RE: [FW1] Problem with licenses

[Steven Schuster]

Title: RE: [FW1] Problem with licenses

On a command line, do a 'fw lichosts' and that will tell you what IP addresses the firewall is seeing and counting against the license.  Keep in mind that if you have a full class C in DHCP, then all of the addresses that get assigned would be counted against the license.  If you run that command and see external addresses, make sure you have the name of your external interface in your $FWDIR/conf/external.if.

 

One last thing, If you have printers or other devices, they will also count against your license (they can send out broadcast messages seen by the firewall....)

 

 

Steve Schuster, CCSE, CCNA
Midwest ISO
Security Analyst

-----Original Message-----
From: Philippe Andries [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 07, 2000 9:07 AM
To: 'Mike Glassman - Admin'
Cc: 'fw-1 listserv'
Subject: RE: [FW1] Problem with licenses

Mike,

Thank you, but I should have stated my question differently.
We have a licence for 100 nodes, and I am aware of about 80 existing ones.  The 20 and more left should not be there.  So I would like to find out where those IP came from.

The file could be a good place to find out.
Anyone knows anything about it?

Thanks again Mike,

Philippe

-----Original Message-----
From: Mike Glassman - Admin [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 07, 2000 3:05 PM
To: 'Philippe Andries'
Cc: 'fw-1 listserv'
Subject: RE: [FW1] Problem with licenses

Philippe,

This message is simply stating that it has detected more IP addresses on
your internal network then it is licensed for.

It doesn't really matter how many it's detected, fact of the matter is that
there are more then the license can handle. I am not sure (don't remember),
but I do think theres a file somewhere which holds a list of all IP's
detected in the Internal net. Maybe somone else can help with that.

The way it works is :

You get a license for say 25.

This means, the firewall will accept 25 IP addresses.

If you have 26 IP addresses on your internal net, even if only 25 are
actually accessing the FW in some way, the FW KNOWS about the additional IP
and tells you.

Mike

> -----Original Message-----
> From:Philippe Andries [SMTP:[EMAIL PROTECTED]]
> Sent:� ����� 07 2000 15:24
> To:   [EMAIL PROTECTED]
> Subject:      [FW1] Problem with licenses
>
> Hi all,
> 
> I got a message from my Firewall telling me that he has detected too many
> internal host.
> Is there a way to find the number of host he is talking about?
> Or better to have the IP address of these hosts?
> 
> Thanks in advance for your help,
> Philippe Andries
>
>       Information Technology
>       Capital @ Work SA
>       http://WWW.Capitalatwork.be <http://www.capitalatwork.be/>
>       Tel.:+322 663 4896
>
>