- An activation code for a permanent license can be obtained by registering the software online in your MySteinberg account. How to use activation codes The following instructions outline the Activation - thus the download of a license by entering an activation code in the eLicenser Control Center - in detail.
- Enjoy the benefits of secure 24X7 online account access, online transfers to and from other banks and direct deposit to make saving simple and easy.
ON THIS PAGE
Software Feature Licenses for SRX Series Devices
After that you would need an active support contact. I used an admin service case to activate the access. 300 series license JSB / JSE. Without a license you are basically violating the Licensing from Juniper. So for the SRX300 you need to Order the SRX itself (300$) and the License (JSB around 300$).
Each feature license is tied to exactly one software feature,and that license is valid for exactly one device. Each license allowsyou to run the specified advanced software features on a single device.Platform support depends on the Junos OS release in your installation.
NoteTo understand more about Junos OS Software Licensing,see the Juniper Licensing Guide. Please refer to the product Data Sheets accessible from Products &Services for details, or contact your Juniper Account Team orJuniper Partner.
Sky Advanced Threat Prevention, ThreatFeed and Enhanced WebFiltering individual license are available. This is not a completelist of licenses. For the most up-to-date license models available,contact your Juniper Networks representative for license information.
Features Requiring a License on SRX100 and SRX110 Devices
Table 1 lists the licenses you can purchase for each SRX Series softwarefeature.
Table 1: SRX100and SRX110 Junos OS Feature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signatures (1year and 3 years subscription) | SRX100 SRX110 | SRX100-APPSEC-A-1 SRX100-APPSEC-A-3 SRX1XX-APPSEC-A-1 SRX1XX-APPSEC-A-3 |
Kaspersky antivirus (1 year and 3 years subscription) | SRX100 SRX110 | SRX1XX-K-AV SRX1XX-K-AV-3 |
Sophos antispam (1 year and 3 years subscription) | SRX100 SRX110 | SRX1XX-S2-AS SRX1XX-S2-AS-3 |
Sophos antivirus (1 year and 3 years subscription) | SRX100 SRX110 | SRX1XX-S-AV SRX1XX-S-AV-3 |
Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam,Application Security and Intrusion Detection and Prevention (1 yearand 3 years subscription) | SRX100 SRX110 | SRX1XX-SMB4-CS SRX1XX-SMB4-CS-3 |
Sophos antivirus, Enhanced Web Filtering, Sophos antispam, ApplicationSecurity and Intrusion Detection and Prevention (1 year and 3 yearssubscription) | SRX100 SRX110 | SRX1XX-S-SMB4-CS SRX1XX-S-SMB4-CS-3 |
Websense Enhanced Web Filtering (1 year and 3 years subscription) | SRX100 SRX110 | SRX1XX-W-EWF SRX1XX-W-EWF-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX100 SRX110 | SRX1XX-IDP SRX1XX-IDP-3 |
Features Requiring a License on SRX210 Devices
Table 2 lists thelicenses you can purchase for each SRX Series software feature.
Table 2: SRX210 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signatures (1year and 3 years subscription) | SRX210 | SRX210-APPSEC-A-1 SRX210-APPSEC-A-3 |
Kaspersky antivirus (1 year and 3 years subscription) | SRX210 | SRX210-K-AV SRX210-K-AV-3 |
Sophos antispam (1 year and 3 years subscription) | SRX210 | SRX210-S2-AS SRX210-S2-AS-3 |
Sophos antivirus (1 year and 3 years subscription) | SRX210 | SRX210-S-AV SRX210-S-AV-3 |
Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam,Application Security and Intrusion Detection and Prevention (1 yearand 3 years subscription) | SRX210 | SRX210-SMB4-CS SRX210-SMB4-CS-3 |
Sophos antivirus, Enhanced Web Filtering, Sophos antispam, ApplicationSecurity and Intrusion Detection and Prevention (1 year and 3 yearssubscription) | SRX210 | SRX210-S-SMB4-CS SRX210-S-SMB4-CS-3 |
Websense Enhanced Web Filtering (1 year and 3 years subscription) | SRX210 | SRX210-W-EWF SRX210-W-EWF-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX210 | SRX210-IDP SRX210-IDP-3 |
Features Requiring a License on SRX220 Devices
Table 3 lists thelicenses you can purchase for each SRX Series software feature.
Table 3: SRX220 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signatures (1year and 3 years subscription) | SRX220 | SRX220-APPSEC-A-1 SRX220-APPSEC-A-3 |
Kaspersky antivirus (1 year and 3 years subscription) | SRX220 | SRX220-K-AV SRX220-K-AV-3 |
Sophos antispam (1 year and 3 years subscription) | SRX220 | SRX220-S2-AS SRX220-S2-AS-3 |
Sophos antivirus (1 year and 3 years subscription) | SRX220 | SRX220-S-AV SRX220-S-AV-3 |
Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam,Application Security and Intrusion Detection and Prevention (1 yearand 3 years subscription) | SRX220 | SRX220-SMB4-CS SRX220-SMB4-CS-3 |
Sophos antivirus, Enhanced Web Filtering, Sophos antispam, ApplicationSecurity and Intrusion Detection and Prevention (1 year and 3 yearssubscription) | SRX220 | SRX220-S-SMB4-CS SRX220-S-SMB4-CS-3 |
Websense Enhanced Web Filtering (1 year and 3 years subscription) | SRX220 | SRX220-W-EWF SRX220-W-EWF-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX220 | SRX220-IDP SRX220-IDP-3 |
Features Requiring a License on SRX240 Devices
Table 4 lists thelicenses you can purchase for each SRX Series software feature.
Table 4: SRX240 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signatures (1year and 3 years subscription) | SRX240 | SRX240-APPSEC-A-1 SRX240-APPSEC-A-3 |
Kaspersky antivirus (1 year and 3 years subscription) | SRX240 | SRX240-K-AV SRX240-K-AV-3 |
Sophos antispam (1 year and 3 years subscription) | SRX240 | SRX240-S2-AS SRX240-S2-AS-3 |
Sophos antivirus (1 year and 3 years subscription) | SRX240 | SRX240-S-AV SRX240-S-AV-3 |
Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam,Application Security and Intrusion Detection and Prevention (1 yearand 3 years subscription) | SRX240 | SRX240-SMB4-CS SRX240-SMB4-CS-3 |
Sophos antivirus, Enhanced Web Filtering, Sophos antispam, ApplicationSecurity and Intrusion Detection and Prevention (1 year and 3 yearssubscription) | SRX240 | SRX240-S-SMB4-CS SRX240-S-SMB4-CS-3 |
Websense Enhanced Web Filtering (1 year and 3 years subscription) | SRX240 | SRX240-W-EWF SRX240-W-EWF-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX240 | SRX240-IDP SRX240-IDP-3 |
Features Requiring a License on SRX300 Devices
Table 5 lists thelicenses you can purchase for each SRX Series software feature.
