Using VPN to get license from License Server

Technical Note 88251

Targets:
All

Component:
Licensing

Updated:
9/7/2015 4:17 PM

Introduction

There is no license fetched over the VPN connection.

Applies to

This Technical Note applies to IAR System products that uses License Management System version 2 (LMS2).

Disclaimer(s)

  • IAR doesn't support the VPN connection itself, that is, when it comes to problems using/setting up VPN involve the IT Department and/or the VPN provider.
  • Present versions will accept VPN connections.
  • Please note that fetching a licenses over VPN must comply to the terms in the Software License Agreement for IAR Embedded Workbench.
  • Older versions of IAR products (using License Management System version 1 (LMS1)) will NOT accept to fetch a license using VPN connections.

Possible actions

Having all the above said, these are some generic suggestions on troubleshooting VPN that we have obtained from various customer IT departments:

  • Check that the port UDP 5093 is open all the way from the Client Computer through VPN, firewall(s), router(s) etc. to the License Server Computer. 
  • Ask the VPN expert at the IT department to examine size of the VPN packets - IAR Systems has seen cases where the VPN packet, that reaches the Client Computer is truncated, and thus the license isn't valid.
    • The VPN expert can try to reduce the MTU size on the server.
    • An MTU size of 1359 (on the server computer) made one VPN connection to work.
    • The VPN expert can try to make an VPN-rule to "enable fragmented packages"...
    • ...and also make a Firewall-rule to "enable fragmented packages".
  • Regarding MTU sizes, a suggested test procedure we received is the following. Note that this information is provided "as is" - we cannot provide any support on the procedure below.
ping <server ip address> -f -l 1244
    1. The ping command above is a test to determine highest MTU Setting
      from the client to server before packet fragmentation occurs.

      If ping result responds normally increase MTU value above.

      If ping result fails with "Packet needs to be fragmented but DF Set" decrease
      the MTU value above. Once the highest MTU value before fragmentation is found make
      note of that number and proceed to step 2.

    2. RDP into License Server with Admin rights.
      Apply Method 1 & 3 from this Microsoft Support link.
      In Method #3 apply the MTU Value that was determined above.

    3. Reboot the server
  • If the VPN connection can't be established - Then you may consider the use of a commuting license. See chapter Checking out a product for commuter authorization in:
<installation directory>\common\doc\EW_LicensingGuide_LMS2.ENU.pdf

 

Applies to versions

This Technical Note applies if using one of the following product(s), with the mentioned versions (or later).

Product Version Product Version Product Version Product Version
8051 8.11 V850 3.81 RL78 1.20 RX 2.40
430 5.51 R32C 1.40 78K 4.80 ARM 6.50
AVR 6.20 STM8 1.40 RH850 1.10 CR16C 3.20
M16C 3.60 AVR32 4.20 SH 2.30 visualSTATE 7.2
HCS12 4.10            

All product names are trademarks or registered trademarks of their respective owners.

Related Tech Notes

© IAR Systems 1995-2017 - All rights reserved.