由于申请License时没有使用备用主控板的ESN导致License文件不能激活

发布时间:  2014-09-20 浏览次数:  634 下载次数:  0
问题描述
激活License后,通过display license命令,显示license信息如下:
HRP_M<USG9000> display license  
MainBoard:  
Device ESN is: 210305G06U10D7000035         
The file activated is: cfcard:/license_usg-x.dat
The time when activated is: 2014/04/25  11:02:28
Number of VPN Tunnels-R: 1000000
Number of Virtual Systems: 4095
GTP: Enable
6RD Session Scale: 1280M
NAT64 Session Scale: 1280M
DS-Lite Session Scale: 1280M
Firewall Upgrade Additional Performance: 1280Gbps
Expiration Date of The IPS Update Service: 2015-02-19     
SlaveBoard:       
Device ESN is: 210305G06U10D7000033    
License file is not activated, please use default configuration! 

通过显示信息,发现防火墙备用主控板license没有激活。
处理过程
1. 向华为公司license中心申请license,使用如下两个ESN编码:
210305G06U10D7000035和210305G06U10D7000033
2. 将申请到的license.dat上传到防火墙的主用主控板和备用主控板。
3. 在防火墙上激活新申请的license-xxxxxxxx.dat文件。
系统视图下使用命令license file license-xxxxxxxx.dat,激活新申请的license.dat文件。
根因
1. 查看防火墙ESN信息,确认主控板ESN编码。
HRP_M<USG9000> display esn  
Service ESN: 210235G6QE10D7000016
License ESN: 210305G06U10D7000035,210305G06U10D7000033
Slot-Pic  Type                             S/N                           P/N                 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1         LPU                           210305G07410D7000053          0305G074            
1 -0      LAN_WAN_2X10G_N_CARD     210305G07510D8000008          0305G075            
1 -1      LAN_WAN_2X10G_N_CARD     210305G07510D8000014          0305G075            
2         LPU                           210305G07410D7000054          0305G074            
2 -0      LAN_WAN_2X10G_N_CARD     210305G07510D8000010          0305G075            
2 -1      LAN_WAN_2X10G_N_CARD     210305G07510D8000015          0305G075            
4         LPU                           210305G05110D8000008          0305G051            
4 -0      ETH_12XGF_CARD              210305G05310D7000023          0305G053            
7         SPU                           210305G09Q10D7000030          0305G09Q            
7 -1      SPU_CARD_TYPE_SPCB          02G36N10D6000160              0302G36N            
17        MPU                          210305G06U10D7000035          0305G06U            
18        MPU                          210305G06U10D7000033          0305G06U            
19        SFU                           210305G08Q10D7000069          0305G08Q            
20        SFU                           210305G08Q10D7000065          0305G08Q            
21        SFU                           210305G08Q10D7000067          0305G08Q            
22        SFU                           210305G08Q10D7000066          0305G08Q            
/         BackPlane                      210235G6QE10D7000016          0235G6QE 

2. 查看license信息确认ESN编码,并确认license.dat文件名称。
HRP_M<USG9000> display license
MainBoard:  
Device ESN is: 210305G06U10D7000035         
The file activated is: cfcard:/license_usg-x.dat
The time when activated is: 2014/04/25  11:02:28
Number of VPN Tunnels-R: 1000000
Number of Virtual Systems: 4095
GTP: Enable
6RD Session Scale: 1280M
NAT64 Session Scale: 1280M
DS-Lite Session Scale: 1280M
Firewall Upgrade Additional Performance: 1280Gbps
Expiration Date of The IPS Update Service: 2015-02-19     
SlaveBoard:       
Device ESN is: 210305G06U10D7000033    
License file is not activated, please use default configuration! 

