n When you apply evaluation license keys on a switch, abnormal tampering of the device’s system clock (such
as setting back the system clock) results in the disabling of software licensed modules and their supported
features. This can affect network services.
n The Advanced Cryptography (ACR) license includes the following caveats:
l On a platform that supports 2048 IPsec tunnels, the maximum number of Suite B IPsec tunnels
supported is 2048, even if a larger capacity license is installed.
l ACR licenses are cumulative. For example, if you want to support 2048 Suite B connections, you can
install two ACR licenses that support 1024 connections each.
l If your switch uses an ACR license that allows fewer IPsec tunnels that is supported by that switch
platform, that switch can still support IPsec tunnels using non-Suite B modes (for example, AES-CBC), up
to the platform maximum.
l The ACR license allows a switch to use both IPsec Suite B and 802.11i Suite B connections
simultaneously. The combined number of these sessions may not exceed the ACR license maximum.
l A single client using both 802.11i Suite B and IPsec Suite B connections will simultaneously consume two
ACR licenses.
AOS-W provides the ability to move a license from one standalone switch to another, for maximum flexibility in
managing an organization’s network and to minimize an RMA impact. Alcatel-Lucent monitors and detects license
fraud. Abnormally high volumes of license transfers for the same license certificate to multiple switches can indicate
a breach of the Alcatel-Lucent end user software license agreement and will be investigated.
Centralized Licensing Overview
In order to configure a license-dependent feature on the local switch, the master switch(s) must be licensed for
each of the features configured on the local switches. Centralized licensing simplifies licensing management by
distributing licenses installed on one switch to other switches on the network. One switch acts as a centralized
license database for all other switches connected to it, allowing all switches to share a pool of unused licenses.
The primary and backup licensing servers can share a single set of licenses, eliminating the need for a
redundant license set on the backup server. Local licensing client switches maintain information sent from the
licensing server, even if the licensing client switch and the licensing server switch can no longer communicate. If
an AP fails over from one client switch to another, the AP will be allowed to come up even if there aren’t
sufficient licenses present on the backup switch. the APs continue to stay active until they reboot. However, if
there are not sufficient available licenses to bring up an AP after it reboots, that AP will not become active.
You can use the centralized licensing feature in a master-local topology with a redundant backup master, or in a
multi-master network where all the masters can communicate with each other (for example, if they are all
connected to a single OmniVista server). In the master-local topology, the master switch acts as the primary
licensing server, and the redundant backup master acts as the backup licensing server. In a multi-master
network, one switch must be designated as a primary server, and a second switch must be configured as a
backup licensing server.
Centralized licensing can distribute the following license types:
n AP
n PEFNG
n RFProtect
n xSec
n ACR
This section includes the following topics:
n Primary and Backup Licensing Servers
AOS-W 6.5.3.x | User Guide Software Licenses | 83
To Next Page
Loading...