Table 5: SRX300 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX300 | SRX300-ATP-BUN-1 SRX300-ATP-BUN-3 |
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX300 | SRX300-CS-BUN-1 SRX300-CS-BUN-3 SRX300-CS-BUN-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX300 | SRX300-IPS-1 SRX300-IPS-3 SRX300-IPS-5 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX300 | SRX300-W-EWF-1 SRX300-W-EWF-3 SRX300-W-EWF-5 |
Features Requiring a License on SRX320 Devices
Table 6 lists thelicenses you can purchase for each SRX Series software feature.
Table 6: SRX320 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 yearand 3 years subscription) | SRX320 | SRX320-ATP-BUN-1 SRX320-ATP-BUN-3 |
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX320 | SRX320-CS-BUN-1 SRX320-CS-BUN-3 SRX320-CS-BUN-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX320 | SRX320-IPS-1 SRX320-IPS-3 SRX320-IPS-5 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX320 | SRX320-W-EWF-1 SRX320-W-EWF-3 SRX320-W-EWF-5 |
Features Requiring a License on SRX340 Devices
Table 7 lists thelicenses you can purchase for each SRX Series software feature.
Table 7: SRX340 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX340 | SRX340-ATP-BUN-1 SRX340-ATP-BUN-3 SRX340-ATP-BUN-5 |
Sky Advanced Threat Prevention (1 year, 3 years and 5 yearssubscription) | SRX340 | SRX340-ATP-1 SRX340-ATP-3 SRX340-ATP-5 |
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year and 3 years subscription) | SRX340 | SRX340-CS-BUN-1 SRX340-CS-BUN-3 SRX340-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year and 3 years subscription) | SRX340 | SRX340-THRTFEED-1 SRX340-THRTFEED-3 SRX340-THRTFEED-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX340 | SRX340-IPS-1 SRX340-IPS-3 SRX340-IPS-5 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX340 | SRX340-W-EWF-1 SRX340-W-EWF-3 SRX340-W-EWF-5 |
Features Requiring a License on SRX345 Devices
Table 8 lists thelicenses you can purchase for each SRX Series software feature.
Table 8: SRX345 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX345 | SRX345-ATP-BUN-1 SRX345-ATP-BUN-3 SRX345-ATP-BUN-5 |
Sky Advanced Threat Prevention (1 year, 3 years and 5 yearssubscription) | SRX345 | SRX345-ATP-1 SRX345-ATP-3 SRX345-ATP-5 |
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year and 3 years subscription) | SRX345 | SRX345-CS-BUN-1 SRX345-CS-BUN-3 SRX345-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year and 3 years subscription) | SRX345 | SRX345-THRTFEED-1 SRX345-THRTFEED-3 SRX345-THRTFEED-5 |
Intrusion Prevention Signature (1 year, 3 years and 5 yearssubscription) | SRX345 | SRX345-IPS-1 SRX345-IPS-3 SRX345-IPS-5 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX345 | SRX345-W-EWF-1 SRX345-W-EWF-3 SRX345-W-EWF-5 |
Features Requiring a License on SRX550 Devices
Table 9 lists thelicenses you can purchase for each SRX Series software feature.
Table 9: SRX550 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signature (1 year,3 years and 5 years subscription) | SRX550 | SRX550-APPSEC-A-1 SRX550-APPSEC-A-3 SRX550-APPSEC-A-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX550 | SRX550-THRTFEED-1 SRX550-THRTFEED-3 SRX550-THRTFEED-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX550 | SRX550-IDP SRX550-IDP-3 SRX550-IDP-5 |
Sky Advanced Threat Prevention (1 year, 3 years and 5 yearssubscription) | SRX550 | SRX550-ATP-1 SRX550-ATP-3 SRX550-ATP-5 |
Kaspersky antivirus (1 year, 3 years and 5 years subscription) | SRX550 | SRX550-K-AV SRX550-K-AV-3 SRX550-K-AV-5 |
Sophos antispam (1 year, 3 years and 5 years subscription) | SRX550 | SRX550-S2-AS SRX550-S2-AS-3 SRX550-S2-AS-5 |
Sophos antivirus (1 year and 3 years subscription) | SRX550 | SRX550-S-AV SRX550-S-AV-3 SRX550-S-AV-5 |
Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam,Application Security and Intrusion Detection and Prevention (1 yearand 3 years subscription) | SRX550 | SRX550-SMB4-CS SRX550-SMB4-CS-3 SRX550-SMB4-CS-5 |
Sophos antivirus, Enhanced Web Filtering, Sophos antispam, ApplicationSecurity and Intrusion Detection and Prevention (1 year, 3 years and5 years subscription) | SRX550 | SRX550-S-SMB4-CS SRX550-S-SMB4-CS-3 SRX550-S-SMB4-CS-5 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX550 | SRX550-W-EWF SRX550-W-EWF-3 SRX500-W-EWF-5 |
Features Requiring a License on SRX650 Devices
Table 10 lists thelicenses you can purchase for each SRX Series software feature.
Table 10: SRX650 Junos OS FeatureLicense Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signature (1 yearand 3 years subscription) | SRX650 | SRX650-APPSEC-A-1 SRX650-APPSEC-A-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX650 | SRX650-IDP SRX650-IDP-3 |
Kaspersky antivirus (1 year and 3 years subscription) | SRX650 | SRX650-K-AV SRX650-K-AV-3 |
Sophos antispam (1 year and 3 years subscription) | SRX650 | SRX650-S2-AS SRX650-S2-AS-3 |
Sophos antivirus (1 year and 3 years subscription) | SRX650 | SRX650-S-AV SRX650-S-AV-3 |
Kaspersky antivirus, Enhanced Web Filtering, Sophos antispam,Application Security and Intrusion Detection and Prevention (1 yearand 3 years subscription) | SRX650 | SRX650-SMB4-CS SRX650-SMB4-CS-3 |
Sophos antivirus, Enhanced Web Filtering, Sophos antispam, ApplicationSecurity and Intrusion Detection and Prevention (1 year and 3 yearssubscription) | SRX650 | SRX650-S-SMB4-CS SRX650-S-SMB4-CS-3 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX650 | SRX650-W-EWF SRX650-W-EWF-3 |
Features Requiring a License on SRX1400 Devices
Table 11 lists thelicenses you can purchase for each SRX Series software feature.
