Demonstration units from the SMB series have different licensing compared to the „bigger“ Appliances. As Demo Units have a year of Support and Services, it is easy to use the „real“ licenses. But for Demo use, e.g. as POC at a customers site, another way of licensing is to use the 30 Day Trial License instead. This will be covered later.
Using Eval Licenses from User Center was not possible until firmware R77.20.60 – the SMB series can be licensed offline using WebGUI with the file CPActivationFile.xml, not file CPLicenseFile.lic. But this is only possible in the CLI!
Using SMB units with ALL-IN-ONE EVALUATION License
We will install the license later on, first we have to generate it ! In UserCenter we do:
Once available in the UserCenter under Evaluations, we only have to license it as follows:
Please remember that it must be licenses as Local – Central will not work. Gateway IP Address must be the local IP of the SMB box. After the license has been processed you will receive an email containing something similar to:
Command line instructions for License Installation
--------------------------------------------------
On all platforms and operating systems available for this product:
For the Module:
Run 'cplic put [module name] 172.27.39.126 07Oct2017 aE2a4bmtz-4nvTJAQ3o-V3rnEzCG6-2EMxAPAQv cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-75333B1B6C55'
We must use the Module part of the license for the SMB box – the SmartCenter part can be installed, too, but is of no use at all. First, we take a look at the currently installed license (if it is not removed, it will always be displayed together with the new eval):
[Expert@seven-eleven]# cplic print
Host Expiration Features
127.0.0.1 never CPAP-AP730 ENF-APP CPSB-FW CPSB-VPN CPSB-IA CPSB-ADNC CPSB-ADNC-M CPSB-SSLVPN-50 CPSB-SSLVPN-50 CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-IPS-S1 CPSB-APCL-S1 CPSB-ABOT-S CPSB-ABOT CK-00-1C-7F-73-0A-59
Now we install the All-In-One Eval as instructed in the email, only leaving out the module name:
[Expert@seven-eleven]# cplic put 172.27.39.126 07Oct2017 aE2a4bmtz-4nvTJAQ3o-V3rnEzCG6-2EMxAPAQv cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-75333B1B6C55
Warning: Can't find ::cpsg-vsx-25s in cp.macro. License version might be not compatible
Warning: Can't find ::cpsg-vsx-25s in cp.macro. License version might be not compatible
Host Expiration Features
172.27.39.126 7Oct2017 cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-75333B1B6C55
We can disregard the warning about the file cp.macro (/pfrm2.0/opt/fw1/conf/cp.macro, /pfrm2.0/config1/fw1/conf/cp.macro). License has changed and now includes e.g. DLP and vsx that are unusable on a SMB device:
[Expert@seven-eleven]# cplic print
Host Expiration Features
172.27.39.126 7Oct2017 cpsg-c-8-u cpsb-fw cpsb-vpn cpsb-ipsa cpsb-dlp cpsb-sslvpn-u cpsb-ia cpsb-adnc cpsg-vsx-25s cpsb-swb cpsb-ips cpsb-av cpsb-urlf cpsb-aspm cpsb-apcl cpsb-abot cpsb-ctnt CK-75333B1B6C55
If we would like to remove this license again, we have to use the signature part from the cplic put above:
[Expert@seven-eleven]# cplic del aE2a4bmtz-4nvTJAQ3o-V3rnEzCG6-2EMxAPAQv
A cplic print -x will also show the signature part of an installed license.
Also see this list SMB documents for more.
