software license on a second device in the VCF (for example, the device acting in the backup role):

Junos Space License Installation Overview

Junos Space Network Management Platform comes with a 60-day full-featured trial license. You must procure and install a valid license during this period to ensure continued operation beyond the trial period.

If you fail to upload a valid license during the 60-day trial period, the Junos Space user interface displays an error message when you log in indicating that the license has expired. Your access is limited to the Licenses page (Administration > Licenses) from where you can execute the Import License task to enter a valid license.

You can use either of the following options to install a valid license for Junos Space Platform:

  • If you plan to use the Junos Space Platform with only the Support Automation applications (Service Now and Service Insight), you can navigate to the Add Organization page (Service Now > Administration > Organizations > Add Organization) in the Service Now user interface to activate these applications. However, to activate these applications, you must have a valid support contract for your Juniper Networks devices and valid credentials to access the Juniper Support System (JSS) back end.

    If you choose this option and if you want to use other Junos Space applications beyond the trial period, you must purchase a license for Junos Space Platform (as explained in the bulleted item that follows).

  • If you want to use Junos Space applications other than Service Now and Service Insight, or if you do not have a valid support contract for your Juniper Networks devices, you must purchase a license for Junos Space Platform. After you obtain the license file, you can install the license from the Import License page (Administration > Licenses > Import License). For more information about installing a valid license for Junos Space Platform, see the Generating and Uploading the Junos Space License Key File topic (in the Junos Space Network Management Platform Workspaces Feature Guide).

Exporting the License Inventory

The Device Licence Inventory feature enables you to display the currently installed license inventory information for all DMI schema-based devices under Junos Space Network Management Platform management.

The license inventory is generated when the device is first discovered and synchronized in Junos Space Network Management Platform.

The licenses used by all Juniper Networks devices are based on SKUs, which represent lists of features. Each license includes a list of features that the license enables and information about those features. Sometimes the license information also includes the inventory keys of hardware or software elements upon which the license can be installed.

To view the license(s) for Junos Space Network Management Platform itself, see Viewing Junos Space Licenses.

This topic also covers:

  • Absence of license

  • Trial information

  • Count-down information

  • Date-based information

DMI enables each device family to maintain its own license catalog in the DMI Update Repository. The license catalog is a flat list of all the licenses used by a device family. The key for a license element is its SKU name. Each license element in the catalog includes a list of features that the license enables and information about each feature (that is, its name and value). Optionally, the license element can also list the inventory keys of hardware or software elements and where it can be installed.

If the license inventory on the device is changed, the result depends on whether the network is the system of record or Junos Space Network Management Platform is the system of record. See Systems of Record in Junos Space Overview.

If the network is the system of record, Junos Space Network Management Platform automatically synchronizes with the managed device. You can also manually resynchronize the Junos Space Network Management Platform license database with the device by using the Resynchronize with Network action. See Resynchronizing Managed Devices with the Network.

If Junos Space Network Management Platform is the system of record, neither automatic nor manual resynchronization is available.

Viewing device license inventory does not include pushing license keys to devices. You can, however, push licenses with the Configuration Editor to any device that has license keys in its configuration. You can export device license inventory information to a CSV file for use in other applications.

License inventory information shows individually installed licenses as well as a license usage summary, with statistics for various features.

To export the license inventory for a device:

  1. On the Network Management Platform user interface, select Devices > Device Management.

    The Device Management page displays the devices managed in Junos Space Network Management Platform.

  2. Select Device Inventory > View License Inventory from the Actions menu.

    The License Inventory page displays the license information listed in Table 6.

    Need Counts in red indicate violations. In other words, entries in red indicate that you are using features that you are not licensed to use. You may also encounter the message that you have no licenses installed.

  3. (Optional) View the list of licensed features for the selected license by double-clicking a license usage summary or clicking on the forward action icon to the left of a license usage summary.

    The information displayed is described in Table 7.

  4. (Optional) Click Return to Inventory View at the top of the inventory page.
  5. (Optional) Click Export at the top of the inventory page, to export the license inventory information.

    The Export Device License Information dialog box appears, displaying a link: Download license file for selected device (CSV format).

  6. (Optional) Click the download link.

    The Opening Device License-xxxxxxCSV dialog box appears, where xxxxxx represents a number.

  7. Open the file with an application of your choice, or download the file by clicking Save.

    The CSV file contains the fields described in Table 7 and Table 8. These fields are not populated if the information is not available for the selected license.