Table 11: SRX1400 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security and Intrusion Prevention Signature (1 yearand 3 years subscription) | SRX1400 | SRX1400-APPSEC-A-1 SRX1400-APPSEC-A-3 |
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Antispam (1 year and 3 years subscription) | SRX1400 | SRX1400-CS-BUN-1 SRX1400-CS-BUN-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX1400 | SRX1400-IDP SRX1400-IDP-3 |
SRX Content Security (1 Incremental Logical Systems Licensefor NetSecure) | SRX1400 | SRX-1400-LSYS-1 |
Sophos antispam (1 year and 3 years subscription) | SRX1400 | SRX1400-S-AS-1 SRX1400-S-AS-3 |
Sophos antivirus (1 year and 3 years subscription) | SRX1400 | SRX1400-S-AV-1 SRX1400-S-AV-3 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX1400 | SRX1400-W-EWF-1 SRX1400-W-EWF-3 |
Features Requiring a License on SRX1500 Devices
Table 12 lists thelicenses you can purchase for each SRX Series software feature.
Table 12: SRX1500 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX1500 | SRX1500-ATP-BUN-1 SRX1500-ATP-BUN-3 SRX1500-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX1500 | SRX1500-CS-BUN-1 SRX1500-CS-BUN-3 SRX1500-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX1500 | SRX1500-THRTFEED-1 SRX1500-THRTFEED-3 SRX1500-THRTFEED-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX1500 | SRX1500-ATP-1 SRX1500-ATP-3 SRX1500-ATP-5 |
Intrusion Prevention Signature (1 year, 3 years and 5 yearssubscription) | SRX1500 | SRX1500-IPS-1 SRX1500-IPS-3 SRX1500-IPS-5 |
Logical System License (1, 5, and 25 Incremental) | SRX1500 | SRX-1500-LSYS-1 SRX-1500-LSYS-5 SRX-1500-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX1500 | SRX1500-W-EWF-1 SRX1500-W-EWF-3 SRX1500-W-EWF-5 |
Features Requiring a License on SRX3400 Devices
Table 13 lists thelicenses you can purchase for each SRX Series software feature.
Table 13: SRX3400 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Detection and Prevention, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 yearand 3 year subscription) | SRX3400 | SRX3400-ATP-BUN-1 SRX3400-ATP-BUN-3 SRX3400-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year and 3 years subscription) | SRX3400 | SRX3400-CS-BUN-1 SRX3400-CS-BUN-3 |
Application Security and Intrusion Prevention Signature (1 yearand 3 year subscription) | SRX3400 | SRX3400-APPSEC-A-1 SRX3400-APPSEC-A-3 |
Sophos antispam (1 year and 3 year subscription) | SRX3400 | SRX3400-S-AS-1 SRX3400-S-AS-3 |
Sophos antivirus (1 year and 3 year subscription) | SRX3400 | SRX3400-S-AV-1 SRX3400-S-AV-3 |
Logical System License (1, 5, and 25 Incremental) | SRX3400 | SRX-3400-LSYS-1 SRX-3400-LSYS-5 SRX-3400-LSYS-25 |
Enhanced Web Filtering (1 year and 3 years subscription) | SRX3400 | SRX3400-W-EWF-1 SRX3400-W-EWF-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX3400 | SRX3K-IDP SRX3K-IDP-3 |
Features Requiring a License on SRX3600 Devices
Table 14 lists thelicenses you can purchase for each SRX Series software feature.
Table 14: SRX3600 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, Antivirus,Enhanced Web Filtering (1 year and 3 years subscription) | SRX3600 | SRX3600-CS-BUN-1 SRX3600-CS-BUN-3 |
Application Security and Intrusion Prevention Signature (1 yearand 3 year subscription) | SRX3600 | SRX3600-APPSEC-A-1 SRX3600-APPSEC-A-3 |
Sophos antispam (1 year and 3 year subscription) | SRX3600 | SRX3600-S-AS-1 SRX3600-S-AS-3 |
Sophos antivirus (1 year and 3 year subscription) | SRX3600 | SRX3600-S-AV-1 SRX3600-S-AV-3 |
Logical System License (1, 5, and 25 Incremental) | SRX3600 | SRX-3600-LSYS-1 SRX-3600-LSYS-5 SRX-3600-LSYS-25 |
Enhanced Web Filtering (1 year and 3 years subscription) | SRX3600 | SRX3600-W-EWF-1 SRX3600-W-EWF-3 |
Intrusion Detection and Prevention (1 year and 3 years subscription) | SRX3600 | SRX3K-IDP SRX3K-IDP-3 |
Features Requiring a License on SRX4100 Devices
Table 15 lists thelicenses you can purchase for each SRX Series software feature.
Table 15: SRX4100 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX4100 | SRX4100-ATP-BUN-1 SRX4100-ATP-BUN-3 SRX4100-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Antispam (1 year, 3 years and 5 yearssubscription) | SRX4100 | SRX4100-CS-BUN-1 SRX4100-CS-BUN-3 SRX4100-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX4100 | SRX4100-THRTFEED-1 SRX4100-THRTFEED-3 SRX4100-THRTFEED-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX4100 | SRX4100-ATP-1 SRX4100-ATP-3 SRX4100-ATP-5 |
Intrusion Prevention Signature (1 year, 3 years and 5 yearssubscription) | SRX4100 | SRX4100-IPS-1 SRX4100-IPS-3 SRX4100-IPS-5 |
Logical System License (1, 5, and 25 Incremental) | SRX4100 | SRX-4100-LSYS-1 SRX-4100-LSYS-5 SRX-4100-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX4100 | SRX4100-W-EWF-1 SRX4100-W-EWF-3 SRX4100-W-EWF-5 |
Features Requiring a License on SRX4200 Devices
Table 16 lists thelicenses you can purchase for each SRX Series software feature.
Table 16: SRX4200 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX4200 | SRX4200-ATP-BUN-1 SRX4200-ATP-BUN-3 SRX4200-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Antispam (1 year, 3 years and 5 yearssubscription) | SRX4200 | SRX4200-CS-BUN-1 SRX4200-CS-BUN-3 SRX4200-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX4200 | SRX4200-THRTFEED-1 SRX4200-THRTFEED-3 SRX4200-THRTFEED-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX4200 | SRX4200-ATP-1 SRX4200-ATP-3 SRX4200-ATP-5 |
Intrusion Prevention Signature (1 year, 3 years and 5 yearssubscription) | SRX4200 | SRX4200-IPS-1 SRX4200-IPS-3 SRX4200-IPS-5 |
Logical System License (1, 5, and 25 Incremental) | SRX4200 | SRX-4200-LSYS-1 SRX-4200-LSYS-5 SRX-4200-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX4200 | SRX4200-W-EWF-1 SRX4200-W-EWF-3 SRX4200-W-EWF-5 |
Features Requiring a License on SRX4600 Devices
Table 17 lists thelicenses you can purchase for each SRX Series software feature.
