VPN License

[antonyso88]

My situation is i am running Nokia IP390 in VRRP while the smartcenter is a unix box.

I got below license on the nokia and smartcenter

nokia
firewall 1: CPFW-FM-U-NGX CPMP-PPK-1-NGX
firewall 2: CPFW-FM-U-NGX CPMP-PPK-1-NGX

smartcenter:
CPMP-HA-MGMT-NGX
CPMP-ESC-U-3DES-NGX CPMP-DBVR-U-NGX CPMP-CXL-HA-U-NGX (Type local)

I got below message in my Nokia box

VPN-1: ERROR: No license for encryption, disabling encryption features

What does this mean? It can't running VPN feature? But i can choose config and install the VPN config.

[Thorpuse]

That's correct - the license keys for your gateways do not have encryption - contact your friendly sales guy to price up an upgrade to a UTM or Power license...

[antonyso88]

Is it really no license? As i know now all the license is kept on the smartcenter, why the smartcenter host the encryption license?

[Thorpuse]

This goes back into the history of the Products, when the VPN-1 Product was an add-on to the original Firewall-1 product. Unfortunately for you, the products you have are actually Firewall-1 licenses, not VPN-1 licenses. The VPN licensing was/is done on the Gateways, not the management, so while your management can install VPN policies, you don't have a VPN-1 licensed product you can install this to.

Once upon a time, they used to convert these products to VPN-1. Nowadays, you'll need to get a functionality upgrade to the NGX series of products to make this work.

Good luck!

[antonyso88]

Thanks for your reply. But it's really a bad news for me as i need to use the VPN in this week. May be i need to get a EVAL license first.