- Table of Contents
-
- 01-Fundamentals Configuration Guide
- 00-Preface
- 01-CLI configuration
- 02-RBAC configuration
- 03-Login management configuration
- 04-FTP and TFTP configuration
- 05-File system management configuration
- 06-Configuration file management configuration
- 07-Software upgrade configuration
- 08-Emergency shell configuration
- 09-Automatic configuration
- 10-Device management configuration
- 11-Tcl configuration
- 12-Python configuration
- 13-License management
- Related Documents
-
Title | Size | Download |
---|---|---|
13-License management | 79.38 KB |
Licenses for different device types
Restrictions and guidelines: License management
License consistency in an IRF fabric
License management tasks at a glance
Identifying the license storage
Compressing the license storage
Obtaining required information for license register
Restrictions and guidelines for license installation
Restrictions and guidelines for license uninstallation
Uninstalling an activation file
Display and maintenance commands for license management
Managing licenses
About licenses
License-based features, such as software package, RTC terminal access, POS terminal access, AP online, upgrade IPS signature database, upgrade ACG signature database, SSL VPN, and Web caching., require a license to run on your device.
License types
Licenses for different device types
(In standalone mode.) You must purchase a license key for the entire device. To license the device, use the license key and the device's SN and DID to register an activation file and install the activation file on the device.
(In IRF mode.) You must purchase a license key for each IRF member device. To license an IRF member device, use the license key and the member's SN and DID to register an activation file and install the activation file on the IRF member device. An IRF member device is licensed even if the device joins another IRF fabric.
License classification
Licenses for devices include package licenses and feature licenses.
H3C website provides the same license registration procedure for package licenses and feature licenses.
Package license
The following matrix shows the feature and hardware compatibility:
Hardware |
Package license compatibility |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
No |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
No |
MSR 2630 |
Yes |
MSR3600-28, MSR3600-51 |
Yes |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
No |
MSR3610-I-DP, MSR3610-IE-DP |
No |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
No |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
· MSR3620-DP: No |
MSR3610-G, MSR3620-G |
No |
The device software image includes the following software:
· Boot ROM image
· System image
· Feature packages:
? Data feature package—Includes the features such as MPLS and DLSw.
? Security feature package—Includes the features such as VPN.
? Voice feature package—Includes the features such as BUSYOUT and voice.
The Boot ROM image and system image are required for the system to work, and they do not need any licenses.
The feature packages are all license-based features. You must register and activate the license for a feature to run on your device.
After a package license is correctly installed, the system will automatically search the storage media for a matching feature package. If no match is found, you are required to load the feature package and install it. If a match is found, the system will install the feature package. If the installation fails because of device poweroff or reboot, you are required to manually install the feature package when the device is powered on again. Use the display boot-loader command to verify that the feature package is installed successfully.
|
IMPORTANT: During the installation of feature packages, do not execute the save command. The violation will cause configuration loss. |
Feature license
ATC license
The following matrix shows the feature and hardware compatibility:
Hardware |
ATC license compatibility |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
No |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
No |
MSR 2630 |
No |
MSR3600-28, MSR3600-51 |
No |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
No |
MSR3610-I-DP, MSR3610-IE-DP |
Yes |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
Yes |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
Yes |
MSR3610-G, MSR3620-G |
Yes |
To use the RTC terminal access feature, you must install ATC licenses.
AC license
The following matrix shows the feature and hardware compatibility:
AC license compatibility |
|
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
Yes |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
Yes |
MSR 2630 |
Yes |
MSR3600-28, MSR3600-51 |
Yes |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
Yes |
MSR3610-I-DP, MSR3610-IE-DP |
Yes |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
Yes |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
Yes |
MSR3610-G, MSR3620-G |
No |
To allow APs to come online, you must install AC licenses on the device. The AC licenses control the number of online APs. Based on the allowed AP number, AC licenses include the following types:
· AC licenses that allow a maximum of one online AP.