Table 17: SRX4600 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX4600 | SRX4600-ATP-BUN-1 SRX4600-ATP-BUN-3 SRX4600-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Antispam (1 year, 3 years and 5 yearssubscription) | SRX4600 | SRX4600-CS-BUN-1 SRX4600-CS-BUN-3 SRX4600-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX4600 | SRX4600-THRTFEED-1 SRX4600-THRTFEED-3 SRX4600-THRTFEED-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX4600 | SRX4600-ATP-1 SRX4600-ATP-3 SRX4600-ATP-5 |
Intrusion Prevention Signature (1 year, 3 years and 5 yearssubscription) | SRX4600 | SRX4600-IPS-1 SRX4600-IPS-3 SRX4600-IPS-5 |
Logical System License (1, 5, and 25 Incremental) | SRX4600 | SRX-4600-LSYS-1 SRX-4600-LSYS-5 SRX-4600-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX4600 | SRX4600-W-EWF-1 SRX4600-W-EWF-3 SRX4600-W-EWF-5 |
Features Requiring a License on SRX5400 Devices
Table 18 lists thelicenses you can purchase for each SRX Series software feature.
Table 18: SRX5400 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX5400 | SRX5400-ATP-BUN-1 SRX5400-ATP-BUN-3 SRX5400-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Antispam (1 year, 3 years and 5 yearssubscription) | SRX5400 | SRX5400-CS-BUN-1 SRX5400-CS-BUN-3 SRX5400-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX5400 | SRX5400-THRTFEED-1 SRX5400-THRTFEED-3 SRX5400-THRTFEED-5 |
Application Security and Intrusion Prevention Signature (1 year,3 years and 5 years subscription) | SRX5400 | SRX5400-APPSEC-1 SRX5400-APPSEC-3 SRX5400-APPSEC-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX5400 | SRX5400-ATP-1 SRX5400-ATP-3 SRX5400-ATP-5 |
Logical System License (1, 5, and 25 Incremental) | SRX5400 | SRX-5400-LSYS-1 SRX-5400-LSYS-5 SRX-5400-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX5400 | SRX5400-W-EWF-1 SRX5400-W-EWF-3 SRX5400-W-EWF-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX5400 | SRX5K-IDP SRX5K-IDP-3 SRX5K-IDP-5 |
Features Requiring a License on SRX5600 Devices
Table 19 lists thelicenses you can purchase for each SRX Series software feature.
Table 19: SRX5600 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX5600 | SRX5600-ATP-BUN-1 SRX5600-ATP-BUN-3 SRX5600-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Antispam (1 year, 3 years and 5 yearssubscription) | SRX5600 | SRX5600-CS-BUN-1 SRX5600-CS-BUN-3 SRX5600-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX5600 | SRX5600-THRTFEED-1 SRX5600-THRTFEED-3 SRX5600-THRTFEED-5 |
Application Security and Intrusion Prevention Signature (1 year,3 years and 5 years subscription) | SRX5600 | SRX5600-APPSEC-A-1 SRX5600-APPSEC-A-3 SRX5600-APPSEC-A-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX5600 | SRX5600-ATP-1 SRX5600-ATP-3 SRX5600-ATP-5 |
Logical System License (1, 5, and 25 Incremental) | SRX5600 | SRX-5600-LSYS-1 SRX-5600-LSYS-5 SRX-5600-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX5600 | SRX5600-W-EWF-1 SRX5600-W-EWF-3 SRX5600-W-EWF-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX5600 | SRX5K-IDP SRX5K-IDP-3 SRX5K-IDP-5 |
Features Requiring a License on SRX5800 Devices
Table 20 lists thelicenses you can purchase for each SRX Series software feature.
Table 20: SRX5800 Junos OSFeature License Model Number
Licensed Software Feature | Supported Devices | Model Number |
---|---|---|
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Sky Advanced Threat Prevention (1 year,3 years and 5 years subscription) | SRX5800 | SRX5800-ATP-BUN-1 SRX5800-ATP-BUN-3 SRX5800-ATP-BUN-5 |
Application Security, Intrusion Prevention Signatures, EnhancedWeb Filtering, Antivirus and Antispam (1 year, 3 years and 5 yearssubscription) | SRX5800 | SRX5800-CS-BUN-1 SRX5800-CS-BUN-3 SRX5800-CS-BUN-5 |
Sky Advanced Threat Prevention Threat Intelligence Feeds only(1 year, 3 years and 5 years subscription) | SRX5800 | SRX5800-THRTFEED-1 SRX5800-THRTFEED-3 SRX5800-THRTFEED-5 |
Application Security and Intrusion Prevention Signature (1 year,3 years and 5 years subscription) | SRX5800 | SRX5800-APPSEC-A-1 SRX5800-APPSEC-A-3 SRX5800-APPSEC-A-5 |
Sky Advanced Threat Protection (1 year, 3 years and 5 yearssubscription) | SRX5800 | SRX5800-ATP-1 SRX5800-ATP-3 SRX5800-ATP-5 |
Logical System License (1, 5, and 25 Incremental) | SRX5800 | SRX-5800-LSYS-1 SRX-5800-LSYS-5 SRX-5800-LSYS-25 |
Enhanced Web Filtering (1 year, 3 years and 5 years subscription) | SRX5800 | SRX5800-W-EWF-1 SRX5800-W-EWF-3 SRX5800-W-EWF-5 |
Intrusion Detection and Prevention (1 year, 3 years and 5 yearssubscription) | SRX5800 | SRX5K-IDP SRX5K-IDP-3 SRX5K-IDP-5 |
See also
Understanding Chassis Cluster Licensing Requirements
There is no separate license required for chassis cluster. However,some Junos OS software features require a license to activate thefeature. To configure and use the licensed feature in a chassis clustersetup, you must purchase one license per feature per device and thelicense needs to be installed on both nodes of the chassis cluster.Both devices (which are going to form a chassis cluster) must havethe valid, identical features licenses installed on them. If bothdevices do not have an identical set of licenses, then after a failover,a particular feature (that is, a feature that is not licensed on bothdevices) might not work or the configuration might not synchronizein chassis cluster formation. Licensing is usually ordered when thedevice is purchased, and this information is bound to the chassisserial number. For example, Intrusion Detection and Prevention (IDP)is a licensed feature and the license for this specific feature istied to the serial number of the device.
