Cyclone / CloudWorx licenses - Floating licenses via internet and VPN, specify ports to be used

Description:

The floating license works on the server, but cannot be accessed via network.The floating license problem can be due to some non-standard setting in the Windows Firewall on the floating license server. If IT forces Windows Firewall to be enabled, but allows exceptions to be added, Usually, adding lmgrd.exe and cyrakey.exe as allowed processes is sufficient. But on some computer, perhaps because of the way the firewall is forced (perhaps some additional security settings), the specific TCP/IP ports need to be exposed instead.

Cyclone/ CloudWorx floating licenses can also be used with a VPN.In this case it is also necessary to specify the ports to be used in this network.

Version:

All Cyclone / CloudWorx

Solution:

In LMTOOLS, find the ports that CYRAKEY and LMGRD use. View the log file in LMTOOLS; you will see the port numbers (e.g., FLEXLM used 27000 and CYRAKEY used 4309). Adding those TCP/IP ports in Windows Firewall lets the floating license server be found. In this case, you do not even need to add lmgrd.exe and cyrakey.exe processes to the exceptions list.

The actual ports may be different on different computers. FLEXLM will find other available ports if the defaults are not available. But because specific TCP/IP ports need to be allowed on this computer, it would be best to force FLEXLM to always use those ports. In the license file, add the port numbers in two places:

On the SERVER line, add the raw port number, eg 27000example:

SERVER xyz CYRA=000000000000-0000 27000

On the VENDOR line, add PORT=the port numberexample:

VENDOR CYRAKEY.EXE "c:\flexlm\server.lic" PORT=4309

The only problem here might be if some other program comes along and allocates either port before FLEXLM and CYRAKEY have a chance to grab them. If the ports were not being forced, FLEXLM would simply look for other available ports, but because the ports are forced, FLEXLM and CYRAKEY would fail to open those ports. Leica Geosystems | Feb 7 2010 3:25PM

Some troubleshooting tricks:

To see if the hostname can be resolved from the client:

ping serverping IP addressuse IP address instead of server name in license file

To see if a port is open

"telnet hostname 27000" will connect or it will eventually time outtemporarily disable Windows Firewallif the option is disabled in Windows Firewall because of group policy, you might still be able to stop

the service from "Services"

If license acquisition appears to be taking a long time, it might be due to hostname resolution (ping tests) or firewall on the server (port tests).

Example of a modified Floating-License.lic

SERVER "servername" CYRA=xxxxxxxx-xxxx 27000 VENDOR CYRAKEY "C:\cyraflexlm\cyrakey.exe" port=4064 USE_SERVER INCREMENT ...... ...

In this case ports 2700 and 4064 were used. These ports need to be opened on both sides of the Firewall.

More information is available from attached document.>>flexlm_licensing_end_user_guide_en.pdf