This is an old revision of the document!
Table of Contents
Infoblox Licenses
Note that B1TD Essentials is licenced per member. If the member is a HA pair of two nodes, you only need one licence and another license for $0 will be issued. (IB-SUB-THREAT-ESNTL-HA)
The DNSFW/RPZ license (IB-SWTL-DFW-TE-xxxx) is sold per node. In a HA-Pair, you will need two DNSFW licenses - one per HA-Pair member.
For expiry details here and here, between 8.0 and 8.2, the subscription behaviour didn't work as it does today. 8.3.6+ to 8.4 and all beyond, this was fixed. Changed to DNS and DHCP after subscription expiry should work.
X6
- When you purchase X6 with Microsoft Management installed, be aware that you can't install Microsoft Management on a NIOS VM that has the CP licence installed. So, although the X6 appliance is licenced for CP, you can't install it if you want to use Microsoft Management.
- You need to install DNS first before installing RPZ and DTC. If you try to install all licences at the same time, it is possible that RPZ and DTC will not install and you just have to re-import those licences and they will install.
Temp Licenses
Be aware, unlike production NIOS licences, if you set a temp licence on NIOS, when the licence expires, the services are no longer reliable. If you boot a NIOS VM that has its licence expired, the services will not start.
If the VM is already running, if the service stops, it won't start. If the service is kept running, certain actions will not work (zone updates, etc).
IPAM is still usable manually.
Setting NIOS Licences
This is the list of licenses when running set temp_license in a virtual NIOS appliance.
- DNSone (DNS, DHCP)
- DNSone with Grid (DNS, DHPC, Grid)
- Network Services for Voice (DHCP, Grid)
- Add NIOS License (causes a system restart)
- Add DNS Server license
- Add DHCP Server license
- Add Grid license
- Add Microsoft management license
- Add Multi-Grid Management license
- Add Query Redirection license
- Add Threat Protection (Software add-on) license (causes a system restart)
- Add Threat Protection Update license
- Add Response Policy Zones license
- Add FireEye license
- Add DNS Traffic Control license
- Add Cloud Network Automation license
- Add Security Ecosystem license
- Add Threat Analytics license
- Add Flex Grid Activation license
- Add Flex Grid Activation for Managed Services license
If you set the NIOS license to IB-v5005 (or after you join the Grid), you will see that set temp_license generates a much smaller list (3 insetad of 16).
- Add NIOS License
- Add Grid license
- Add Reporting subscription license
This list list list of NIOS Licenses you can add
- IB-V805
- CP-V805
- IB-V815
- IB-V1405
- CP-V1405
- IB-V1415
- IB-V14125
- IB-V2205
- CP-V2205
- IB-V2215
- IB-V2225
- IB-V4005
- IB-V4015
- IB-V4025
- IB-V5005 (Reporting Server)
For VMware temp licencing at deployment
- dns=dns
- dhcp=dhcp
- enterprise=grid
- nios=appliance
ADP
See the dedicated ADP page for more details.
NIOS License Renewal
When a license is renewed, the support portal is automatically updated. However, for NIOS appliances you will need to redownload the appliance licence key and install it via the Grid Master GUI.
When you apply a renewal license, services are not impacted. Tested with DNS and DHCP services.
License a NIOS VM
First deploy the VM.
You may also want to enable remote console access to the VM.
- Log into the CLI of the VM and run
show hwidto show the VM ID and make a note of it. You will need it later. You can also get this Hardware ID from the Grid Manager Web UI: Grid > Licenses and the data is in the Serial Number column. - Log into the Infoblox Support Portal - https://support.infoblox.com/
- Click “My Products” on the menu at the top of the page.
- Go to “Subscriptions” and you should see the list of licences purchased. If you are a distributer, you may have to “Filter Customer” at the top of the screen. Verify that the number of subscriptions matches what you are expecting.
- Go to “Hosts” and you should see that Infoblox have helpfully pre-populated entries for the new VMs with random serial numbers and SKU of “IB-VM”.
- Click “Create Virtual Host”.
- Paste the Hardware ID into the field “Virtual Host Hardware ID”.
- Set License Technology to “DDI”
- Click “Save & Assign Software”. This will take you to the screen to assign software to this VM. It will start off by saying “There is no Software assigned to this Host”. Further down the screen you can see a list of “Software available to be assigned to Host”. Take a note of “Total Quantity” and “Available Quantity”.
- What I do at this stage is find the entry for the NIOS licence (e.g. “IB-SWTL-BASE-NIOS-825”). Click the + symbol to add this license and you should find that the other licences for the VM get added automatically (e.g. IB-SWLT-GD and IB-SWTL-NS1).
- Click “Assign Software” and the licenses should appear at the top of the screen.
- Click “Download License Keys”. and then click “Download” to download the licences as a TXT file.
- Open up the Grid Master GUI and go to Grid > Licenses > Member.
- “Upload License File” and then “Select File”.
- Select the TXT file you downloaded earlier.
- Then click “Save Licenses” on the right.
Expired NIOS Subscriptions
I've not seen what happens on a production Infoblox Grid that lets the subscriptions expire. However, I have seen what happens when a 60 day trial Grid has its subscriptions expire.
- You can still query existing zone.
- You can still update existing records and create new records in existing zones.
- You can create new zones but they can't be queried.
- If you restart the appliance, the DNS server stops functioning.
In theory the above is true. Also in theory, when a “TRIAL” subscription expires, the functionality stops completly.
Set NIOS Grid Wide Licence
When you set a Grid Wide License, you must create a VM in the support portal using the Grid UUID.
show license_uid
Pool Licenses
Pool licenses are supported but there are some caveats in the 8.6+ code.
The following are the limitations of using pool licenses in NIOS:
- When a pool license has expired, you cannot manually delete the license.
- If you replace an expired pool license with a replacement license, the new license is installed and the expired license is left as is. This does not impact the functionality but is not good user experience.
- Pool licenses can only be removed by installing a new license file. Any of the pool licenses present in the Grid but not present in the license file will be removed. The only way to remove a pool license is to apply a “new” pool license which in turn will remove any of the current licenses that are not contained within the “new” pool license.
A (limited) workaround for these limitations is to install a static license. A static license installed on a Grid member will take precedence over the pool license. Dynamic licenses are released from the associated Grid member and returned to the corresponding pool when a valid static license is applied to the same feature on the Grid member.