For information about how to purchase software licenses, contactyour Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.
Installing Licenses on the SRX Series Devices in a ChassisCluster
You can add a license key from a file or a URL, from a terminal,or from the J-Web user interface. Use the filename option to activate a perpetual license directly on the device.Use the url option to send a subscription-basedlicense key entitlement (such as unified threat management [UTM])to the Juniper Networks licensing server for authorization. If authorized,the server downloads the license to the device and activates it.
Before adding new licenses, complete the following tasks:
- Purchase the required licenses.
- Set the chassis cluster node ID and the cluster ID. See Example: Setting the Node ID and Cluster ID for Security Devices in a Chassis Cluster .
- Ensure that your SRX Series device has a connection tothe Internet (if particular feature requires Internet or if (automatic)renewal of license through internet is to be used). For instructionson establishing basic connectivity, see the Getting Started Guideor Quick Start Guide for your device.
To install licenses on the primary node of an SRX Seriesdevice in a chassis cluster:
- Run the user@host>
- Initiate a failover to change node 1 (secondary node)to be the primary node:
user@host>NoteInitiating a failover to the secondary node is not requiredif you are installing licenses manually on the device. However, ifyou are installing the license directly from the Internet, you mustinitiate a failover.- Repeat the steps described in Step-by-Step Procedure to installlicenses on the secondary node.
- Reboot the device for licenses to take effect.
NoteYou must install the updated license on both nodes ofthe chassis cluster before the existing license expires.NoteIn a chassis cluster configuration, when one device hasa license installed, and the other device does not have the same licenseinstalled, an error message is displayed when you try to configurethat specific feature as shown in the following example:show system license installed command to view license usage.
Action
Licenses details on node 0.Licenses details on node 1.Meaning
Use the fields Features to make sure that licenses installed on both the nodesare identical.Understanding Licenses for Logical Systems and Tenant Systemson SRX Series Devices
This topic provides licensing information for SRX Series devicesrunning logical systems and tenant systems.Starting in Junos OSRelease 18.3R1, an SRX Series device running logical systems or tenantsystems includes three licenses by default. One license for a master logical system and the other two licensesfor user-defined logical system or tenant system. The system doesnot allow you to configure additional logical systems or tenant systemsif the number of logical systems and tenant systems exceeds the numberof available licenses. In the earlier releases, the system allowedyou to configure an additional logical system even if the number oflogical systems exceeds the number of available licenses, but witha warning message of non-licensed logical-systems do not pass traffic.You can purchase licenses for additional logical systems and tenantsystems that you intend to create. If you intend to configure an interconnectlogical system or interconnect tenant system to use as a switch, italso requires separate licenses.We enforce that you do not configure more logical systems ortenant systems than the number of licenses you have purchased. Ifthe number of logical systems or tenant systems that you attempt toconfigure exceeds the number of licenses that you have purchased,then the system displays an error message similar to the following:You can use the show system license usage commandsto view the active logical systems and tenant systems on the device.When you use SRX Series devices running logical systems or tenantsystems in a chassis cluster, you mustpurchase and install the same number of licenses for each node inthe chassis cluster. Logical systems or tenant systems licenses pertainto a single chassis, or node, within a chassis cluster and not tothe cluster collectively.See also
Understanding UTM Licensing
The majority of UTM features function as a subscription servicerequiring a license. You can redeem this license once you have purchasedyour subscription license SKUs. You redeem your license by enteringyour authorization code and chassis serial number into the CustomerService license portal interface. Once your entitlement is generated,you can use the CLI from your device to send a license update requestto the license portal. The license portal then sends your subscriptionlicense directly to the device.NoteThe products supported by the Juniper Agile Licensing (JAL)portal includes: QFX series, SRX Series, EX Series, NFX, vBNG, vMX,vSRX, and ACX. For other Juniper products (SPACE, JSA, SBR Carrier,Screen OS and so on) access the License ManagementSystem (LMS).NoteUTM requires 1 GB of memory.Table 21: UTM Feature Subscription Service License Requirements
NoteUTM Feature Requires License AntispamYesAntivirus: sophosYesContent FilteringNoWeb Filtering: integratedYesWeb Filtering: redirectNoWeb Filtering: localNoWeb Filtering: enhancedYesLicense enforcement is supported on all SRX Series devices.Licensed features including anti-virus or Enhanced Web Filtering willnot function until a license has been installed. The license mustbe installed after installing or upgrading to a new Junos OS Releaseversion. Unlicensed features such as UTM blacklists and whitelistswill continue to function without a license.Updating UTM Licenses (CLI Procedure)
To apply the UTM subscription license to SRX Series devices,use the following CLI command:After you install the license for SRX300, SRX320, SRX340, SRX345,SRX550M, and SRX1400 devices, reboot the device. The device reservesadditional memory for UTM features and hence decreases the sessioncapacity.For SRX3400, SRX3600, SRX4600, SRX5600 and SRX5800 devices,use the following command to manually reallocate the memory for UTMfeatures:Reboot the device for the configuration to take effect.NoteSRX1500, SRX4100 and SRX4200 devices have enough memory forUTM. These devices do not require any command for memory allocation.See also
Installing the IPS License (CLI)
You can either download an IPS license from the license server,or manually install IPS if you received a license from Juniper Networks.Access the SRX Series device console through the serial cableplugged into the console port on the device or by using a terminalsession such as SSH.To apply your IPS subscription license to the device, use thefollowing CLI command:If you received a license for manual installation, performthe following tasks:- Access the SRX Series Services Gateway console eitherby plugging the serial cable into the console port on the device orby using a terminal session such as SSH.
- Check for an IPS license (required for all IPS updates):
- If there are no licenses installed, obtain the chassisserial number by using the following CLI command:
- A serial number is needed to generate the IPS license.You can add a license key from a file or URL or from the terminal.
- From a file or URL:
- From the terminal:
- When prompted, enter the license key, separating multiplelicense keys with a blank line. If the license key you enter is invalid,an error is generated when you press Ctrl-D to exit license entrymode.
