Cyclone / CloudWorx licenses - Floating licenses via internet and VPN, specify ports

to be used
Description:
The floating license works on the server, but cannot be accessed via network.
The floating license problem can be due to some non-standard setting in the Windows Firewall on the
floating license server. If IT forces Windows Firewall to be enabled, but allows exceptions to be added,
Usually, adding lmgrd.exe and cyrakey.exe as allowed processes is sufficient. But on some computer,
perhaps because of the way the firewall is forced (perhaps some additional security settings), the specific
TCP/IP ports need to be exposed instead.
Cyclone/ CloudWorx floating licenses can also be used with a VPN.
In this case it is also necessary to specify the ports to be used in this network.

Version:
All Cyclone / CloudWorx

Solution:
In LMTOOLS, find the ports that CYRAKEY and LMGRD use. View the log file in LMTOOLS; you will see
the port numbers (e.g., FLEXLM used 27000 and CYRAKEY used 4309). Adding those TCP/IP ports in
Windows Firewall lets the floating license server be found. In this case, you do not even need to add
lmgrd.exe and cyrakey.exe processes to the exceptions list.
The actual ports may be different on different computers. FLEXLM will find other available ports if the
defaults are not available. But because specific TCP/IP ports need to be allowed on this computer, it would
be best to force FLEXLM to always use those ports. In the license file, add the port numbers in two places:
On the SERVER line, add the raw port number, eg 27000
example:
SERVER xyz CYRA=000000000000-0000 27000

On the VENDOR line, add PORT=the port number

example:
VENDOR CYRAKEY.EXE "c:\flexlm\server.lic" PORT=4309

The only problem here might be if some other program comes along and allocates either port before
FLEXLM and CYRAKEY have a chance to grab them. If the ports were not being forced, FLEXLM would
simply look for other available ports, but because the ports are forced, FLEXLM and CYRAKEY would fail to
open those ports.
Leica Geosystems | Feb 7 2010 3:25PM

Some troubleshooting tricks:

To see if the hostname can be resolved from the client:
ping server
ping IP address
use IP address instead of server name in license file
To see if a port is open
"telnet hostname 27000" will connect or it will eventually time out
temporarily disable Windows Firewall
if the option is disabled in Windows Firewall because of group policy, you might still be able to stop
the service from "Services"
If license acquisition appears to be taking a long time, it might be due to hostname resolution (ping tests) or
firewall on the server (port tests).
Example of a modified Floating-License.lic
SERVER "servername" CYRA=xxxxxxxx-xxxx 27000
VENDOR CYRAKEY "C:\cyraflexlm\cyrakey.exe" port=4064
USE_SERVER
INCREMENT ......
...
In this case ports 2700 and 4064 were used.
These ports need to be opened on both sides of the Firewall.
More information is available from attached document.
>>flexlm_licensing_end_user_guide_en.pdf<<

Leica Geosystems | Feb 7 2010 3:25PM