3.2.7. license

License configuration.

vsr running config# system license

enabled (pushed)

Enable or disable the license.

vsr running config# system license
vsr running license# enabled true|false
Default value
true

snmp

Enable or disable the license SNMP agent.

vsr running config# system license
vsr running license# snmp true|false
Default value
false

valid (state only) (pushed)

True if the license is valid.

vsr> show state system license valid

state (state only)

The license state.

vsr> show state system license state

activation-type (state only)

How the license was activated.

vsr> show state system license activation-type

license-type (state only)

The license type.

vsr> show state system license license-type

short-license-type (state only)

A shorter version of the license type.

vsr> show state system license short-license-type

subscription-end-date (state only)

The subscription or evaluation end date.

vsr> show state system license subscription-end-date

support-type (state only)

The type of support (none, standard or extended).

vsr> show state system license support-type

support-end-date (state only) (pushed)

The support end date.

vsr> show state system license support-end-date

remaining-days (state only) (pushed)

The remaining days until support end date.

vsr> show state system license remaining-days

online

Configure an online license.

vsr running config# system license online

serial (mandatory) (hidden)

The license serial number used for this machine.

vsr running config# system license online
vsr running online# serial <string>

vrf

The VRF to use for connecting to the license server.

vsr running config# system license online
vsr running online# vrf VRF

VRF values

Description

main

The main vrf.

<string>

The vrf name.

Default value
main

proxy-host

The hostname or address of an HTTP proxy to use for connecting to the online license server.

vsr running config# system license online
vsr running online# proxy-host PROXY-HOST

PROXY-HOST values

Description

<ipv4-address>

The ipv4-address type represents an IPv4 address in dotted-quad notation. The IPv4 address may include a zone index, separated by a % sign. The zone index is used to disambiguate identical address values. For link-local addresses, the zone index will typically be the interface index number or the name of an interface. If the zone index is not present, the default zone of the device will be used. The canonical format for the zone index is the numerical format

<ipv6-address>

The ipv6-address type represents an IPv6 address in full, mixed, shortened, and shortened-mixed notation. The IPv6 address may include a zone index, separated by a % sign. The zone index is used to disambiguate identical address values. For link-local addresses, the zone index will typically be the interface index number or the name of an interface. If the zone index is not present, the default zone of the device will be used. The canonical format of IPv6 addresses uses the textual representation defined in Section 4 of RFC 5952. The canonical format for the zone index is the numerical format as described in Section 11.2 of RFC 4007.

<domain-name>{1,253}

The domain-name type represents a DNS domain name. The name SHOULD be fully qualified whenever possible. Internet domain names are only loosely specified. Section 3.5 of RFC 1034 recommends a syntax (modified in Section 2.1 of RFC 1123). The pattern above is intended to allow for current practice in domain name use, and some possible future expansion. It is designed to hold various types of domain names, including names used for A or AAAA records (host names) and other records, such as SRV records. Note that Internet host names have a stricter syntax (described in RFC 952) than the DNS recommendations in RFCs 1034 and 1123, and that systems that want to store host names in schema nodes using the domain-name type are recommended to adhere to this stricter standard to ensure interoperability. The encoding of DNS names in the DNS protocol is limited to 255 characters. Since the encoding consists of labels prefixed by a length bytes and there is a trailing NULL byte, only 253 characters can appear in the textual dotted notation. The description clause of schema nodes using the domain-name type MUST describe when and how these names are resolved to IP addresses. Note that the resolution of a domain-name value may require to query multiple DNS records (e.g., A for IPv4 and AAAA for IPv6). The order of the resolution process and which DNS record takes precedence can either be defined explicitly or may depend on the configuration of the resolver. Domain-name values use the US-ASCII encoding. Their canonical format uses lowercase US-ASCII characters. Internationalized domain names MUST be A-labels as per RFC 5890.

proxy-port

The TCP port of the HTTP proxy server.

vsr running config# system license online
vsr running online# proxy-port PROXY-PORT

PROXY-PORT

A 16-bit port number used by a transport protocol such as TCP or UDP.

proxy-user

The username for connecting to the HTTP proxy server.

vsr running config# system license online
vsr running online# proxy-user <string>

proxy-password (hidden)

