- play_arrow Getting Started with Juniper Licenses
- Juniper Licenses
- play_arrow Junos Product Licenses
- ACX Series Licensing Lifecycle
- cRPD Licensing Lifecycle
- cSRX Licensing Lifecycle
- EX Series Switches Licensing Lifecycle
- Juniper Secure Connect Licensing Lifecycle
- MX Series Routers and MPC Service Cards Licensing Lifecycle
- NFX Series Licensing Lifecycle
- PTX Series Routers Licensing Lifecycle
- QFX Series Switches Licensing Lifecycle
- SRX Series Firewall Licensing Lifecycle
- vSRX Virtual Firewall Licensing Lifecycle
- play_arrow Cloud and Networking Management Licenses
- play_arrow Data Center Licenses
- play_arrow Subscriber Services Licenses
- play_arrow Juniper Software Licenses
- Licenses for Juniper Software
- Software Licenses for ACX Series
- Software Licenses for ATP Appliance
- Software Licenses for ATP Cloud
- Software Licenses for Contrail Service Orchestration
- Software Licenses for cRPD
- Software Licenses for cSRX
- Software Licenses for EX Series Switches
- Software Licenses for Juniper Apstra
- Software Licenses for Juniper Coherent Optics
- Software Licenses for Juniper Secure Connect
- Software Licenses for Juniper Security Director Cloud
- Software Licenses for Junos Space Security Director
- Software Licenses for MX Series Routers and MPC Service Cards
- Software Licenses for NFX Series
- Software Licenses for Northstar Controller
- Software Licenses for Northstar Planner
- Software Licenses for Paragon Automation
- Software Licenses for Paragon Insights
- Software Licenses for PTX Series Routers
- Software Licenses for QFX Series Switches
- Software Licenses for SRX Series Firewalls
- Software Licenses for Subscriber Services
- Software Licenses for vSRX Virtual Firewall
Product-Specific Licensing Tasks
Learn how to complete licensing related tasks on specific products.
Viewing Licenses with Network Director
To view the license for a Juniper Networks device on your network:
Select the Build icon in the Network Director banner.
In the View pane, select wired device.
In the Tasks pane, select View License Information.
Table 1: Viewing Licenses with Network Director Field
Description
Feature Name
Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this.
License Count
Number of times an item has been licensed. This value can have contributions from more than one licensed SKU or feature. Alternatively, it can be 1, no matter how many times it has been licensed.
Used Count
Number of times the feature is used. For some types of licenses, the license count will be 1, no matter how many times it is used. For capacity-based licensable items, if infringement is supported, the license count can exceed the given count, which has a corresponding effect on the need count.
Need Count
Number of times the feature is used without a license. Not all devices can provide this information.
Given Count
Number of instances of the feature that are provided by default.
If a device does not have a license, a blank page is displayed with the message,
No license is installed on this device.If you are sure the device has a license, try resynchronizing the device before displaying the license again.Optionally, expand the license information by feature name to view the feature SKU information.
Table 2: Additional Licensing Information Field
Description
Validity Type
Validity type can be Databased (license expires on end date), Permanent, Countdown (license expires when time remaining is zero), or Trial. If the validity type is either Databased or Countdown, more information is displayed—License Name, License Version, License State, and Time Remaining. Additional information can be added in the details grid based on the SKU type (SKU or Feature)—Start Date, End Date, or Original Time Allowed.
License Name
If the validity type is either Databased or Countdown, the identifier associated with a license key is displayed.
License Version
If the validity type is either Databased or Countdown, the version of a license is displayed. The version indicates how the license is validated, the type of signature, and the signer of the license key.
License State
If the validity type is either Databased or Countdown, the state of the license is displayed—Valid, Invalid, or Expired.
Time Remaining
If the validity type is either Databased or Countdown, the remaining time left on the license is displayed. For a trial license, the number of days remaining after you installed the device is displayed. For a commercial license, the time remaining is unlimited.
Start Date
Based on the SKU type, the start date of the license can be displayed in the details grid.
End Date
Based on the SKU type, the end date of the license can be displayed in the details grid.
Original Time Allowed
Based on the SKU type, the original license timeframe can be displayed here.
Install VCF Software Licenses
To install a VCF software license:
Purchase two VCF software license keys (QFX-VCF-LIC) from your Juniper Networks sales representative.
The sales representative will provide you with the feature license files and license keys. You will be asked to supply the chassis serial number of your switch; you can obtain the serial number by issuing the
show virtual-chassiscommand.Install the first software license on one device in the VCF (for example, the device acting in the primary role):
content_copy zoom_out_mapuser@device> request system license add (filename | url)
Install the second software license on a second device in the VCF (for example, the device acting in the backup role):
content_copy zoom_out_mapuser@device> request system license add (filename | url)
Junos Space License Installation
Junos Space Network Management Platform comes with a 60-day full-featured trial license. You must procure and install a valid license during this period to ensure continued operation beyond the trial period.
