Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Participant

SSL Network Extender: Not enough licenses for SNX

Although we have licenses applied to gateways we have problems with SNX VPN clients.

This issue starts without any changes to our applied licenses.

Here is an excerpt from the error message:
; reason :: SSL Network Extender: Not enough licenses for SNX; scheme :: SSL; methods ::; reject_category: SSL Network Extender authentication failure;

Does anyone has any inside about this issue ?

Best Regards, 

 

 

schalhoub
0 Kudos
8 Replies
Highlighted
Admin
Admin

Providing output from cplic print would be a good place to start.
That message in general indicates you either don't have appropriate licenses or there are more users connected than you are licensed for.
Highlighted
Participant

Hi PhoneBoy , 

Thank you for your reply.
We have a cluster with two member (fw-trf2-a and fw-trf2-b).
Our Management is fw-sm-a.

Here is the output of cplic print.

 

Management

[Expert@fw-sm-a:0]# cplic print

Host             Expiration  Features

172.16.X.X     never       CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

 

Contract Coverage:

 

#   ID          Expiration   SKU

===+===========+============+====================

1  | W511W96   | 24Oct2021  | CPCES-CO-PREMIUMPRO

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

2  | Q3TWH11   | 24Oct2019  | CPSB-EVNT-5-1Y

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

3  | PR20SOO   | 24Oct2019  | CPSB-RPRT-5-1Y

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

4  | AWGF0WU   | 24Oct2019  | CPSB-COMP-5-1Y

   +-----------+------------+--------------------

   |Covers:     CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-F1FB8CF7BF77

===+===========+============+====================

 

 

Gateway

[Expert@fw-trf2-a:0]# cplic print

Host             Expiration  Features

172.16.X.X    never       CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

172.16.0.252     never       CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

 

Contract Coverage:

 

#   ID          Expiration   SKU

===+===========+============+====================

1  | E4S32Y2   | 24Oct2021  | CPSB-ABOT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

2  | 392YY6H   | 24Oct2021  | CPSB-ASPM-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

3  | A765EH3   | 24Oct2021  | CPSB-TE-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

4  | 11HF7GP   | 24Oct2021  | CPCES-CO-PREMIUMPRO-ADD

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

5  | 634TU0F   | 24Oct2021  | CPSB-IPS-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

6  | 88SFR16   | 24Oct2021  | CPSB-APCL-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

7  | 439SG4G   | 24Oct2021  | CPSB-URLF-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

8  | H23TU1T   | 24Oct2021  | CPSB-AV-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

9  | DAGF163   | 24Oct2021  | CPSB-CTNT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

10 | 46O556D   | 24Oct2021  | CPSB-TEX-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-C0-8D

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-C0-8D

===+===========+============+====================

 

 

 

Gateway

[Expert@fw-trf2-b:0]# cplic print

Host             Expiration  Features

1172.16.X.X   never       CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

172.16.0.253     never       CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

 

Contract Coverage:

 

#   ID          Expiration   SKU

===+===========+============+====================

1  | IQ261U1   | 24Oct2021  | CPSB-CTNT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

2  | 11HF7GP   | 24Oct2021  | CPCES-CO-PREMIUMPRO-ADD

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

3  | H5112F2   | 24Oct2021  | CPSB-AV-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

4  | STDY8T1   | 24Oct2021  | CPSB-TE-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

5  | RFH28UG   | 24Oct2021  | CPSB-IPS-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

6  | 414P2D8   | 24Oct2021  | CPSB-ASPM-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

7  | D8E81I4   | 24Oct2021  | CPSB-TEX-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

8  | 51S76H5   | 24Oct2021  | CPSB-URLF-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

9  | DP1521Y   | 24Oct2021  | CPSB-APCL-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

10 | UHPWTOF   | 24Oct2021  | CPSB-ABOT-L-2Y

   +-----------+------------+--------------------

   |Covers:     CPVP-SNX-100-NGX CPVP-SNX-100-NGX CPSB-SWB CPVP-SNX-5-NGX CPSB-SWB CPSB-ADNC-M CK-00-1C-7F-43-E9-C4

   |            CPAP-SG1540X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-200 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-URLF CPSB-IPS CPSB-APCL CPSB-AV CPSB-ABOT-L CPSB-ASPM CPSB-CTNT CK-00-1C-7F-43-E9-C4

===+===========+============+====================

schalhoub
0 Kudos
Highlighted
Admin
Admin

It looks like you have a couple of different licenses on here: one for CPSB-SSLVPN-200 and one for CPVP-SNX-100-NGX.
In fact, the second license string is entirely redundant and could be part of the issue.
Champion
Champion

The CPVP-SNX-100-NGX is not redundant but the good old Legacy SNX license for users that did not want to change to / buy the Mobile Access Blade ! There was a certain time window when customer could decide to either move to MAB or stay with Legacy SNX (no portal) - since then, the MAB license is always the CPSB-SSLVPN-xxx.

So, mixing these licenses is a good reason to cause licensing havoc 😞 If you have MAB and MAB user licenses, so please remove the legacy license !

Highlighted
Champion
Champion

Contact TAC / Account Services - you should be able to have over 200 clients connecting concurrently !

Highlighted
Advisor

you can verify how many clients are currently connected.
RAsession_util show users all
OR
fw tab -t userc_users -s
Highlighted
Champion
Champion

Find even more here: Remote Access Users license + count

Highlighted
Participant

Hi G_W_Albrecht,
the problem was solved contacting TAC.

Regards.



schalhoub