· AC licenses that allow a maximum of four online APs.
· AC licenses that allow a maximum of eight online APs.
· AC licenses that allow a maximum of 16 online APs.
· AC licenses that allow a maximum of 32 online APs.
· AC licenses that allow a maximum of 128 online APs.
You can increase the number of online allowed online APs by installing multiple AC licenses.
The following matrix shows the allowed maximum online AP counts of MSR routers for AC licenses:
Hardware |
Maximum number of allowed online APs |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
16 |
MSR2600-6-X1, MSR2600-10-X1 |
32 |
MSR 2630 |
64 |
MSR3600-28, MSR3600-51 |
64 |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
64 |
MSR3610-I-DP, MSR3610-IE-DP |
256 |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
256 |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
256 |
IPS license
The following matrix shows the feature and hardware compatibility:
Hardware |
IPS license compatibility |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
No |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
No |
MSR 2630 |
No |
MSR3600-28, MSR3600-51 |
No |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
Yes |
MSR3610-I-DP, MSR3610-IE-DP |
Yes |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
No |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
No |
MSR3610-G, MSR3620-G |
Yes |
To update the IPS signature database, you must install IPS licenses on the device.
IPS licenses are time-based licenses, including licenses valid for 1 year and licenses valid for 3 years. You can increase the validity period of using the IPS signature database update feature by installing multiple IPS licenses.
ACG license
The following matrix shows the feature and hardware compatibility:
Hardware |
ACG license compatibility |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
Yes |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
Yes |
MSR 2630 |
Yes |
MSR3600-28, MSR3600-51 |
Yes |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
Yes |
MSR3610-I-DP, MSR3610-IE-DP |
Yes |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
Yes |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
Yes |
MSR3610-G, MSR3620-G |
Yes |
To update the ACG signature database, you must install ACG licenses on the device.
ACG licenses are time-based licenses, including licenses valid for 1 year and licenses valid for 3 years. You can increase the validity period of using the ACG signature database update feature by installing multiple ACG licenses.
SSL VPN license
The following matrix shows the feature and hardware compatibility:
Hardware |
SSL VPN license compatibility |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
Yes |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
Yes |
MSR 2630 |
Yes |
MSR3600-28, MSR3600-51 |
Yes |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
Yes |
MSR3610-I-DP, MSR3610-IE-DP |
Yes |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
Yes |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
Yes |
MSR3610-G, MSR3620-G |
Yes |
To allow SSL VPN users to come online, you must install SSL VPN licenses on the device. The SSL VPN licenses control the number of online SSL VPN users. Based on the allowed user number, SSL VPN licenses include the following types:
· SSL VPN licenses that allow a maximum of 30 online SSL VPN users.
· SSL VPN licenses that allow a maximum of 200 online SSL VPN users.
You can increase the number of allowed online SSL VPN users by installing multiple SSL VPN licenses.
Web cache license
To use the Web caching feature, you must install the activation file for the Web cache license.
Restrictions and guidelines: License management
License operations
Make sure no one else is performing license management tasks on the device you are working with.
Activation file operations
When you manage activation files, follow these restrictions and guidelines:
· Do not open and edit the files to avoid file corruption.
· Do not modify the names of the files to avoid licensing error.
· For licensed features to function correctly, do not delete files that are usable or in use in the flash:/license directory. The license management feature uses this directory for license management.
License consistency in an IRF fabric
(In IRF mode.) For licensed features to function correctly in an IRF fabric, make sure all IRF member devices are installed with the same licenses.
License management tasks at a glance
To manage licenses, perform the following tasks:
1. Identifying the license storage
2. (Optional.) Compressing the license storage
3. Obtaining required information for license register
6. Managing installed licenses
? Recovering an activation file
Identifying the license storage
To identify the license storage, execute the following command in any view:
display license feature
From the command output, view the Total and Usage fields to examine whether the remaining license storage is sufficient for installing new licenses. If the remaining license storage is not sufficient, compress the license storage.
