Create a Post
Supporto_Checkp
Contributor

Cloudguard NSX - Licensing Issues

Hi

I hope that is a stupid question but I've problem licensing my cloudguard cluster

I've imported ( and attached  with loudguard_config utils from cli)  the license.
it's correctly attached to the right cluster/service

 

Cluster Name: PROD-NSX
Attached licenses details:
'xxxxxxx never CPSG-VSEC-NSX+16 CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT xxxxxxxxxxxxx

 

Available Sockets for use: 16
Required Sockets for selected cluster: 12
Attached Sockets for selected cluster: 0

 

WARNING the following instances have no license:
serviceinstance-2-b76bec hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7546b hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7253f hosted by yyy.xxx.local l requires 2 Sockets.
serviceinstance-2-b724f3 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b78d88 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b73543 hosted by yyy.xxx.local requires 2 Sockets.

Why it doesn't distribute the license to the cluster member under that service? in this situation I can't install policies.

is there a way to force the "attaching" of the core to all the cluster members?
thx

 

0 Kudos
11 Replies
Nir_Shamir
Employee
Employee

Hi,

is this NSX-V or NSX-T ?

thanks.

0 Kudos
Supporto_Checkp
Contributor

NSX-V

0 Kudos
Nir_Shamir
Employee
Employee

Hi,

try running the command "vseclic" to redistribute the license.

0 Kudos
Shay_Levin
Admin
Admin

It’s not clear how you distribute the licenses – are you using central license ?

0 Kudos
Supporto_Checkp
Contributor

I simply loaded a new license in smart update and then used  "cloudguard config" to attach it the correct cloudguard cluster.

If I use "vsec_lic_cli"  it can see only my AWS Checkpoint Cluster ( and manage correctly their licenses )  but not any NSX Cloudguard Cluster


Getting licenses usage. Please wait...
+------------------+---------------+-----------------+---------------------+---------------------------------------+
| Pool | Total Quota | Available Quota | CKs | Subscribed Gateways (Number of Cores) |
+------------------+---------------+-----------------+---------------------+---------------------------------------+
| VE-NGTX(default) | 32 | 16 | 627DC3FD8D4C | AWS-SIRE-Northbound-01 (2) |
| | | | | AWS-xx01 (2) |
| | | | | AWS-xx02 (2) |
| | | | | AWS-xx01 (2) |
| | | | | AWS-xx02 (2) |
| | | | | AWS-xx02 (2) |

These gateway above are NOT the ones on NSX .

If i try to add my license string in central lisense util it tell me that is not valid


| | | | | AWS-xx02 (2) |
| | | | | AWS-xx01 (2) |
+------------------+---------------+-----------------+---------------------+---------------------------------------+

0 Kudos
Shay_Levin
Admin
Admin

I don't know what version are you using, there is a difference between the versions and the supported license utilities

Check the SK : https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

It's all explained in it.

Let us know if it solved your isuue.

0 Kudos
Supporto_Checkp
Contributor

MDS 80.40 T126
Reg Hotfix 80.40 v7 T12
NSX-V Vsec R80.10 on esxi hosts.

vsec_central_license ( vsec_lic_cli) doesn't work for NSX-V Gateway ,for that I have to use "cloudguard_config" ....and it seems to work for the first part : attach the license to che correct NSX Cluster,but then ... no core license are assigned to the single hosts member of that cluster 

Cluster Name: PROD-NSX
Attached licenses details:
'xxxxxxx never CPSG-VSEC-NSX+16 CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT xxxxxxxxxxxxx

 

Available Sockets for use: 16
Required Sockets for selected cluster: 12
Attached Sockets for selected cluster: 0

 

WARNING the following instances have no license:
serviceinstance-2-b76bec hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7546b hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b7253f hosted by yyy.xxx.local l requires 2 Sockets.
serviceinstance-2-b724f3 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b78d88 hosted by yyy.xxx.local requires 2 Sockets.
serviceinstance-2-b73543 hosted by yyy.xxx.local requires 2 Sockets.

0 Kudos
Daniel_Mirkin
Employee
Employee

Hi,

Please see the following:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

"

...

Symptoms
  • License is not attached to all members of vSEC for NSX cluster.

...

"

Supporto_Checkp
Contributor

i've already followed but  i've not any duplicate license in the DB... 

0 Kudos
Daniel_Mirkin
Employee
Employee

0 Kudos
Supporto_Checkp
Contributor

hi,
i've opened a case ...let'see.
With a demo everything works like a charm.


0 Kudos