- Verify the system license by entering the
Table 1: Junos OS Feature LicenseModel Number for M Series, MX Series, and T Series RoutersLicensed Software FeatureSupported DevicesModel NumberGeneralized Multiprotocol Label Switching (GMPLS) Supporton Junos OSM10i, M7i, M120, M160, M20, M320, M40e, T320, T640, andMX Series RoutersJS-GMPLSIPv6 Support on Junos OSM120, M160, M20, M320, M40e, T320, T640, and MX SeriesRoutersJS-IPv6Logical Router Support for Junos OSM10i, M120, M160, M20, M320, M40e, M7i, T320, T640, andMX Series RoutersJS-LRJ-Flow accounting license for Adaptive Services (AS)PIC and Multiservices PICM10i, M120, M160, M20, M320, M40e, M7i, T320, M10, M5,T640, and T1600S-ACCTChassis license for Application Traffic Optimizationservice, policy enforcement and application statistics. This licenseincludes S-AI and S-LDPF fucntionality and 1-year Signature SubscriptionLicenseMX104, MX240, MX480, MX960, M Series, and T Series RoutersS-ATOSoftware License for Passive Monitoring Flow CollectorApplication, supporting 100 Kpps throughput; Chassis based licensefor Multiservices PICM320, T640, T320, T1600S-COLLECTOR-100KLicense to use Compressed Real-Time Transport Protocol(CRTP) feature in AS PIC and Multiservices PICM10i, M120, M160, M20, M320, M40e, M7i, T320, M10, M5,T640, and T1600S-CRTPSoftware License for Passive Monitoring DFC Application,supporting 100Kpps throughput; Chassis based license for MultiservicesPICM320, T640, T320, and T1600S-DFC-100KSecurity Services license for AS PIC and MultiservicesPICM10i, M7i, M5, M120, M160, M20, M320, M40e, T320, T640,M10, and T1600S-ESChassis license for IDP service, policy enforcement. This license includes S-AI and S-LDPF fucntionality and 1-year SignatureSubscription LicenseMX104, MX240, MX480, MX960, M Series, and T Series RoutersS-IDPJunos-FIPS Software LicenseM10i, M7i, M320, M40e, T320, and T640S-JUNOS-FIPSLink Services Software License—up to 1023 ML bundlesper Chassis for Multiservices PIC and Multiservices Dense Port Concentrator(DPC)M5, M7i, M10, M10i, M20, M40e, M120, M320, T320, T640,T1600, MX240, MX480, and MX960S-LSSL-1023Link Services Software Ugrade License—from 255 to 1023 ML bundles per Chassis for Multiservices PIC and MultiservicesDPCM5, M7i, M10, M10i, M20, M40e, M120, M320, T320, T640,T1600, MX240, MX480, and MX960S-LSSL-1023-UPGLink Services Software Ugrade License—from 64 to 255 ML bundles per Chassis for AS PIC, Multiservices PIC, and MultiservicesDPCM5, M7i, M10, M10i, M20, M40e, M120, M320, T320, T640,T1600, MX240, MX480, and MX960S-LSSL-255-UPGLink Services Software License—up to 255 ML bundlesper Chassis for AS PIC, Multiservices PIC, and Multiservices DPCM10, M7i, M5, M120, M20, M320, M40e, T320, T640, M10i,T1600, MX240, MX480, and MX960S-LSSL-256Link Services Software License—up to 4 ML bundlesper Chassis for AS PIC, Multiservices PIC, and Multiservices DPCM10i, M120, M20, M320, M40e, M7i, T320, M10, M5, T640,T1600, MX240, MX480, and MX960S-LSSL-4Link Services Software License—up to 64 ML bundlesper Chassis for AS PIC, MS PIC and MS DPCM10, M7i, M5, M120, M20, M320, M40e, T320, T640, M10i,T1600, MX240, MX480, and MX960S-LSSL-64Link Services Software Upgrade License—from 4 to 64 ML bundles per Chassis for AS PIC, Multiservices PIC, and MultiservicesDPCM5, M7i, M10, M10i, M20, M40e, M120, M320, T320, T640,T1600, MX240, MX480, and MX960S-LSSL-64-UPGSoftware License for Passive Monitoring Flow MonitorApplication, supporting 1M flows. Chassis based license for MultiservicesPICM320, T640, T320, and T1600S-MONITOR-1MNetwork Address Translation (NAT), FW license on AS PICand Multiservices PIC: Multi-instanceM10, M7i, M5, M120, M160, M20, M320, M40e, T320, T640,M10i, and T1600S-NAT-FW-MULTINAT, FW license on AS PIC and Multiservices PIC: Single-instanceM10, M7i, M5, M120, M160, M20, M320, M40e, T320, T640,M10i, and T1600S-NAT-FW-SINGLESoftware license for Packet trigger subscriber policyMX240, MX480, MX960, M120, and M320S-PTSPSubscriber Access Feature Pack License Scaling (128000)MX104, MX240, MX480, MX960, M120, and M320S-SA-128KSubscriber Access Feature Pack License Scaling (32000)MX104, MX240, MX480, MX960, M120, and M320S-SA-32KSubscriber Access Feature Pack License Scaling (4000)MX104, MX240, MX480, MX960, M120, M320, and MX80S-SA-4KSubscriber Access Feature Pack License Scaling (64000)MX104, MX240, MX480, MX960, M120, and M320S-SA-64KSubscriber Access Feature Pack License Scaling (8000)MX104, MX240, MX480, MX960, M120, M320, and MX80S-SA-8KSubscriber Access Feature Pack License Scaling (96000)MX104, MX240, MX480, MX960, M120, and M320S-SA-96KSubscriber Access Feature Pack licenseMX104, MX240, MX480, MX960, M120, and M320S-SA-FPStateful Failover for Services on AS PIC and MultiservicesPIC: Multilink PPP (MLPPP) onlyM10, M7i, M5, M120, M160, M20, M320, M40e, T320, T640,M10i, and T1600S-SERVICES-SFOSubscriber Service Management Feature Packet License(RADIUS/SRC based Service Activation and Deactivation) Per-ServiceAccounting Features for SubscribersMX104, MX240, MX480, MX960, M120, and M320S-SSM-FPSubscriber Traffic Lawful Intercept Feature Pack LicenseMX240, MX480, MX960, M120, M320, and MX80S-SSP-FPSoftware license for application aware traffic directfeatureMX240, MX480, MX960, M120, and M320S-TFDIRECT-APPSoftware license for subscriber aware traffic directfeatureMX240, MX480, MX960, M120, and M320S-TFDIRECT-SUBVideo Services Feature Pack licenseM120, M320, MX80, MX104, MX240, MX480, and MX960S-VIDEO-FPPort capacity enhancement FeaturePack License for MX5 routersMX5mx5-to-mx10-upgradePort capacity enhancement FeaturePack License for MX10 routersMX10mx10-to-mx40-upgradePort capacity enhancement FeaturePack License for MX40 routersMX40mx40-to-mx80-upgradeSoftware Features That Require Licenses on MX Series RoutersOnly
Table 2 lists the licensesyou can purchase for each MX Series software feature. Each licenseallows you to run the specified software feature on a single device.Note- This is not a complete list of licenses. Contact yourJuniper Networks representative for license information.