If you fail to upload a valid license during the 60-day trial period, the Junos Space user interface displays an error message when you log in indicating that the license has expired. Your access is limited to the Licenses page (Administration > Licenses) from where you can execute the Import License task to enter a valid license.
For Junos Space Platform licensing details, see Generating and Uploading the Junos Space License Key File and Viewing Junos Space Licenses.
You can use either of the following options to install a valid license for Junos Space Platform:
If you plan to use the Junos Space Platform with only the Support Automation applications (Service Now and Service Insight), you can navigate to the Add Organization page (Service Now > Administration > Organizations > Add Organization) in the Service Now user interface to activate these applications. However, to activate these applications, you must have a valid support contract for your Juniper Networks devices and valid credentials to access the Juniper Support System (JSS) back end.
If you choose this option and if you want to use other Junos Space applications beyond the trial period, you must purchase a license for Junos Space Platform (as explained in the bulleted item that follows).
If you want to use Junos Space applications other than Service Now and Service Insight, or if you do not have a valid support contract for your Juniper Networks devices, you must purchase a license for Junos Space Platform. After you obtain the license file, you can install the license from the Import License page (Administration > Licenses > Import License). For more information about installing a valid license for Junos Space Platform, see the Generating and Uploading the Junos Space License Key File topic (in the Junos Space Network Management Platform Workspaces Feature Guide).
Exporting the License Inventory
The Device License Inventory feature enables you to display the currently installed license inventory information for all DMI schema-based devices under Junos Space Network Management Platform management.
The license inventory is generated when the device is first discovered and synchronized in Junos Space Network Management Platform.
The licenses used by all Juniper Networks devices are based on SKUs, which represent lists of features. Each license includes a list of features that the license enables and information about those features. Sometimes the license information also includes the inventory keys of hardware or software elements upon which the license can be installed.
To view the license(s) for Junos Space Network Management Platform itself, see Viewing Junos Space Licenses.
This topic also covers:
Absence of license
Trial information
Count-down information
Date-based information
DMI enables each device family to maintain its own license catalog in the DMI Update Repository. The license catalog is a flat list of all the licenses used by a device family. The key for a license element is its SKU name. Each license element in the catalog includes a list of features that the license enables and information about each feature (that is, its name and value). Optionally, the license element can also list the inventory keys of hardware or software elements and where it can be installed.
If the license inventory on the device is changed, the result depends on whether the network is the system of record or Junos Space Network Management Platform is the system of record. See Systems of Record in Junos Space Overview.
If the network is a system of record, Junos Space Network Management Platform automatically synchronizes with the managed device. You can also manually resynchronize the Junos Space Network Management Platform license database with the device by using the Resynchronize with Network action. See Resynchronizing Managed Devices with the Network.
If Junos Space Network Management Platform is the system of record, neither automatic nor manual resynchronization is available.
Viewing device license inventory does not include pushing license keys to devices. You can, however, push licenses with the Configuration Editor to any device that has license keys in its configuration. You can export device license inventory information to a CSV file for use in other applications.
License inventory information shows individually installed licenses as well as a license usage summary, with statistics for various features.
To export the license inventory for a device:
On the Network Management Platform user interface, select Devices > Device Management.
The Device Management page displays the devices managed in Junos Space Network Management Platform.
Select Device Inventory > View License Inventory from the Actions menu.
Need Counts in red indicate violations. In other words, entries in red indicate that you are using features that you are not licensed to use. You may also encounter the message that you have no licenses installed.
(Optional) View the list of licensed features for the selected license by double-clicking a license usage summary or clicking on the forward action icon to the left of a license usage summary.
(Optional) Click Return to Inventory View at the top of the inventory page.
(Optional) Click Export at the top of the inventory page, to export the license inventory information.
The Export Device License Information dialog box appears, displaying a link: Download license file for selected device (CSV format).
(Optional) Click the download link.
The Opening Device License-xxxxxxCSV dialog box appears, where xxxxxx represents a number.
Open the file with an application of your choice or download the file by clicking Save.
Exporting device license information generates an audit log entry.