Exporting device license information generates an audit log entry.

Table 6: License Usage Summary Fields

Field

Description

Feature name

Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this.

License count

Number of times an item has been licensed. This value may have contributions from more than one licensed SKU or feature. Alternatively, it may be 1, no matter how many times it has been licensed.

Used count

Number of times the feature is used. For some types of licenses, the license count will be 1, no matter how many times it is used. For capacity-based licensable items, if infringement is supported, the license count may exceed the given count, which has a corresponding effect on the need count.

Need count

Number of times the feature is used without a license. Not all devices can provide this information.

Given count

Number of instances of the feature that are provided by default.

Table 7: License Feature or SKU Fields

Field

Description

Feature Name

Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this.

Validity Type

The SKU or feature is considered permanent if it is not trial, count-down, or data-based.

Table 8: Additional Fields in CSV Files

Field

Description

State

Status of the license: valid, invalid, or expired. Only licenses marked as valid are considered when calculating the license count.

Version

Version of the license.

Type

Permanent, trial, and so on.

Start Date

Licensed feature starting date.

End Date

Licensed feature ending date.

Time Remaining

Licensed feature time remaining.

Generating and Uploading the Junos Space License Key File

  • From Junos Space Network Management Platform Release 13.1R1 onward, the licensing model of Junos Space does not require license keys for Junos Space applications. Nevertheless, a license file is still needed for the Junos Space Platform functionality because the default Junos Space Platform license file is valid only for 60 days after which the Junos Space Platform functionality is not available.

    When you purchase a commercial version of Junos Space Platform, Juniper Networks provides you with a license file that does not have any expiry date. After you import this license into Junos Space Platform, you have access to the full Junos Space Platform functionality for an unlimited period.

  • Since Junos Space applications do not use license keys, the Licenses page (Administration > Licenses) does not display licensing information for any Junos Space applications that you might have purchased and installed. However, if you use Junos Space Platform with only Service Now and Service Insight installed, licensing information for those applications is displayed on the Licenses page. To find out the licensing information about Junos Space applications that you purchased, contact the Juniper Technical Assistance Center.

The Junos Space Platform software provides a default, 60-day trial license. After 60 days, the use of the Junos Space Platform software expires except for the Import License action. The administrator must activate the software with the Juniper Networks license key to regain use of the Junos Space Platform. Two weeks before the license expiration date, a license expiration warning appears when users log in to Junos Space Platform.

Junos Space Platform license management involves a two-step process:

  1. Generating the license key file. Juniper Networks uses a license management system (LMS) to manage the deployment of the Junos Space Platform product—appliances, connection points, connections, and applications. When you order Junos Space Platform, the Juniper Networks LMS sends you an e-mail with an authorization code and a software serial number and instructions on how to generate a license key.
  2. Import the license key into Junos Space Platform. The system administrator must import the Junos Space license key file from the Licenses page (Administration > Licenses) to use Junos Space Platform beyond the trial period.

This topic includes the following sections:

Generating the Junos Space License Key File

When you order Junos Space Platform, Juniper Networks sends an e-mail containing an authorization code and a software serial number (the serial number that identifies the software installation) along with instructions on how to generate the license key.

When you order a Junos Space Appliance, Juniper Networks sends an e-mail containing the serial number for the appliance that is licensed for the appropriate stock-keeping unit (SKU).

Uploading the Junos Space License Key File Contents

To upload the Junos Space license key file, perform the following steps:

  1. Open the Juniper Networks Authorization Codes e-mail you received and follow the directions.
  2. Open the Junos Space license key text file attached to the e-mail and copy all the contents.
  3. In the Junos Space Platform UI, select Administration > Licenses.

    The Licenses page appears.

  4. Click the Import License icon.

    The Import License page appears.

  5. Paste the contents of the Junos Space license key text file in the License data field.

    Paste the license data into the License data field using Ctrl+V or by selecting paste in the browser Edit menu.

  6. Click Upload.

    The license key data is uploaded to the Junos Space Platform database. A message indicating that the Junos Space license is uploaded successfully appears.

  7. Click OK.

    The Junos Space license appears on the Licenses inventory page.

Viewing Junos Space Licenses

From Junos Space Network Management Platform Release 13.1R1 onward, the licensing model of Junos Space does not require license keys for Junos Space applications. However, a license file is still needed for the Junos Space Platform functionality because the default Junos Space Platform license file is valid only for 60 days after which the Junos Space Platform functionality is not available.