- License is not required to use NAT feature on MX150, MX204,and MX10003 routers.
For information about how to purchase a software license, contactyour Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.NoteThe DHCP server functionality for Junos OS is part of the subscribermanagement feature. You must have the S-SA-FP, S-MX80-SA-FP or S-MX104-SA-FPlicense in order to enable the DHCP server. For service accounting,you must also have S-SSM-FP.Starting in Junos OSRelease 16.1R1, after the completion of the 30 day grace period, DHCPbindings on MX series devices are limited to 10. This counts againstbroadband scale licenses S-MX104-SA-FP and S-SA-4K.Licensing details for DHCP Relay Configurations—If processing forward-only statement underthe dhcp-relay directly. The forward-only DHCP Relay assumes that the peer DHCP server is capable of returning Subscriber Access Feature Pack (SKUs - S-SA-FP,S-MX80-SA-FP, and S-MX104-SA)- Per subscriber RADIUS accounting (time and volume based)– require SSM for per service accounting
- RADIUS-based authentication and authorization
- Subscriber configuration through client profiles at subscriberlogin
- You require the S-SSM-FP SKU to change variable valueswithin client profiles through radius grant or access accept, COAor RID, and SRC
- RADIUS and SDX based address pool management
- Static and dynamic IP management
- Dynamic auto-sensed VLANs
- Video edge services (S-SA-FP SKU is the superset and theS-VIDEO-FP SKU is not required)
Licensed Software FeatureSupported DevicesModel NumberUpgrade license—from MX80-10G-ADV to MX80-40G-ADVMX80MX80-10G40G-UPG-ADV-BUpgrade license—from MX80-10G to MX80-40GMX80MX80-10G40G-UPG-BUpgrade license—from MX80-40G-ADV to full MX80MX80MX80-40G-UPG-ADV-BUpgrade license—from MX80-40G to full MX80MX80MX80-40G-UPG-BUpgrade license-–from MX80-5G-ADV to MX80-10G-ADVMX80MX80-5G10G-UPG-ADV-BUpgrade license—from MX80-5G to MX80-10GMX80MX80-5G10G-UPG-BUpgrade license to activate 2x10GE P2&3MX104S-MX104-ADD-2X10GEUpgrade license to activate2X10GE P0&1MX104S-MX104-UPG-2X10GEUpgrade license to activate4X10GE fixed ports on MX104MX104S-MX104-UPG-4X10GELicense to support per VLAN queuing on MX80MX5, MX10, MX40, and MX80S-MX80-QLicense to support per VLAN queuing on MX104MX104S-MX104-QChassis-based software license for inline J-Flow monitoringon MX5, MX10, M40, MX80, and MX104 Series routersMX5, MX10, MX40, MX80, and MX104S-JFLOW-CH-MX5-104Chassis-based software license for inline J-Flow monitoringon MX240 routersMX240S-JFLOW-CH-MX240Chassis-based software license for inline J-Flow monitoringon MX480 routersMX480S-JFLOW-CH-MX480Chassis-based software license for inline J-Flow monitoringon MX960 routersMX960S-JFLOW-CH-MX960Chassis-based software license for inline J-Flow monitoringon MX2008 routersMX2008S-JFLOW-CH-MX2008Chassis-based software license for inline J-Flow monitoringon MX2010 routersMX2010S-JFLOW-CH-MX2010Chassis-based software license for inline J-Flow monitoringon MX2020 routersMX2020S-JFLOW-CH-MX2020Flow monitoring and accounting features using J-Flowservice on any Modular Port Concentrator (MPC) or MS-DPCMX240, MX480, and MX960S-ACCT-JFLOW-CHASSISSoftware License for in-line J-Flow service on Trio MPCsMX240, MX480, MX960, MX2008, MX2010, and MX2020S-ACCT-JFLOW-INFlow monitoring and accounting features using J-Flowservice on any MPC limited to 10G of total JFLOW trafficMX80S-ACCT-JFLOW-IN-10GFlow monitoring and accounting features using J-Flowservice on any MPC limited to 10G of total JFLOW trafficMX80S-ACCT-JFLOW-IN-10G-UPGFlow monitoring and accounting features using J-Flowservice on any MPC limited to 5G of total JFLOW trafficMX80S-ACCT-JFLOW-IN-5GSecurity services (IPsec, VPN and group VPN) licensebased on a single NPU for MS-MIC, MS-DPC or MS-MPCMX Series RoutersS-ES-NPU2000 IKE sessions on MS-DPC; Chassis based, limited to6000 per ChassisMX240, MX480, and MX960S-ES-2K4000 IKE sessions on MS-DPC; Chassis based, limited to6000 per ChassisMX240, MX480, and MX960S-ES-4KUpgrade from 2000 IKE sessions to 4000 IKE sessions onMS-DPC; Chassis based, limited to 6000 per ChassisMX240, MX480, and MX960S-ES-4K-UPG6000 IKE sessions on MS-DPC; Chassis based, limited to6000 per ChassisMX240, MX480, and MX960S-ES-6KUpgrade from 4000 IKE sessions to 6000 IKE Sessions onMS-DPC; Chassis based, limited to 6000 per ChassisMX240, MX480, and MX960S-ES-6K-UPGLicense to run stateful firewall on one NPU per MS-MIC,MS-DPC or MS-MPCMX Series RoutersS-FW-NPULicense to support DS3 Channelization (down to DS0) oneach Modular Interface Card (MIC) for MIC-3D-8DS3-E3; also requireslicense S-MX80-Q when used on the MX80 platformMX5, MX10, MX40, MX80, MX104, MX240, MX480, MX960, MX2010,and MX2020S-MIC-3D-8CHDS3License to support full-scale Layer 3 routes and Layer3 VPNMX5, MX10, MX40, and MX80S-MX80-ADV-RLicense to support 256K routesMX104S-MX104-ADV-R1License to support scaling Layer 3 and VPN routes to1 million or more entries on MX104 platformsMX104S-MX104-ADV-R2License to support full-scale Layer 3 routes and Layer3 VPN on each slot for MPC-3D-16XGE-SFPPMX240, MX480, MX960, MX2010, and MX2020S-MPC-3D-16XGE-ADV-RLicense to support full-scale Layer 3 routes and Layer3 VPN on each slot for port queuing MPCsMX240, MX480, MX960, MX2010, and MX2020S-MPC-3D-PQ-ADV-RLicense to support Precision Timing Protocol (PTP)MX204, MX240, MX480, MX960, MX10003, MX10008, and MX10016S-MPC-3D-PTPLicense to support full-scale Layer 3 routes and Layer3 VPN on each slot for hierarchical quality of service (HQoS) MPCsMX240, MX480, MX960, MX2010, and MX2020S-MPC-3D-VQ-ADV-RSubscriber Management Feature Pack LicenseMX5, MX10, MX40, and MX80S-MX80-SA-FP(Includes S-LNS-IN)MX104S-MX104-SA-FP(Includes S-LNS-IN)Subscriber Access Feature Pack LicenseMX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-SA-FPSubscriber Service Management Feature PacketLicense—RADIUS and SRC-based service activation and deactivationper-service accounting featuresMX5, MX10, MX40, and