License

SoodarOS uses a license manager to allow users to choose their plans and use the trial version flexibly. To change the licensing, one needs to create a license request and send it to the corporation for signing. Once the signed certificate is imported, its effect is immediate.

Default license

When SoodarOS lacks a license file, it continues to work. But restrictions are applied. These restrictions are:

Drop supporting ethernets faster than 10Gigabit ethernet.
Support a maximum of 4 hardware interfaces wit accumulated capacity of 10G.
Limit VPLS interfaces count to 2.
Limit VXLAN interfaces count to 2.
Limit VLAN interfaces count to 2.
Limit IPSec profiles to 2 profiles.
Support up to 2 Access-list.
Limit access-list entries to 10 per ACL.
Support up to 2 Policy map.
NAT44 IP pool is limited to 1 pool of 1 IP address.
NAT44 static entries are limited to 2 entries.
Limit VRFs to 2 VRFs( not counting default VRF).
Limit SLA definitions to 2.
Limit Tracks to 2 each could be tracked by one item.
Wireguard interfaces is restricted to 1 instances with a maximum of 2 peers.

License key

A license key is a private key generated by SoodarOS on first boot. This key is used to generate a license request that is sent to the vendor for signing.

license key generate: Generate a new license key and license request

Note

Generating a new license key is not needed in normal cases as SoodarOS generates one on first boot.

Danger

THIS COMMAND SHOULD BE AVOIDED! Generating a new license key overwrites any existing license key and invalidates any existing license request and signed license.

License request

To import a license, an enrollment is needed. SoodarOS makes a license request on first boot. This request can be displayed on the screen or copied to a removable storage.

license request generate: Generate a new license request.

Note

Generating a new license request is not needed in normal cases as SoodarOS generates one on first boot.

Note

This command is only needed if the existing license request is lost or corrupted or needed by vendor to be done after an update.

Note

Generating a new license request overwrites any existing license request.

show license license-request: Display license request on screen.

copy system:license-request device: [force]

Copy license request file to a removable storage like a USB disk.

force: An optional parameter that forces the copy operation and replace existing files.

Note

device URI is: device:DEVNAME/[path].

Example:

soodar# ! copy license request to USB disk volume sda1 and in a file named soodar-license-request.txt
soodar# copy system:license-request device:sda1/soodar-license-request.txt

Import license

Importing a signed license is by copying from a removable storage or copy-pasting the license on the screen.

license import license terminal: Import a signed license.

copy device: license: [force]

The command is used to import a signed license file from a removable storage device like a USB disk to the device.

device: specifies the source to be a removable storage connected to the router, such as a USB drive.
force: An optional parameter that forces the copy operation and replace existing files.

Note

device URI is: device:DEVNAME/[path].

Note

license URI is: license:.

Example:

soodar# ! copy license from USB disk volume sda1
soodar# copy device:sda1/soodar-signed-license.txt license:

Show license

Checking current limits( and used quotas) is done via show license command.

show license: Show current license limits.

Note

A negative value for a resource limit means that the resource is unlimited.

Example :

n1# show license
  License found: Yes
                           Name   Limit   Used
   ----------------------------------------------
            Hardware Interfaces      16      0
       Hardware Interfaces Type       8      -
   Hardware Interfaces Capacity     8Gb    0Gb
                VPLS Interfaces       2      0
               VXLAN Interfaces       3      0
                VLAN Interfaces       2      0
                 IPSec Profiles       4      0
                     QoS Policy       2      0
                    NAT44 Pools       2      0
                 NAT44 Pool IPs      10      -
           NAT44 Static Entries      10      0
              Wireguard Tunnels       2      0
    Peers per Wireguard Tunnels       2      -
                            SLA       3      0
                          Track       3      0
                Tracked objects       3      -
                            VRF       5      0
                 Routes per VRF      10      -
                            ACL       2      0
                    ACE per ACL      10      -

   BGP Support: Available
   MPLS Support: Available
   MP-GRE Support: Available
   EIGRP Support: Available
   OSPF Support: Not available
   OSPFv3 Support: Not available
   RIP Support: Not available
   RIPng Support: Not available
   Multicast Support: Not available