AAA, NAC, Guest Access & BYOD

How do I activate an ECS license?

Question:  How do I activate an ECS license?

 

Product and Software: This article applies to Endpoint Compliance Server (ECS) version 4.0.4.28 and later.
Customers cannot activate an ECS license using the licensing portal. The ECS license is not cumulative. A new key must be generated for all license upgrades. The current process is manual, so you must capture the following information and send your email request to Brian Zawacki (bzawacki@arubanetworks.com) and Siem Tran (stran@arubanetworks.com).

  • Model
  • Sales Order number
  • Serial number
  • Current license count
  • New license count
  • Eth0 MAC Address

To upgrade the license, use the following information, which comes from the Bradford support portal.

DESCRIPTION
The NAC appliance must be rekeyed when:
* Adding licenses
* The motherboard is replaced

DATE: 12.30.2008
VERSION: 4.0.1 - 4.0.2
PLATFORM: 1U

RELATED DOCUMENTS
* n/a

+++++++++++++++++++++++++++++++++++++++++++
TROUBLESHOOT
If, after rekeying the appliance, the appliance is not working properly,
verify the following:
* The key was copied without introducing any additional characters (e.g., spaces)
* You restarted campusMgr after installing the key. (In an HA
configuration, the key should have been installed first on the Secondary where campusMgr is not running, and then on the Primary, where campusMgr is running and must be restarted).
* The MAC address for which the key was generated is the same as the
server on which the key was installed.

+++++++++++++++++++++++++++++++++++++++++++
SOLUTION DETAILS
The new key is generated and applied to the Network Control Server, in an Application Server/Control Server pair.
In a High Availability (HA) configuration, separate keys are generated and applied to the Network Control Servers. Since the presumption is that you are running off the Primary, install the key for the Secondary first, since campusMgr would not be running. After you install the key on the Primary, you will need to restart campusMgr on that server.

REQUIREMENTS
The following information is required to generate the new key:
* MAC address of the eth0 interface on the NAC Server, or Network Control Server in an Application Server/Control Server pair (both Network Control Servers in an HA configuration)
* The NAC appliance model

PROCEDURE
STEP 1: Identify the Appliance Model and MAC Address of eth0
-----------------------------------------------------------------------
NOTE: For an HA configuration, you will need to do this for each Network Control Server.
This section describes how to do this from the Admin UI, as well as the
CLI.
*** To do this from the Admin UI, follow these steps:
1. Log in to the NAC appliance Admin UI.
2. On the left side of the screen, locate the model number listed under
"Appliance" (e.g., ND-MX). Note, this is listed only on the login page.
3. Access Topology view.
4. Select the product icon (e.g., Campus Manager or NAC Directory),
right-click Administration.
5. Select the License Management tab.
6. Click the View button. From this page you will be able to look up
licensing information for any server accessible from this server (e.g., in an HA configuration, you can view/modify information for either NAC
Control Server).
6. Select the server from the drop-down box and note the MAC address and license information.
8. Now proceed to Step 2: "Sending an Email to Bradford Support".

*** To do this from the CLI, follow these steps:
1. On the Network Control Server, log into the CLI. The initial
information that is displayed includes the model information,such as:
Appliance Type: Endpoint Compliance System ND-MX
2. Run the DumpKey command. "Client Count" identifies the number of
licenses in the current key, and "Physical Address" shows the MAC address for eth0:
DumpKey
Client Count = 2250
No time limit
Physical Address = 00:30:48:8C:FB:AC
Campus Manager Type = NetworkControlApplicationServer
Vendor = Aruba
Plugin count = 12
Plugins:
Aruba
cm1000
cm2000
Config-Management
PacketShaper
DHCP-Management
Bandwidth-Management
Authentication
Access-Point-Management
Remediation-Center
Registration-Center
Client-Validation-Assessment

Note: You can also use the ifconfig command to check the MAC address of
eth0 (this command lists all of the interfaces). A sample follows.
ifconfig
eth0 Link encap:Ethernet HWaddr 00:30:48:8C:FB:AC
inet addr:192.168.5.205 Bcast:192.168.5.255 Mask:255.255.255.0
inet6 addr: fe80::230:48ff:fe8c:fbac/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:330851991 errors:10089459 dropped:645 overruns:0 frame:1008
3. Now proceed to Step 2: "Sending an Email to Bradford Support".
STEP 2: Sending an Email to Bradford Support
----------------------------------------------------------------
Send an email requesting a new key to support@bradfordnetworks.com and
include the following information (which you retrieved in the previous
section of this procedure).
* The NAC appliance model
* MAC address of the eth0 interface on the Network Control Server(s)

STEP 3: Installing the New Key on the Network Control Server
-----------------------------------------------------------------------

When Bradford Networks emails the new key to you, follow this procedure:
(NOTE: For an HA configuration, refer to "Installing Keys in an HA
Configuration" in this solution.)
1. Open the email containing the new key.
2. Double-click the key to select it, and copy it.
3. Log into the Admin UI on the currently active Network Control Server.
4. Go to Topology view.
5. Select the product icon (e.g., Campus Manager, NAC Director), and
right-click Administration.
6. Select the License Management tab. This view manages the license keys on your servers. You can view license information and/or modify the license key for any of the servers available from this server.
7. Click Modify.
8. Select the Network Control Server.
9. In the Modify License Key section, paste the new key and click Apply.

Installing Keys In an HA Configuration
----------------------------------------------------
Follow the "Installing the New Key on the Network Control Server"
procedure described above to install the appropriate key on each of the
control servers:
1. Since campusMgr is not running on the Secondary appliance, install the key on that appliance first, and you will not have to start campusMgr on that appliance.
2. Follow the same procedure to install the key for the Primary appliance.

3. Restart campusMgr on the Primary.
++++++++++++++++++++++++++++++++++++++++++++
VALIDATE
1. Access the Admin UI and log in.
2. Verify that that you are able to use the various NAC features.

+++++++++++++++++++++++++++++++++++++++++++
KEYWORDS
key, rekey, licenses, days valid, client limit, High Availability

Version history
Revision #:
1 of 1
Last update:
‎07-07-2014 03:53 PM
 
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.