Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Andrew_Tindall
Contributor

Licencing for multiple seats 'offline' ?

I need to license a HA pair of virtual gateways offline (SC and gateways currently have no internet access as they are for internal use only, no proxy is available right now). SC for these devices was licenced in offline mode in the usual manner, so that's all good.

I have a 2 seat CPSG-VSEC-NSX-BUN-NGTP-3Y-LICENSE in the User Centre for these devices.

When I go to license I have two options Central and local. 

If I select Central it gives me the option to entre an IP Address, should this be the gateways IP or that of the SC? If it's the gateway do I use the VIP or the IP for the specific gateway?

I'm assuming since the SC has no internet access I will need to select local?

When selecting local it gives me dialogue boxes for both Gateway and Management IP's, how does this work with multiple seats, Can I just generate one licence file then run through the process again to generate another one for the second gateway in the HA pair?

Any pointers to appropriate SK's or pervious solutions gratefully accepted, as my search skills are lacking for this one.

 

 

 

0 Kudos
9 Replies
PhoneBoy
Admin
Admin

"Central" licensing means controlled from the management, which the gateways should have access to anyway.
Use the Management IP address for this.
Central licenses can be used in an offline environment.

0 Kudos
Andrew_Tindall
Contributor

Apologies for the silly question, but I'm a little sleep deprived today.

 

So I would  generate the .lic file using the SC's IP address? Then add to the repository using SmartUpdate and attach the licence's from there?

0 Kudos
PhoneBoy
Admin
Admin

Yes to both.

0 Kudos
Andrew_Tindall
Contributor

Thanks for you help as always.

I do have another query though, see my other post in this thread for details, could you confirm if I'm on the right track with this?

0 Kudos
G_W_Albrecht
Legend Legend
Legend

sk11054: Check Point License Guide

CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
Andrew_Tindall
Contributor

Thanks for the reply. Just got a what I think is a simple issue left in that it will only attach to a single gateway (that is setup with 2 CPU cores in VMWare).

The licence in question is a;

CPSG-VSEC-NSX-BUN-NGTP-3Y-LICENSE 1 CloudGuard Network virtual Core for NSX  2 seats)
 
Am I right in thinking in that it will only attach to one gateway as that is using both seats as it is setup with 2 CPU cores?
And that to utilise it on both gateways they need to be configured with a single CPU core?
0 Kudos
PhoneBoy
Admin
Admin

Correct, as the license is only for two cores total.
To install it on two gateways, each would need a single core.

0 Kudos
Andrew_Tindall
Contributor

It's still not letting me attach the license to the second gateway in SmartUpdate.

It attaches to the first gateway without issue, but when attempting to attach to the second gateway it tell me that there are no unattached licences. Using the attached assigned licence's is greyed out as an option.

 

I feel like I'm missing something really obvious here, I've checked the VM's they are both only showing a single core.

Do I need to generate two licence files in the User Centre account?  Looking at the UC it appears to generate a .lic file for a single core?

License - Step 1 of 1

 
  Product NameCPSG-VSEC-NSX-BUN-NGTP-3Y-LICENSE 
  Certificate KeyXXXXXXXXXX 
  Description1 CloudGuard Network virtual Core for NSX. Annual subscription for 3 years

 

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

You can't attach it to multiple gateways using this method without intervention from account services to split it prior.

By comparison if you use the Cloudgauard central license utility you shouldn't have this problem as each gateway will get what it needs from the 'pool'.

CCSM R77/R80/ELITE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events