Access Through a Firewall or VPN

SySAM license server listens on two TCP/IP ports for incoming license requests. Therefore, any firewall or VPN policies must be set up to allow access to both ports.

The SySAM license server consists of two processes: the license manager daemon (lmgrd) and the vendor daemon (SYBASE).

Fix the ports by specifying their port numbers in the license files on the SySAM license server. For example, to force lmgrd to listen on port 27010 and the SYBASE vendor daemon to listen on port 27011, the license file header should have:

SERVER keyserver 1D1D1D1D  27010
VENDOR SYBASE PORT=27011

A SySAM 2-enabled product only needs to know the port where lmgrd is listening. The product connects to lmgrd on that port and will then be told which port to use to connect to the SYBASE vendor daemon. This means that the product's local license file just needs to contain:

SERVER keyserver ANY 27010
USE_SERVER

When generating licenses at SPDC, you can specify the license server port to fix the port for lmgrd. Edit the license file to specify the SYBASE vendor daemon port.

When generating licenses at SMP, you can specify both ports. The port for lmgrd is specified as License Server Port 1, and the SYBASE vendor daemon port as License Server Port 2. For three-server-redundant configurations, you can only specify the SYBASE vendor daemon port for the primary license server; same value is used for the secondary and tertiary license servers.

Note: You can specify any unused port number between 0 and 64000. On UNIX, choose a port number greater than 1024 as most port numbers less than 1024 are privileged port numbers. Do not specify a number in the range 27000 to 27009 for License Server Port 2, as ports in this range are used by the lmgrd process when no port is specified for License Server Port 1.