Since Junos Space applications do not use license keys, the Licenses page (Administration > Licenses) does not display licensing information for any Junos Space applications that you might have purchased and installed. However, if you use Junos Space Platform with only Service Now and Service Insight installed, licensing information for those applications is displayed on the Licenses page. To find out the licensing information about Junos Space applications that you purchased, please contact the Juniper Technical Assistance Center.

The Licenses inventory page displays the Junos Space Platform license that the administrator has uploaded. For more information about obtaining and uploading the Junos Space Platform license, see Generating and Uploading the Junos Space License Key File.

The Licenses page displays the Junos Space Platform trial license until you upload the one specifically generated for your software installation.

To view the Junos Space license details:

  1. In the Junos Space Platform UI, select Administration > Licenses.

    The Licenses page appears displaying the details of the Junos Space Platform license, as shown in Table 9.

Table 9: License Details

FieldDescription

License Type

The Junos Space Platform license can either be a trial license installed (Trial) with the Junos Space Platform software image or a commercial one (Commerical) that you upload into Junos Space Platform.

Sku Model #

The Junos Space Platform license stock-keeping unit (SKU) model number. If the license is a trial license, the SKU displayed is Trial-license. If it is a commercial license, the license SKU is displayed; for example, JS-PLATFORM.

Total License Days

For a trial license, the total number of license days is 60. For a commercial license, the total number of license days is unlimited (Unlimited).

Remaining License Days

For a trial license, the remaining number of days is the countdown of the number of days since you installed Junos Space Platform (for example, 36). For a commercial license, the remaining number of days is unlimited (Unlimited).

Juniper Connected Security for VMware NSX Licensing

VMware NSX is VMware’s network virtualization platform for the Software Defined Data Center (SDDC). You can add the vSRX Virtual Services Gateway as a partner security service in the VMware NSX environment. The vSRX security service is managed by the Junos Space Security Director and VMware NSX Manager to deliver a complete and integrated virtual security solution for your SDDC environment. The vSRX provides advanced security services (Layer 7 services), including intrusion detection and prevention (IDP), and application control and visibility services through AppSecure.

The Juniper Connected Security for VMware NSX licensing includes support for Juniper’s virtual firewall (vSRX), Network Security services (AppSecure, IDP) and the Juniper Connected Security and Security Management solutions (Policy Enforcer and Security Director) for VMware NSX-based private cloud advanced security.

Juniper Connected Security for VMware NSX Advanced Security Licenses

The Juniper Connected Security for NSX Advanced Security (ADS) licenses that are available from Juniper Networks provide entitlement for protection of one physical CPU socket, with one vSRX instance key provided for each license. Typically, a VMware ESXi server has multiple CPU sockets, and each CPU socket has multiple cores.

All Juniper Connected Security for NSX ADS licenses have an associated time duration; you purchase licenses as subscription based for a 1-year, 3-year, or 5-year duration.

A Juniper Connected Security for NSX ADS license cannot be purchased as a perpetual (never expire) license. Each license is only available on a subscription basis.

Each license includes support for the following:

  • Juniper vSRX Series Virtual Services Gateway, including:

    • Stateful L3-L4 firewall

    • Advanced Application Security (ASEC) features (such as AppID, AppFW, AppQoS, and AppTrack)

    • Intrusion Detection and Prevention (IDP)

  • Juniper Security Management solutions, including:

    • Junos Space Security Director

    • Juniper Connected Security Policy Enforcer

The licenses available in the Juniper Connected Security for VMware NSX ADS licensing model are based on SKUs which represent the terms of subscription and the supported features.

Table 10 describes the various license packages.