Compressing the license storage
About license storage compression
Compress the license storage to delete expired and uninstalled license information to ensure sufficient storage space for installing new licenses.
Restrictions and guidelines
The DID changes each time the license storage is compressed. Licenses generated based on the old DID cannot be installed after the compression.
Procedure
1. Back up the Uninstall keys of uninstalled licenses.
When you uninstall an unexpired license, an Uninstall key is created. The Uninstall key is required for transferring the license.
2. Make sure all licenses generated based on the old DID have been installed.
3. Enter system view.
system-view
4. Compress the license storage.
In standalone mode:
license compress
In IRF mode:
license compress slot slot-number
Obtaining required information for license register
1. (Optional.) Identify features to be licensed by using the display license feature command.
2. Obtain the following information:
? License key, which is obtained by purchasing the license.
? SN and DID information, which can be obtained by using the display license device-id command.
3. Back up the license key, SN, and DID information in case of loss.
Registering a license
Restrictions and guidelines
If you cannot obtain or re-register the activation file due to problems such as operating system and browser errors, contact H3C Support.
Procedure
1. Access http://www.h3c.com.hk/Technical_Support___Documents/Product_Licensing/, and select Register the First Time or Register Upgrade Licenses from the navigation tree.
Upgrade licenses are used for add-on nodes, add-on features, or time extensions.
2. Select the product category and use the license key, SN, and DID to register the license.
3. Obtain the activation file or activation key and download it to the PC.
Installing a license
Restrictions and guidelines for license installation
When installing a license, the system automatically searches the storage media for a matching feature package. When a match is found, it stops searching and installs the package.
Installing an activation file
1. Enter system view.
system-view
2. Install an activation file.
In standalone mode:
license activation-file install license-file
In IRF mode:
license activation-file install license-file slot slot-number
Uninstalling a license
About license uninstallation
Perform this task to uninstall an unexpired formal license when the license remains unused for a while or needs to be transferred to another device.
After uninstallation, Uninstall keys are generated, which will be used for license transfer.
Restrictions and guidelines for license uninstallation
Trial licenses cannot be transferred. Uninstall a trial license does not create any uninstallation information.
Expired licenses cannot be uninstalled.
A license that was uninstalled on a device cannot be re-installed on the device. It can only be transferred to another device.
Uninstalling an activation file
1. Enter system view.
system-view
2. Uninstall an activation file.
In standalone mode:
license activation-file uninstall license-file
In IRF mode:
license activation-file uninstall license-file slot slot-number
Only unexpired activation files can be uninstalled.
Transferring a license
About license transfer
You can transfer a license from one device to another if the license has not expired.
Procedure
1. Log in to the source device, and uninstall the license to obtain the uninstallation information. For more information, see "Uninstalling a license."
2. Obtain the Uninstall key of the license by using the display license command.
3. Access the target device and obtain SN and DID information. For more information, see "Obtaining required information for license register."
4. Register a license for the target device. For more information, see "Registering a license."
During the license register, you must provide SN and DID information of the target device and the Uninstall key of the source device.
5. Install the new license on the target device. For more information, see "Installing a license."
Recovering an activation file
If you mistakenly delete an activation file, use the following procedure to recover the activation file:
1. Use the copy command to copy the backup activation file to directory flash:/license.
2. Use the display license command to verify that the state of the recovered activation file is In use.
3. Restart the device if the license state is In use but the licensed feature cannot function correctly.
Display and maintenance commands for license management
Execute display commands in any view.
Task |
Command |
Display detailed license information. |
In standalone mode: display license [ activation-file ] In IRF mode: display license [ activation-file ] [ slot slot-number ] |
Display the SN and DID information. |
In standalone mode: display license device-id In IRF mode: display license device-id slot slot-number |
Display brief feature license information. |
display license feature |