Field | Description |
|---|---|
Feature name | Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this. |
License count | Number of times an item has been licensed. This value may have contributions from more than one licensed SKU or feature. Alternatively, it may be 1, no matter how many times it has been licensed. |
Used count | Number of times the feature is used. For some types of licenses, the license count will be 1, no matter how many times it is used. For capacity-based licensable items, if infringement is supported, the license count may exceed the given count, which has a corresponding effect on the need count. |
Need count | Number of times the feature is used without a license. Not all devices can provide this information. |
Given count | Number of instances of the feature that are provided by default. |
Field | Description |
|---|---|
Feature Name | Name of the licensed SKU or feature. It can be used to look up the license with Juniper Networks. Not all devices support this. |
Validity Type | The SKU or feature is considered permanent if it is not trial, count-down, or data-based. |
Field | Description |
|---|---|
State | Status of the license: valid, invalid, or expired. Only licenses marked as valid are considered when calculating the license count. |
Version | Version of the license. |
Type | Permanent, trial, and so on. |
Start Date | Licensed feature starting date. |
End Date | Licensed feature ending date. |
Time Remaining | Licensed feature time remaining. |
Juniper Connected Security for VMware NSX Licensing
VMware NSX is VMware’s network virtualization platform for the Software Defined Data Center (SDDC). You can add the vSRX Virtual Firewall Virtual Services Gateway as a partner security service in the VMware NSX environment. The vSRX Virtual Firewall security service is managed by the Junos Space Security Director and VMware NSX Manager to deliver a complete and integrated virtual security solution for your SDDC environment. The vSRX Virtual Firewall provides advanced security services (Layer 7 services), including intrusion detection and prevention (IDP), and application control and visibility services through AppSecure.
The Juniper Connected Security for VMware NSX licensing includes support for Juniper’s virtual firewall (vSRX Virtual Firewall), Network Security services (AppSecure, IDP) and the Juniper Connected Security and Security Management solutions (Policy Enforcer and Security Director) for VMware NSX-based private cloud advanced security.
Juniper Connected Security for VMware NSX Advanced Security Licenses
The Juniper Connected Security for NSX Advanced Security (ADS) licenses that are available from Juniper Networks provide entitlement for protection of one physical CPU socket, with one vSRX Virtual Firewall instance key provided for each license. Typically, a VMware ESXi server has multiple CPU sockets, and each CPU socket has multiple cores.
All Juniper Connected Security for NSX ADS licenses have an associated time duration; you purchase licenses as subscription based for a 1-year, 3-year, or 5-year duration.
A Juniper Connected Security for NSX ADS license cannot be purchased as a perpetual (never expire) license. Each license is only available on a subscription basis.
Each license includes support for the following:
Juniper vSRX Virtual Firewall Series Virtual Services Gateway, including:
Stateful L3-L4 firewall
Advanced Application Security (ASEC) features (such as AppID, AppFW, AppQoS, and AppTrack)
Intrusion Detection and Prevention (IDP)
Juniper Security Management solutions, including:
Junos Space Security Director
Juniper Connected Security Policy Enforcer
The licenses available in the Juniper Connected Security for VMware NSX ADS licensing model are based on SKUs which represent the terms of subscription and the supported features.
License Model Number | Description |
|---|---|
JNSX-ADS-1-1Y | Juniper Connected Security for NSX Advanced Security with vSRX Virtual Firewall for 1 physical CPU socket - 1 Year Subscription The 1-year subscription license includes support for Security Director, Policy Enforcer, 1 vSRX Virtual Firewall entitlement for 1 physical CPU socket protection with AppSecure and IDP feature support |
JNSX-ADS-1-3Y | Juniper Connected Security for NSX Advanced Security with vSRX Virtual Firewall for 1 physical CPU socket - 3-year Subscription The 3-year subscription license includes support for Security Director, Policy Enforcer, 1 vSRX Virtual Firewall entitlement for 1 physical CPU socket protection with AppSecure and IDP feature support |
JNSX-ADS-1-5Y | Juniper Connected Security for NSX Advanced Security with vSRX Virtual Firewall for 1 physical CPU socket - 5 Year Subscription The 5-year subscription license includes support for Security Director, Policy Enforcer, 1 vSRX Virtual Firewall entitlement for 1 physical CPU socket protection with AppSecure and IDP feature support |
License Duration
The Juniper Connected Security for NSX ADS license model is subscription based. A subscription license is an annual license that allows you to use the licensed software for the matching duration. Subscriptions might involve periodic downloads of content (such as for IDP threat signature files). At the end of the license period, you need to renew the license to continue using it.
Subscription licenses start when you retrieve the license key or 30 days after purchase if you have not retrieved the license key. All subscription licenses are renewable.
License Procurement and Installation
To enable a Juniper Connected Security for NSX ADS license, you must purchase, install, and manage the license key that corresponds to the specific terms of each license. The presence of the appropriate software unlocking key on your virtual instance allows you to configure and use that license.
Licenses are usually ordered when the software application is purchased, and this information is bound to a customer ID. If you did not order the licenses when you purchased your software application, contact your account team or Juniper Networks Customer Care for assistance. Licenses can be procured from the Juniper Networks License Management System (LMS).
From the Junos Space Security Director, you discover the NSX Manager and perform service registration of the vSRX Virtual Firewall VM with the NSX Manager. The NSX Manager is added as a device in Security Director and its inventory is synchronized with Security Director. Discovering the NSX Manager and registering vSRX Virtual Firewall as a security service in Security Director are described in detail in Deploying the vSRX as an Advanced Security Service in a VMware NSX Environment.
As part of the service registration procedure, in the Service Manager Registration section of the Add NSX Manager page, you enter the license key.