Table 10: Juniper Connected Security for VMware NSX ADS Licensing Packages

License Model Number

Description

JNSX-ADS-1-1Y

Juniper Connected Security for NSX Advanced Security with vSRX for 1 physical CPU socket - 1 Year Subscription

The 1 year subscription license includes support for Security Director, Policy Enforcer, 1 vSRX entitlement for 1 physical CPU socket protection with AppSecure and IDP feature support

JNSX-ADS-1-3Y

Juniper Connected Security for NSX Advanced Security with vSRX for 1 physical CPU socket - 3 Year Subscription

The 3 year subscription license includes support for Security Director, Policy Enforcer, 1 vSRX entitlement for 1 physical CPU socket protection with AppSecure and IDP feature support

JNSX-ADS-1-5Y

Juniper Connected Security for NSX Advanced Security with vSRX for 1 physical CPU socket - 5 Year Subscription

The 5 year subscription license includes support for Security Director, Policy Enforcer, 1 vSRX entitlement for 1 physical CPU socket protection with AppSecure and IDP feature support

License Duration

The Juniper Connected Security for NSX ADS license model is subscription based. A subscription license is an annual license that allows you to use the licensed software for the matching duration. Subscriptions might involve periodic downloads of content (such as for IDP threat signature files). At the end of the license period, you need to renew the license to continue using it.

Subscription licenses start when you retrieve the license key or 30 days after purchase if you have not retrieved the license key. All subscription licenses are renewable.

License Procurement and Installation

To enable a Juniper Connected Security for NSX ADS license, you must purchase, install, and manage the license key that corresponds to the specific terms of each license. The presence of the appropriate software unlocking key on your virtual instance allows you to configure and use that license.

Licenses are usually ordered when the software application is purchased, and this information is bound to a customer ID. If you did not order the licenses when you purchased your software application, contact your account team or Juniper Networks Customer Care for assistance. Licenses can be procured from the Juniper Networks License Management System (LMS).

From the Junos Space Security Director you discover the NSX Manager and perform service registration of the vSRX VM with the NSX Manager. The NSX Manager is added as a device in Security Director and its inventory is synchronized with Security Director. Discovering the NSX Manager and registering vSRX as a security service in Security Director are described in detail in Deploying the vSRX as an Advanced Security Service in a VMware NSX Environment.

As part of the service registration procedure, in the Service Manager Registration section of the Add NSX Manager page, you enter the license key (see Figure 1).



Figure 1: Service Manager Registration: Entering the License Key

Service Manager Registration:
Entering the License Key

Licenses for Network and Security Manager (NSM)

Installing Advanced License Keys

To access the IDP functionality on a security module, you must install both an Advanced license key and an IDP license key on the security device. For details on obtaining and installing a license key.

Installing the IDP license key disables the Deep Inspection (DI) feature.

Managing License Keys (ScreenOS Only)

Some security devices support the activation of optional features or the increased capacity of existing features through the installation of license keys. You must first obtain a license key from your value-added reseller (VAR) or from Juniper Networks. Then you can use the NSM UI to install the license key on the managed device.

After you have installed the license key on the device, the device can begin to use the new feature immediately. However, because the information in the license key is decoded only after it has been installed on the device, you must import the license key information from the device into the NSM system before the new feature appears in the UI. Importing license keys from the device can also resolve any license key mismatches between NSM and the managed device.

Installing License Keys on a Device

To obtain a license key:

  1. Contact the value-added reseller (VAR) who sold you the security device, or contact Juniper Networks directly.

  2. Provide the serial number of your device and state the feature option you want. The license key is generated and then sent to you in an e-mail message.

To install the license key on a device using the NSM UI:

  1. In the main navigation tree, right-click the device on which you want to install the license key and select Admin > Install License Key. The Install License Key dialog box appears.

  2. Either copy and paste the license key into the dialog box, or click the Browse button to locate the license key file on your computer.

  3. Click OK.

Importing License Key Information into NSM

After you install a new license key on a device, either through the NSM UI or locally (through the Web UI or CLI) you must import that license key information into the NSM system.

Importing license key information from a device also enables you to quickly view all license keys installed on a device, and the features and capacities available on the device.

To import or view license key information:

  1. In the main navigation tree, right-click the device on which you want to install the licence key and select Admin > Import License Key Info.

  2. Click Yes at the confirmation dialog box. The Job Information window displays the license key information.

Installing Trial License Keys

A trial license key allows you to view and evaluate NSM before purchasing the subscription. You can install a trial license on NSM which allows you to add up to 6025 devices on a software installation and 525 devices on an appliance setup. You can choose trial periods of 30, 60 and 90 days.

The Expires in (Days) field in the NSM License Information window shows the status of your license. When you install a trial license, NSM displays a warning that your license expires inX number of days. When your license expires, NSM notifies you that your trial period is over and prompts you to install a new license. You can proceed with the NSM GUI log in only after the installation of a valid permanent license.

Generating the NSM License Key File

In Release 2007.3 and later releases, the NSM product line uses a licensing mechanism to prevent access to an unlicensed copy of NSM and to enforce a limit on the maximum number of devices that can be managed by NSM. New installations and installations upgrading from a release prior to 2007.3 must obtain a license to use NSM.

The base license supports 25 devices with high availability (HA), including devices running ScreenOS, IDP, or Junos OS with Enhanced Services; EX Series, Secure Access, or Infranet Controller devices; and including any modeled or vsys devices. For details on these devices, see the Network and Security Manager Administration Guide.

To manage more than 25 devices, a license key must be purchased separately, retrieved from the Juniper License Management Server (LMS), and then installed onto the NSM Server or NSM appliance.

LMS provides an interface to generate licenses based upon serial number, authorization code and installation ID.

Procedures provided in the following sections use the NSM installer to generate the installation ID. Alternatively, you can download a utility from the Juniper Networks Software Download site for generating the installation ID.

Installing NSM for the First Time

The first time you install NSM 2007.3 or later release software only, you need to generate a license key file that requires an installation ID.

NSM Trial Licenses

You can generate a trial license for NSM for periods of 30, 60 or 90 days. The NSM License Information dialog box displays the validity period in the Expires in (Days) field. Licenses can only be installed or updated from the NSM GUI. When the trial period is over, NSM notifies you and prompts you to install a new license. If you install the new license, you can proceed to log in to NSM. If not, you must exit from the GUI.

Generating the License Key for an NSM Software-Only Installation

To generate the license key file for an NSM 2007.3 or later software-only installation:

  1. Run the NSM installer image on the server designated for NSM. The NSM Server generates an installation ID.

  2. Log in to the LMS system and select License key generation for NSM.

  3. Enter the serial number and authorization code.

    Your serial number is printed on the paper license certificate given to you when you purchased NSM.

    Depending on the package you purchased, Juniper Networks provides an authorization code by e-mail. If you received a paper license certificate, and are managing more than 25 devices, call Juniper Networks Customer Service. The Customer Service will validate your purchase and generate a license key file.

  4. Enter the installation ID that was generated by the NSM Server.

    The LMS system generates a license key file for the SKU recorded. You can choose to download the license key file, or to receive it by e-mail.

  5. Save the license key file to your local drive for use during installation.

Generating the License Key for an NSM Appliance Installation

To generate the license key file for an NSM appliance installation:

  1. Log in to the LMS system and select License key generation for NSM.

  2. Enter the serial number and authorization code.

    The serial number is on the back of the NSM appliance chassis.

    Depending on the package you purchased, Juniper Networks provides an authorization code via e-mail. If you received a paper license certificate, and are managing more than 25 devices, call Juniper Networks Customer Service. Customer Service will validate your purchase and generate a license key.

    The LMS system generates a license key file for the SKU recorded. You can choose to download the license key file, or to receive it by e-mail.

  3. Save the license key file to your local drive for use during installation.

Generating the License Key for a High Availability NSM Installation

To generate the license key file for an NSM 2007.3 or later HA installation:

  1. Run the NSM installer image on the server designated as your primary NSM (or primary GUI server). The NSM Server generates an installation ID.

  2. Run the NSM 2007.3 or later installer image on the server designated as your secondary NSM (or secondary GUI server). The NSM Server generates an installation ID.

  3. Log in to the LMS system and select License key generation for NSM.

  4. Enter the serial number and authorization code of your primary NSM.

    For an NSM appliance installation, enter the serial number of the primary server. The hardware serial number is located on the back of the NSM appliance chassis.

    For a software-only installation:

    1. Enter the serial number.

      The serial number of your software is printed on the paper license certificate given to you when you purchased NSM. If you do not have the software serial number or the LMS System fails to recognize the serial number, call Juniper Networks Customer Service.

    2. Enter the installation ID of the primary NSM.

    Depending on the package you purchased, Juniper Networks provides an authorization code via e-mail. If you received a paper license certificate, and are managing more than 25 devices, call Juniper Networks Customer Service. Customer Service will validate your purchase and generate a license key.

  5. Select the Need High Availability Key check box. The LMS systems prompts you to provide the NSM Secondary serial number and Secondary Installation ID.

    The LMS system generates a license key file for the SKU recorded. You can choose to download the file, or to receive it by e-mail.

