SA4500 Help Understanding Licensing

[McKenzie_]

Customer has SA4500s in Active/Passive.

Adding sa4500-add-50u, does that mean adding 50 more simultaneous users on top of current max? Can the passive one use it if it ever goes active and the primary goes passive?

Adding sa4500-cl-50u , Allow 50 users to be shared from another SA4500. How does that work if the second is passive? Do they not share licensing at all?

Does this make a total of an addtional 100 licenses?

[Kita_]

Yes, the passive device can use the 50 licenses due to the SA4500-CL-50U license.  However, with this setup, this means you have a total of 50 licenses depending on which node is active in the active/passive cluster.  If the cluster is split for two different standalone device, the SA4500-CL-50U will not apply and you will only have the default 2 user licenses.

[McKenzie_]

Just to confirm, so adding the 50 licenses to the primary with the SA4500-add-50U gives only the primary 50 additional users and the SA4500-CL-50U allows the passive to use those 50 licenses that we just added to the primary, if the secondary becomes active?

[Kita_]

Yes.  The cluster license only allows it to share the 50 licenses between the two devices.  This means you are only allowed 50 licenses for one device at a time.

[magrub_]

The passive box can use this license if something happened on the active box. But this "borrowed" license is just valid for the grace period (5 days).

Some examples:
https://www.juniper.net/techpubs/en_US/sa7.2/topics/concept/secure-access-clustering-license-informa...

[jayLaiz_]

Hi,

Download the admin guide of 7.1x code and refer page 844-847

With the licensing scheme you have :

primary : 50 + 50 user license

secondary : Allow 50 users to be shared from another SA4500

When VIP is on primary,100 users can access the box

When VIP is on secondary, only 50 users can access the box

Regards,

Jay