With the new conversion to Flex Licensing for NetScaler, many smaller companies were faced with the requirement to install a NetScaler Console or a NetScaler Console Service Agent to license their appliances. Both options required a large VM to be running and maintained with a minimum size of 4 CPU and 8 GB of RAM. This was especially challenging for customers who hosted their environments in the public cloud as they now required a large VM to run all the time, resulting in a minimum of approximately $50 US expense. For those customers who need the connection simply for licensing purposes, the built-in agent on the NetScaler can accomplish this. In this blog, we will learn how to use the built-in agent for Flexed licensing.
Note: The built-in agent can only be used in NetScaler Console or NetScaler Console Service where a License Server Agent (LSA) already exists. This method will permit proxy licensing of additional appliances in other sites that do not have a NetScaler Agent to act as the proxy.
Configuring the agent
In the NetScaler Console Service screen.
-
- Navigate to “Infrastructure”, “Instances”, “Agents” and choose “Setup Agent”
- Then choose “Get Started.”
- Then choose “Custom deployment.”
- Select “On Premises.”
- Select “Traditional/Tiered.”
- Select “Built-in Agent.”
- This will present you with the “Service URL” and “Activation Code.”
- Now you will need to proceed to the NetScaler CLI.
- On the NetScaler, start the shell commands and navigate to the /var/mastools/ directory.
- Issue the command “./mastools_init.sh <device_profile_name> <service_url> <activation_code> -profile” if using a device profile or “./mastools_init.sh <user_name> <pwd> <service_url> <activation_code>” without a profile where:
a. <device_profile_name> – The profile name from the NetScaler Console Service
b. <user_name> – The user name of the NetScaler login (usually nsroot)
c. <pwd> – The password for the chosen user
d. <service_url> and <activation_code> – The Service URL and Activation Code from the Console Service
- Execute the command. This will take some time and requires the NetScaler to be able to resolve the service URL via DNS and be able to contact the service through the internet. If either of these are not permitted, then the NetScaler Console or NetScaler Console Agent will have to be utilized.
- Choose “Register Instance” on the NetScaler Console Service.
- On the next screen, you should see your new instance. Choose “Next.”
- On the “Enable Communication Screen, choose “Done.”
- Your new instance will now show under the “NetScaler” instances.
- On the NetScaler instance GUI, navigate to “System”, “Licenses” and select “Manage Licenses.”
- Select “Add New License.”
- Choose “Use remote licensing.” Then, choose “Pooled Licensing” and enter the license server name/IP address as 127.0.0.1. The standard license port of 2700 should be used, and enter the username and password, and uncheck the “Validate Certificate” checkbox. Then choose “Continue.”
- You will get the error “Registration of device failed.” This is a known bug, you can safely choose “Ok”
- You will be presented with the “Allocate licenses” screen. Here you can choose the bandwidth to assign. The Instances will auto-populate 1 instance. Allocate the desired bandwidth and choose “Get Licenses.”
- You will then be prompted to reboot the appliance. A warm reboot is sufficient.
- After rebooting, you will see the proper licenses allocated.
- You will receive a warning that you are operating in a grace period. The remaining configuration needs to be completed from the NetScaler Console Service.
- On the NetScaler Console Service dashboard, select the instance you just added and choose “Edit Throughput Capacity.”
- On the following screen, choose “Platinum Edition” and set the desired bandwidth. Then choose “Submit”
- The instance will now show licensed with the assigned throughput capacity
The device is now successfully licensed and prepared for use.
NetScaler Documentation:
Other Ferroque Licensing Articles
-
Richard Faulkner
Rich is a veteran architect and enthusiastic supporter of EUC, with over two decades of experience. He excels in sharing his technology expertise and aiding IT staff in optimizing digital workspaces. Rich has lived across the US and served as a Nuclear Engineer in the US Navy on submarines before transitioning to an IT career.
Hi. Could you confirm if using the in-built agent for licensing purposes like this requires a specific version? While I can register the in-built Netscaler VPX agent to Netscaler Console, I’m unable to connect the remote license server and encounter an ‘unable to connect to licenseserver’ error. Thanks
In doing some research to answer your question, I have found that the Built-in agent requires an existing License Server Agent in one of your sites before the built-in agent can license (as a proxy) any instances in another site. I will be updating the blog post to reflect this new information. And this does reduce the value of the built-in agent. As for what versions, any version that supports Pooled or Flex licensing I believe, but I will also verify that with Citrix and update the post to include the required version. Their documentation site does not list any… Read more »
Hi. We have already successfully activated an on-premise agent that has taken on the LSA role in the Netscaler Console. We use this to communicate with the console for two Netscaler VPXs that we operate on-premise as load balancers. We have added two license files to the Netscaler Console under License Management (10 Flexed VPX Software Instance and Flexed Premium Throughput Capacity 10 Gbps). In the license portal, these are also displayed as Licensed Netscalers in the Allocate status. Every with 1 Instance license and 1 GBps Capacity. We want to integrate a Netscaler VPX with the built-in agent for… Read more »
Hi. We have already successfully activated an on-premise agent that has taken on the LSA role in the Netscaler Console. We use this to communicate with the console for two Netscaler VPXs that we operate on-premise as load balancers. We have added two license files to the Netscaler Console under License Management (10 Flexed VPX Software Instance and Flexed Premium Throughput Capacity 10 Gbps).In the license portal, these are also displayed as Licensed Netscalers in the Allocate status. Every with 1 Instance license and 1 GBps Capacity.We want to integrate a Netscaler VPX with the built-in agent for another location.I… Read more »
Can the NetScaler VPX in the second location talk to the LSA in the first location? The Built-in agent is only capable of acting as a license server proxy. It has to be able to communicate with the VPX marked as LSA in the NetScaler Console Service. You will see this instance with a green “LSA” bubble over it in the list of agents. If that communication is enabled, and the built-in agent is working as you have stated, I would recommend contacting NetScaler Support, or posting this question in the NetScaler Community site. The developers at NetScaler are supposed… Read more »