  6. Save the license key file to your local drive for use during installation.

Upgrading to an NSM Release that Requires a License

When you upgrade to an NSM 2007.3 or later release from a version that is older than 2007.3, you need to generate a license key file that requires an installation ID.

Generating the License Key for an NSM Software-Only Upgrade

To generate the license key file to upgrade to NSM 2007.3 or later release:

  1. Run the NSM installer image on the server designated for NSM. The NSM Server generates an installation ID.

  2. Log in to the LMS system and select License key generation for NSM.

  3. Enter the serial number and authorization code.

    Your serial number is printed on the paper license certificate given to you when you purchased NSM. If you do not have the serial number or the LMS System fails to recognize the serial number, call Juniper Networks Customer Service.

    Depending on the package you purchased, Juniper Networks provides an authorization code via e-mail. If you received a paper license certificate, and are managing more than 25 devices, call Juniper Networks Customer Service. The Customer Service will validate your purchase and generate a license key.

  4. Enter the installation ID that was generated by the NSM Server.

    The LMS system generates a license key file for the SKU recorded. You can choose to download the file or to receive it by e-mail.

  5. Save the license key file to your local drive for use during installation.

The NSM upgrade to 2007.3 or later release will not proceed without the license key file if NSM manages more than 25 devices.

Generating the License Key for an NSM Appliance Upgrade Installation

To generate the license key file to upgrade an NSM appliance:

  1. Log in to the LMS system and select License key generation for NSM.

  2. Enter the hardware serial number and authorization code.

    The hardware serial number is located on the back of the NSM appliance chassis.

    Depending on the package you purchased, Juniper Networks provides an authorization code via e-mail. If you received a paper license certificate, and are managing more than 25 devices, call Juniper Networks Customer Service. Customer Service will validate your purchase and generate a license key.

    The LMS system generates a license key file for the SKU recorded. You can choose to download the file or to receive it by e-mail.

  3. Save the license key file to your local drive for use during installation.

The NSMXpress upgrade to 2007.3 or later release will not proceed without the license key file if NSM manages more than 25 devices.

Generating the License Key File for an NSM 2007.3 or Later High Availability Upgrade Installation

To generate the license key file to upgrade to NSM 2007.3 or later release with high availability:

  1. Run the NSM installer image on the server designated as your primary NSM (or primary GUI server). The NSM Server generates an installation ID.

  2. Run the NSM 2007.3 or later installer image on the server designated as your secondary NSM (or secondary GUI server). The NSM Server generates an installation ID.

  3. Log in to the LMS system and select License key generation for NSM.

  4. Enter the serial number and authorization code of your primary NSM.

    For an NSM appliance installation, enter the serial number of the primary server. The hardware serial number is located on the back of the NSM appliance chassis.

    For a software-only installation:

    1. Enter the serial number.

      The serial number of your software is printed on the paper license certificate given to you when you purchased NSM. If you do not have the software serial number or the LMS System fails to recognize the serial number, call Juniper Networks Customer Service.

    2. Enter the installation ID of the primary NSM.

    Depending on the package you purchased, Juniper Networks provides an authorization code via e-mail. If you received a paper license certificate, and are managing more than 25 devices, call Juniper Networks Customer Service. Customer Service will validate your purchase and generate a license key.

  5. Select the Need High Availability Key check box. The LMS systems prompts you to provide the NSM Secondary serial number and Secondary Installation ID.

    The LMS system generates a license key file for the SKU recorded. You can choose to download the file, or to receive it by e-mail.

  6. Save the license key file to your local drive for use during installation.

The NSM upgrade to 2007.3 or later release will not proceed without the license key file if NSM manages more than 25 devices.

Example of an NSM License File

If your downloaded license key file has any extra lines before "-----BEGIN PGP SIGNED MESSAGE-----" or after "-----END PGP SIGNATURE-----", delete those lines before installing the license key file.

Installing the License Key File in Various Configurations

Instructions for installing the license key are included in the various installation chapters.

Upgrading the License Key

License upgrades can be purchased at any time for any supported product. After purchasing a license upgrade, you receive a Right to Use (RTU) certificate containing an authorization code that allows you to log in to the LMS system and generate a permanent license key that can be applied to the NSM product.

Viewing License Key Information

You can view key information about licenses, in the NSM License Information window. From the menu bar, selectTools > NSM License Information to view this information

Enforcing Licenses

The maximum number of devices allowed for NSMXpress appliance installations is 525. The maximum number of devices allowed for NSM software-only installations is 6025. These numbers include all modeled devices, vsys devices, and cluster devices.

