License issue 2

[ntegravtec]

I just started work here at this company not too long ago, and they have a PIX Firewall 501 setup. We have 50 licenses, but only about 30 users. The problem is, that the licenses get used up, and I don't know/haven't found a way to release those other licenses. I'm forced to do:

clear local-host [ip]

for all the licenses not in use. Is there a way to automate this or to let the PIX release the ones not in use?

Things I've done:

1) set the dhcp lease to 3600 seconds
- it was originally like 80000000 seconds.

Any help would be greatly appreciated. Thanks!

 

[JackyZhang]

add another dsl/cable router behind PIX501, you won't worry about the license issue for ever.

 

[ntegravtec]

thanks jacky for the help.

My next question would be this:

here is my set up that i've been given:

DSL router-> Pix Firewall -> Cisco Catalyst 1900 (switch)-> server

should I put in the router behind the firewall then? If so, where?

 

[ntegravtec]

lemme rephrase.. i know where to put it.. but if i already have a switch there.. should i still stick in another router? that seems redundant??

 

[yizhar]

HI.

What is the pix OS version?

I know that similar problems with the 10 license version were solved by upgrading OS to 6.2x which aparently has a bug fix, so if you have 6.1x or older this may help.

Anyway I suggest that you open a case with Cisco or your dealer about this.

About the suggested solution/workaround - if you're going to add another network device, I suggest that you put a proxy server instead of another nat machine.
This has many advantages in addition to bypassing the license problem.

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar