Overview

Overview
Overview
This chapter describes licensing for the Cisco Virtual Security Gateway for Microsoft Hyper-V, Release
5.2(1)VSG1(4.1) software.
This chapter contains the following sections:
• Information About Licenses, page 1
• Types of Licenses, page 1
• Pool of Available Licenses, page 3
• Licensing and High Availability, page 3
• License Volatility, page 4
Information About Licenses
Cisco VSG licenses are delivered in a Software License Claim Certificate by e-mail. The number of licenses
that you request depends on the number of Virtual Ethernet Modules (VEMs) and the number of CPU sockets
on each VEM that are using Cisco VSG services.
One license is needed for each installed server CPU on every VEM, and the Cisco VSG license packages are
installed and configured on the Cisco Nexus 1000V Virtual Supervisor Module (VSM).
To understand more fully the terms associated with the Cisco VSG and licensing, see Licensing Terminology
Types of Licenses
Permanent Licenses
You can purchase permanent licenses for a fixed number of VEM CPU sockets. Permanent licenses do not
expire. The number of licenses is specified in the license file that you have purchased.
When you subsequently upgrade to a new software release, all previously installed permanent licenses remain
in effect.
Cisco Virtual Security Gateway for Microsoft Hyper-V License Configuration Guide, Release 5.2(1)VSG1(4.1)
OL-29779-01
1
Overview
Default Licenses
When you purchase permanent licenses, make sure to request enough licenses to cover all of your installed
CPUs in all of your VEMs. Before licenses are applied to a VEM, enough licenses must be available to cover
all of the CPUs in that VEM. If you are lacking one CPU, then no licenses are applied to the VEM.
Note
If your license does not have the capacity to cover all CPUs in a particular VEM, then any licenses that
could have been applied to that VEM are, instead, placed into a pool of available licenses on the VSM to
be used as needed. The VEM remains unlicensed until enough licenses are available to cover all CPUs in
the VEM.
After you purchase a license package, you then install the package on your VSM. The following table displays
the license package names.
Table 1: License Package
License Package
Description
N1KV_MSFT_LAN_SERVICES_PKG
Virtual Ethernet Module (VEM)
NEXUS_VSG_MSFT_SERVICES_PKG
VEM to use Cisco VSG services
After installing permanent licenses, if your evaluation licenses are no longer used, you can remove the
evaluation license file from the pool. For more information, see, Uninstalling a License.
Default Licenses
512 Cisco VSG default licenses (NEXUS_VSG_MSFT_SERVICES_PKG ) are preinstalled on the VSM that
do not expire. These default licenses enable you to use the Cisco VSG. You need to purchase a new VSG
licenses when you upgrade to a new VSM version.
Default licenses are invalidated when one of the following occurs:
• You install a permanent license file or an evaluation license file.
Because permanent licenses invalidate default licenses, make sure that your license file has enough
capacity for all VEMs that are covered by your VSM.
Caution
The vEthernet interfaces on unlicensed VEMs cannot use Cisco VSG services. If you need additional
licenses to cover all VEM CPU sockets, then you must obtain either permanent licenses or evaluation
licenses from Cisco.com.
Evaluation Licenses
Evaluation licenses are available in packages of 512 licenses that are valid for life to enable you to evaluate
the Cisco VSG before you purchase permanent licenses. You need to install a new VSG Hyper-V license set
before you upgrade VSM to the latest version.
Cisco Virtual Security Gateway for Microsoft Hyper-V License Configuration Guide, Release 5.2(1)VSG1(4.1)
2
OL-29779-01
Overview
Overdraft Licenses
Unlike default licenses, an evaluation license is not invalidated when you install a permanent license.
Evaluation licenses expire when the license file reaches its expiration date.
Caution
If your evaluation licenses expire, your VEMs are unlicensed. The vEthernet interfaces on unlicensed
VEMs cannot use Cisco VSG services.
After installing permanent licenses, if your evaluation licenses are no longer used, you can remove them from
the pool.
Overdraft Licenses
Overdraft licenses can prevent losing Cisco VSG security services if you exceed the number of permanent or
evaluation licenses that are specified in your license file. The number of overdraft licenses provided is based
on the number of licenses that you ordered.
Pool of Available Licenses
If you have licenses that are unused, the VSM stores these licenses in a pool of available licenses. If your
license does not have the capacity to cover all CPUs in a particular VEM, then any licenses that could have
been applied to that VEM are, instead, placed into the pool to be used as needed. If a VEM is no longer using
Cisco VSG services, its licenses are returned to the pool. Before you can uninstall a license, you must first
return all licenses from their VEMs to the pool.
If any licensed VEM is offline during a renegotiation of licenses, its licenses are returned to the VSM license
pool. Once the VEM comes back online, it acquires its licenses from the VSM if any virtual machine on the
VEM has Cisco VSG service enabled.
The following events trigger a renegotiation and synchronization of licenses between the VSM and its VEMs:
• Clock change in the VSM system clock
• HA switchover
• VSM reload
• Installing a new license file
• Clearing an existing license file
During the license renegotiation process, system messages alert you if licenses are returned to the VSM pool
for a VEM that is offline. This process requires no action on your part because the licenses are returned to
the VEM as needed when it comes back online.
Licensing and High Availability
Licensing in a high-availability environment has the following configuration guidelines and limitations:
• License installation is a nondisruptive process.
• The license file is shared by both VSMs in an HA pair.
Cisco Virtual Security Gateway for Microsoft Hyper-V License Configuration Guide, Release 5.2(1)VSG1(4.1)
OL-29779-01
3
Overview
License Volatility
• If your system has dual supervisors, the licensed software runs on both supervisor modules and provides
failover protection.
• Uninstalling a license file results in a loss of Cisco VSG security service.
License Volatility
The volatile license feature automatically captures unused licenses when a VEM is taken out of service or
when there are no VMs using any Cisco VSG services on the VEM and adds them to the VSM license pool
so that they can be reused by another VEM. When you enable this feature, any time a VEM is taken out of
service, either automatically or manually, its licenses are returned to the VSM license pool.
If its licenses are nonvolatile, the VEM does not release them when you take the VEM out of service.
Note
For the Cisco VSG, the licenses are by default volatile. We recommend that you leave the Cisco VSG
license configuration to be volatile by default.
The volatile licenses feature is disabled by default for the Cisco Nexus 1000V Series Switch. That is, the
licenses in VEMs are nonvolatile and are not released when a VEM is removed from service.
Cisco Virtual Security Gateway for Microsoft Hyper-V License Configuration Guide, Release 5.2(1)VSG1(4.1)
4
OL-29779-01
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising