topic:junos_install_trial

Ставим триальную лицензию на srx кластер

Раз в год у Juniper можно получить триальный набор всех лицензий на 1 месяц.
Лицензии на класер надо ставить на каждую ноду отдельно.

Сначала будем ставить лицензии на node0 которая является главной нодой для RG0 (там, где RE крутится).

root@srx-n0> show chassis cluster status
Monitor Failure codes:
    CS  Cold Sync monitoring        FL  Fabric Connection monitoring
    GR  GRES monitoring             HW  Hardware monitoring
    IF  Interface monitoring        IP  IP monitoring
    LB  Loopback monitoring         MB  Mbuf monitoring
    NH  Nexthop monitoring          NP  NPC monitoring            
    SP  SPU monitoring              SM  Schedule monitoring
    CF  Config Sync monitoring

Cluster ID: 3
Node   Priority Status         Preempt Manual   Monitor-failures

Redundancy group: 0 , Failover count: 3
node0  100      primary        no      no       None          
node1  1        secondary      no      no       None          

Redundancy group: 1 , Failover count: 1
node0  100      primary        no      no       None          
node1  0        secondary      no      no       IF

Запрашиваем лицензии.

{primary:node0}
root@srx-n0> request system license update trial

Trying to update trial license keys from https://ae1.juniper.net, use 'show system license' to check status.

Смотрим лицензии.

{primary:node0}
root@srx-n0> show system license    
License usage: 
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed 
  av_key_kaspersky_engine               0            1           0    2015-09-26 03:00:00 GMT-3
  anti_spam_key_sbl                     0            1           0    2015-09-26 03:00:00 GMT-3
  wf_key_surfcontrol_cpa                0            1           0    2015-09-26 03:00:00 GMT-3
  idp-sig                               0            1           0    2015-09-26 03:00:00 GMT-3
  dynamic-vpn                           0            2           0    permanent
  ax411-wlan-ap                         0            2           0    permanent
  appid-sig                             0            1           0    2015-09-26 03:00:00 GMT-3
  av_key_sophos_engine                  0            1           0    2015-09-26 03:00:00 GMT-3
  wf_key_websense_ewf                   0            1           0    2015-09-26 03:00:00 GMT-3

Licenses installed: 
....

Все хорошо, лицензии на node0 встали.

Руками переключаемся на node1.

{primary:node0}
root@srx-n0> request chassis cluster failover redundancy-group 0 node 1 
node1:
--------------------------------------------------------------------------
Initiated manual failover for redundancy group 0

Переключилось.

root@srx-n1> show chassis cluster status      
Monitor Failure codes:
    CS  Cold Sync monitoring        FL  Fabric Connection monitoring
    GR  GRES monitoring             HW  Hardware monitoring
    IF  Interface monitoring        IP  IP monitoring
    LB  Loopback monitoring         MB  Mbuf monitoring
    NH  Nexthop monitoring          NP  NPC monitoring              
    SP  SPU monitoring              SM  Schedule monitoring
    CF  Config Sync monitoring
 
Cluster ID: 3
Node   Priority Status         Preempt Manual   Monitor-failures

Redundancy group: 0 , Failover count: 1
node0  100      secondary      no      yes      None           
node1  255      primary        no      yes      None           

Redundancy group: 1 , Failover count: 0
node0  100      primary        no      no       None           
node1  0        secondary      no      no       IF

Запрашивем лицензии для node1.

{primary:node1}
root@srx-n1> request system license update trial 
Trying to update trial license keys from https://ae1.juniper.net, use 'show system license' to check status.

Все загрузилось.

{primary:node1}
root@msk-02-srx3-n1> show system license                    
License usage: 
                                 Licenses     Licenses    Licenses    Expiry
  Feature name                       used    installed      needed 
  av_key_kaspersky_engine               0            1           0    2015-09-26 03:00:00 GMT-3
  anti_spam_key_sbl                     0            1           0    2015-09-26 03:00:00 GMT-3
  wf_key_surfcontrol_cpa                0            1           0    2015-09-26 03:00:00 GMT-3
  idp-sig                               0            1           0    2015-09-26 03:00:00 GMT-3
  dynamic-vpn                           0            2           0    permanent
  ax411-wlan-ap                         0            2           0    permanent
  appid-sig                             0            1           0    2015-09-26 03:00:00 GMT-3
  av_key_sophos_engine                  0            1           0    2015-09-26 03:00:00 GMT-3
  wf_key_websense_ewf                   0            1           0    2015-09-26 03:00:00 GMT-3

Licenses installed: 
...

Все, лицензии встали на обе ноды.

juniper