This message was deleted.
# citrix-netscalers
Slackbot
03/09/2023, 2:08 PMThis message was deleted.
k
Kari Ruissalo (WyW)
03/09/2023, 2:58 PMyou should not see that error, have you configured both of the nodes separately for licensing and allocated licenses?
j
Jeffrey de Leeuw
03/09/2023, 3:58 PMHi Kari, Yes I have configured them both. if I look at the licensing tab on the secondairy node, its greyed out also.
c
CTXMike
03/09/2023, 10:07 PMIf your licensing configuration is totally grayed out on the secondary VPX then honestly you might have bigger problems. I'd break HA and start again with a totally fresh VPX - setup the date/time, NSIP configuration and licensing first then join it to HA.
CTXMike
03/09/2023, 10:08 PMYou can revoke the assigned licenses from the problematic box from either the VPX or ADM itself.
m
Marion
03/10/2023, 8:55 AMmaybe a stupid question but could it be that the secondary is unable to reach the license server? If this is a HA Pair not in the "independent Network Configuration Mode" I guess this could happen.
j
Jeffrey de Leeuw
03/10/2023, 9:57 AMHi Marion, that was I was thinking of, but I am not sure. Because working with this license type is new for me also.
m
Marion
03/10/2023, 9:58 AMSame for me, but I think it need to reboot (warm at least) do query the license server again. But I am not totally sure.
j
Jeffrey de Leeuw
03/10/2023, 10:00 AMNo unfortunately thats not working. Even if I switch nodes, the other node will be secondairy with the same behavior
k
Kari Ruissalo (WyW)
03/10/2023, 10:03 AMFirewall passes traffic only using snip, but not with nsip?
Kari Ruissalo (WyW)
03/10/2023, 10:08 AMAlthough it should always use the NSIP
Kari Ruissalo (WyW)
03/10/2023, 10:09 AMNot sure how it behaves if you have snip in mgmt network
j
Jeffrey de Leeuw
03/10/2023, 10:12 AMBasically licensing traffic will always go over the NSIP. I have no snip configured for this management VLAN.
Jeffrey de Leeuw
03/10/2023, 11:13 AMI must make a correction. The licensing module on the secondairy node is visible though. But there I will see that the license server is not reachable. So is it true that because the secondairy node is not using his snip for the licensing traffic because the snip is active on the primaire node?
And should that be the reason why the sec node is running in Grace?
k
Kari Ruissalo (WyW)
03/10/2023, 11:22 AMYou've done everything according to Docs (https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/license-server/adc-virtual-cpu-licensing.html)
Kari Ruissalo (WyW)
03/10/2023, 11:22 AMKari Ruissalo (WyW)
03/10/2023, 11:23 AM"27000 and 7279 TCP License ports for communication between Citrix ADM license server and ADC instance. These ports are also used for ADC pooled licenses."
Kari Ruissalo (WyW)
03/10/2023, 11:23 AMvCPU lics are considered as pooled afaik
m
Marion
03/10/2023, 11:24 AMmaybe a ns trace? then we should know at least if the connection to the license server is successful and with the ssl master keys we might get a hint if it is successful what else could be wrong
j
Jeffrey de Leeuw
03/10/2023, 12:03 PMThe connection is fine, if I switch from one to another then the behavior switched to the other node.
k
Kari Ruissalo (WyW)
03/10/2023, 1:40 PMmy guess is that the licensing traffic flows for some reason via snip
Kari Ruissalo (WyW)
03/10/2023, 1:41 PMyou can go to shell (ssh to cli and run the shell -command) and then see what the nstrace shows for the licensing ports:
nstcpdump.sh port 27000 or port 7279Kari Ruissalo (WyW)
03/10/2023, 1:41 PMjust put that one running and toy around with the license thingy in GUI and you should see some traffic
👍 1
j
Jeffrey de Leeuw
03/10/2023, 2:39 PMThe licensing traffic should be travel over the SNIP for that specific VLAN? I have configured the VLANs like they are following the path through the proper NIC and SNIP
k
Kari Ruissalo (WyW)
03/10/2023, 2:42 PMyou might need a policy-based route for the licensing traffic that would enforce the traffic to flow via the management IP
Kari Ruissalo (WyW)
03/10/2023, 2:42 PMbecause snip is active only on the active node
j
Jeffrey de Leeuw
03/10/2023, 2:43 PMGood one, let me try that one
Jeffrey de Leeuw
03/10/2023, 3:53 PMThat did the trick @Kari Ruissalo (WyW)!
Many thanks to all of you!
Enjoy your weekend!
👍 1
9 Views