The password for connecting to the HTTP proxy server.

vsr running config# system license online
vsr running online# proxy-password <string>

export-analytics

If activated, exports information necessary for finding the instance on the licensing portal. It is recommended to leave this enabled.

vsr running config# system license online
vsr running online# export-analytics true|false
Default value
true

use-ipv6-dns

If activated, the licensing server will be accessed using IPv6 instead of IPv4.

vsr running config# system license online
vsr running online# use-ipv6-dns true|false
Default value
false

source-ip

Source address used to join the server.

vsr running config# system license online
vsr running online# source-ip SOURCE-IP

SOURCE-IP values

Description

<ipv4-address>

An IPv4 address.

<ipv6-address>

An IPv6 address.

connected (state only) (pushed)

True if the cloud license server is reachable.

vsr> show state system license online connected

last-healthcheck-date (state only) (pushed)

The last contact with license server date.

vsr> show state system license online last-healthcheck-date

lease-end-date (state only) (pushed)

The end of the license lease date.

vsr> show state system license online lease-end-date

current-activations (state only)

How many devices already hold this license.

vsr> show state system license online current-activations

allowed-activations (state only)

How many devices can hold this license at a time.

vsr> show state system license online allowed-activations

license-tokens (state only)

How many tokens are authorized by license.

vsr> show state system license online license-tokens

computer-id (state only)

This computer ID.

vsr> show state system license online computer-id

offline-certificate

Configure an offline license using a certificate.

vsr running config# system license offline-certificate

serial (mandatory) (hidden)

The license serial number of a license file imported with the license certificate import command. After the first successful commit, the certificate is deleted.

vsr running config# system license offline-certificate
vsr running offline-certificate# serial <string>

computer-id (state only)

This computer ID.

vsr> show state system license offline-certificate computer-id

license-certificate (state only) (pushed)

License certificates imported on the system.

vsr> show state system license offline-certificate license-certificate

offline

Configure an offline license using a file.

vsr running config# system license offline

serial (mandatory) (hidden)

The license serial number of a license file imported with the license-file import command.

vsr running config# system license offline
vsr running offline# serial <string>

license-file (state only) (pushed)

License files imported on the system.

vsr> show state system license offline license-file

throughput (deprecated) (state only)

Attention

Deprecated since: 2024-03-13
Obsolete in release: 25q1
Description: Replaced by generic counters.
Replacement: licensed-feature counter

Network throughput.

allowed (deprecated) (state only) (pushed)

unit: Gb

The allowed throughput.

vsr> show state system license throughput allowed

used (deprecated) (state only) (pushed)

unit: Gb

The througput currently in use.

vsr> show state system license throughput used

cgnat-conntracks (deprecated) (state only)

Attention

Deprecated since: 2024-03-13
Obsolete in release: 25q1
Description: Replaced by generic counters.
Replacement: licensed-feature counter

CG-NAT conntracks.

allowed (deprecated) (state only) (pushed)

The number of CG-NAT conntracks allowed.

vsr> show state system license cgnat-conntracks allowed

used (deprecated) (state only) (pushed)

The number of CG-NAT conntracks currently in use.

vsr> show state system license cgnat-conntracks used

ipsec-tunnels (deprecated) (state only)

Attention

Deprecated since: 2024-03-13
Obsolete in release: 25q1
Description: Replaced by generic counters.
Replacement: licensed-feature counter

IPsec tunnels.

allowed (deprecated) (state only) (pushed)

The number of IPsec tunnels allowed.

vsr> show state system license ipsec-tunnels allowed

used (deprecated) (state only) (pushed)

The number of IPsec tunnels currently in use.

vsr> show state system license ipsec-tunnels used

licensed-feature (state only)

The list of licensed features on the device.

enabled (state only) (pushed)

The status of the feature.

vsr> show state system license licensed-feature <string> enabled

counter (state only)

A counter associated to this feature.

description (state only) (pushed)

The description of the counter.

vsr> show state system license licensed-feature <string> counter <string> description

allowed (state only) (pushed)

The number of objects allowed.

vsr> show state system license licensed-feature <string> counter <string> allowed

used (state only) (pushed)

The number of objects used.

vsr> show state system license licensed-feature <string> counter <string> used