Each cluster member of a cluster device counts as one device.

Even though the SKU installation is cumulative, NSM restricts the maximum number of manageable devices. NSM rejects the application for a license when the maximum device supported limit is reached for both appliance and software installations.

If you add a device after the number of devices added reaches 90 percent of the license limit, a warning message appears. If you try to add an extra device after the maximum limit is reached, a dialog box appears with the message “Maximum number of supported devices is reached.” You are not allowed to add devices after reaching the license limit. you must purchase an upgrade before adding more devices.

Licensing FAQ

Table 11 answers frequently asked questions about NSM licensing.

Table 11: Licensing FAQ

Question

Answer

Which device types does NSM count towards the total device count?

NSM counts each single addition of a firewall, IDP, router, switch, Secure Access, or Infranet Controller device as one device. Each cluster member counts as one device. Each vsys device added to a firewall root device counts as one device.

Does NSM Central Manager (NS-SM-A-CM) require a license key file?

The NSM Central Manager does not require a license key file for installation. Enforcement is built into the product.

Are there any differences in licenses for an NSM appliance and software-only installations?

No. Both follow the same licensing scheme, but their installation methods are different. NSM software version uses the NSM Installer to install the new license. An NSM appliance uses the Web UI to install the license. A license can also be installed via the NSM UI after the base installation is completed.

What is the procedure to add a new license after the device count limit is reached?

License upgrades can be purchased at any time for any supported product. After purchasing a license upgrade, you receive a Right to Use (RTU) certificate containing an authorization code that allows you to log in to the LMS system and generate a permanent license key that can be applied to the NSM product. License key updates can then be applied from NSM GUI from Tools > NSM License Information.

I already have NSM installed in my network. I have more than 25 devices installed on NSM. Do I need a license key file to upgrade to 2007.3 or later release?

Yes, if you are upgrading from a release that is older than 2007.3.

What is the procedure to obtain the license key file?

For new installations, see Installing NSM for the First Time. For upgrades, see Upgrading to an NSM Release that Requires a License.

I don't have an NSM Serial number available. What do I do?

Call Juniper Networks Customer Service.

Licenses for J-Web Device Manager

Managing Licenses for the EX Series Switch (J-Web Procedure)

This topic applies only to the J-Web Application package.

To enable and use some Junos OS features on an EX Series switch, you must purchase, install, and manage separate software licenses. Each switch requires one license. For a Virtual Chassis deployment, two licenses are recommended for redundancy. After you have configured the features, you see a warning message if the switch does not have a license for the feature.

Before you begin managing licenses, be sure that you have:

  • Obtained the needed licenses. For information about how to purchase software licenses, contact your Juniper Networks sales representative.

  • Understand what makes up a license key. For more information, see License Key Components for the EX Series Switch.

This topic includes the following tasks:

Adding New Licenses

To add one or more new license keys on the switch, with the J-Web license manager:

  1. In the J-Web interface, select Maintain > Licenses.
  2. Under Installed Licenses, click Add to add a new license key or keys.
  3. Do one of the following, using a blank line to separate multiple license keys:
    • In the License File URL box, type the full URL to the destination file containing the license key or keys to be added.

    • In the License Key Text box, paste the license key text, in plain-text format, for the license to be added.

  4. Click OK to add the license key or keys.

A list of features that use the license key is displayed. The table also lists the ID, state, and version of the license key.

Deleting Licenses

To delete one or more license keys from a switch with the J-Web license manager:

  1. In the J-Web interface, select Maintain > Licenses.
  2. Select the check box of the license or licenses you want to delete.
  3. Click Delete.

Displaying License Keys

To display the license keys installed on a switch with the J-Web license manager:

  1. In the J-Web interface, select Maintain > Licenses.
  2. Under Installed Licenses, click Display Keys to display all the license keys installed on the switch.

A screen displaying the license keys in text format appears. Multiple licenses are separated by a blank line.

Downloading Licenses

To download the license keys installed on the switch with the J-Web license manager:

  1. In the J-Web interface, select Maintain > Licenses.
  2. Under Installed Licenses, click Download Keys to download all the license keys installed on the switch to a single file.
  3. Select Save it to disk and specify the file to which the license keys are to be written. You can also download the license file to your system.