3. 查看主用主控板和备用主控板的cfcard中是否都存在license.dat文件
主用主控板:
HRP_M<USG9000> dir
Directory of cfcard:/

  Idx  Attr     Size(Byte)  Date        Time(LMT)  FileName 
    0  -rw-    255,176,245  Dec 16 2013 12:19:46   e8000e_v3r1c01spc100.cc
    1  -rw-        106,479  Jul 31 2013 11:28:40   paf.txt
    2  -rw-         15,222  Jul 31 2013 11:29:04   license_huawei_x.txt
    3  -rw-         14,268  Jul 31 2013 11:56:50   $_patchstate_reboot
    4  -rw-         69,680  Jul 31 2013 11:44:58   linuxpatchstate.dat
    5  -rw-        525,782  Dec 27 2013 04:15:20   private-data.txt
    6  -rw-          6,419  May 14 2014 02:43:18   vrpcfg.zip
    7  -rw-              0  Jul 31 2013 11:37:30   sa_lu_last_type_file.txt
    8  -rw-        109,049  Dec 16 2013 12:35:48   paf_spcxxx.txt
    9  -rw-         59,952  Dec 16 2013 14:14:50   console_info_record.txt
   10  -rw-         15,307  Dec 16 2013 12:42:30   license_spcxxx.txt
   11  -rw-          5,120  May 14 2014 02:43:18   bcf.txt
   12  -rw-              0  Dec 16 2013 14:18:58   ips_last_type_file.txt
   13  -rw-        249,551  Dec 16 2013 14:18:58   license_usg-x.dat

备用主控板:
HRP_M<USG9000> dir
Directory of slave#cfcard:/
  Idx  Attr     Size(Byte)  Date        Time(LMT)  FileName 
    0  -rw-    255,176,245  Dec 16 2013 12:19:46   e8000e_v3r1c01spc100.cc
    1  -rw-        106,479  Jul 31 2013 11:28:40   paf.txt
    2  -rw-         15,222  Jul 31 2013 11:29:04   license_huawei_x.txt
    3  -rw-         14,268  Jul 31 2013 11:56:50   $_patchstate_reboot
    4  -rw-         69,680  Jul 31 2013 11:44:58   linuxpatchstate.dat
    5  -rw-        525,782  Dec 27 2013 04:15:20   private-data.txt
    6  -rw-          6,419  May 14 2014 02:43:18   vrpcfg.zip
    7  -rw-              0  Jul 31 2013 11:37:30   sa_lu_last_type_file.txt
    8  -rw-        109,049  Dec 16 2013 12:35:48   paf_spcxxx.txt
    9  -rw-         59,952  Dec 16 2013 14:14:50   console_info_record.txt
   10  -rw-         15,307  Dec 16 2013 12:42:30   license_spcxxx.txt
   11  -rw-          5,120  May 14 2014 02:43:18   bcf.txt
   12  -rw-              0  Dec 16 2013 14:18:58   ips_last_type_file.txt
   13  -rw-        249,551  Dec 16 2013 14:18:58   license_usg-x.dat


4. 查看license.dat的内容
HRP_M<USG9000> more cfcard:/license_usg-x.dat
Huawei Technologies Co., Ltd.
All rights reserved.

LicenseSerialNo=LIC20140218001610
Creator=Huawei Technologies Co., Ltd.
CreatedTime=2014-02-19 11:50:39

Country=China
Customer=R&D of Huawei Technologies Co., Ltd.
Office=Shenzhen
Sign=50D9326C2F4858CFFD2127BF38E082859C713B2770D1E3C6CDB6F814AD12F6A54CDB14508E997F52706FAA4A3FEA3C06A60EF5FED35BDA5FD7EC97113B1C47460EBE3B88ACE7307A1D3FAE2DAA3060F3EB642DB86EDA9114C82F8A1CC76C0CD002B36726ACFF818B5E605E97D52DA98CBC5635BD365AB7A5FE23B4F183F20C97DA9E6311A336F15CFEC07EFDBB17C276820F474941CB3F8A7B5158D95A07D449E45EC0CB31F03BE2CA3F36F88EADEE0F9E403D648234DB50F51F71DB63DAB6B1933CE1993C58A1B0627738F78530D2D18713BA21208A6AD838FD841AFB0920335F63294A36BACD4FC7D7D61FF29871A0ECE9D6F6C5173770DF0152E3551918F5

Product=USG9500
Feature=Service
Esn="210305G06U10D7000035"
Attrib="DEMO,NULL,NULL,NULL,NULL,NULL"
Version=V300R001
Libver=1.0
Sign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

从license.dat的内容分析,文件中只包含了主用主控板的ESN号,没有包含备用主控板的ESN号,因此需要重新申请license.dat文件后在再上传到防火墙激活。
建议与总结
在双主控的环境下,申请license时,需要使用主备两个主控板的ESN号来申请license.dat文件。

END