MX80S-MX80-SSM-FPMX104S-MX104-SSM-FPMX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-SSM-FPUpgrade to Traffic Direct Advanced (per MS-DPC)MX960S-MX-TD-UPGLicense to run one instance of the NAT software on oneNPU per MS-DPCMX240, MX480, and MX960S-NATLicense to support inline NAT software on MX5, MX10,MX40, MX80, MX104MX5, MX10, MX40, MX80, and MX104S-NAT-IN-MX5-104 (Replaces S-NAT-IN-MX40-MX80 and S-NAT-IN-MX5-MX10)License to run one instance of the NAT software on oneNPU per MS-MIC, MS-DPC, or MS-MPCMX Series RoutersS-NAT-NPU (Replaces S-NAT-IN-MX40-MX80-UPG)License to run NAT using any MPC in an MX ChassisMX240, MX480, and MX960S-NAT-IN-MX-CHASSISSubscriber Access Feature Pack License Scaling (4000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-4KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 4000 through 8000 subscribersMX5, MX10,MX40, MX80, MX104, MX204, MX240, MX480, MX960, MX2008, MX2010, MX2020,and MX10003S-SA-UP-8KSubscriber Access Feature Pack License Scaling (8000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-8KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 8000 through 16,000 subscribersMX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-UP-16KSubscriber Access Feature Pack License Scaling (16,000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-16KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 16,000 through 32,000 subscribersMX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-UP-32KSubscriber Access Feature Pack License Scaling (32,000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-32KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 32,000 through 64,000 subscribersMX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-UP-64KSubscriber Access Feature Pack License Scaling (64,000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-64KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 64,000 through 96,000 subscribersMX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-UP-96KSubscriber Access Feature Pack License Scaling (96,000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-96KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 96,000 through 128,000 subscribersMX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-UP-128KSubscriber Access Feature Pack License Scaling (128,000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-128KUpgrade license—Subscriber Access Feature Packscaling license upgrade from 128,000 through 256,000 subscribersMX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-UP-256KSubscriber Access Feature Pack License Scaling (256,000)MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2008, MX2010, MX2020, and MX10003S-SA-256KSoftware License for Secure Flow Mirroring Service (FlowTap)(does not require MS-DPC)MX80, MX104, MX240, MX480, and MX960S-SFM-FLOWTAP-INLicense to run one instance of the SFW and software ona MS-DPCMX960, MX480, and MX240S-SFWSoftware license for one member of an MX Virtual ChassisMX240, MX480, MX960, MX2008, MX2010, MX2020, and MX10003S-VCRUpgrade license—from MX10 to equivalent of MX40;allows additional 2x10G fixed ports to be used on the MX10 routerMX10-TMX10-40-UPGUpgrade license—from MX10 to equivalent of MX80;allows additional 4x10G fixed ports to be used on the MX10 routerMX10-TMX10-80-UPGUpgrade license—from MX40 to equivalent of MX80;allows additional 2x10G fixed ports to be used on the MX40 routerMX40-TMX40-80-UPGUpgrade license—from MX5 to equivalent of MX10;allows second MIC slot to be used on the MX5 routerMX5-TMX5-10-UPGUpgrade license—from MX5 to equivalent of MX40;allows second MIC slot and 2x10G fixed ports to be used on the MX5routerMX5-TMX5-40-UPGUpgrade license—from MX5 to equivalent of MX80.Allows second MIC slot and 4x10G fixed ports to be used on the MX5routerMX5-TMX5-80-UPGLicense to use MX as Controller or Aggregation devicefor Junos Fusion. One license per MX is needed.MX5, MX10, MX40, MX80, MX104, MX204, MX240, MX480, MX960,MX2010, MX2020, and MX10003S-MX-AD-FUSION-LICLicense to run any supported EX4300 model as a satellitedevice in Junos Fusion mode. One license per EX4300 is neededMX240, MX480, MX960, MX2010, and MX2020S-MX-SAT-EX4300License to run any supported QFX5100 model as a satellitedevice in Junos Fusion mode. One license per QFX5100 is neededMX240, MX480, MX960, MX2010, and MX2020S-MX-SAT-QFX5100Subscriber Traffic Lawful Intercept Feature Pack LicenseMX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-SSP-FPJunos BB Policy Enforcement Feature License for dynamicsubscriber authentication and authorization using NASREQ (1 per chassis)MX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-BB-NASREQJunos BB Policy Enforcement feature license for PCRFcommunications using 3GPP Gx and Gx+ (1 per chassis)MX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-BB-GXJunos BB Policy Enforcement feature license for onlinecharging using 3GPP Gy interface (1 per chassis)MX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-BB-GYSoftware License for Inline L2TP LNS (MX204, MX240/480/960,MX2008, MX2010/2020) (1 per chassis)MX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, andMX10003S-LNS-INSoftware Features That Require Licenses on M Series RoutersOnly
Table 3 lists the licensesyou can purchase for each M Series software feature. Each licenseallows you to run the specified software feature on a single device.For information about how to purchase a software license, contactyour Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.Table 3: Junos OS Feature License ModelNumber for M Series RoutersLicensed Software FeatureSupported DevicesModel NumberJ-Flow accounting license on Integrated Adaptive ServicesModule (ASM) and Integrated Multiservices ModuleM7iS-ACCT-BBSecurity Services license on ASM and Integrated MultiservicesModuleM7iS-ES-BBLayer 2 Tunneling Protocol (L2TP) L2TP Network Server(LNS) license for 16000 sessions on Multiservices PICM120S-LNS-16KL2TP LNS license Upgrade—from 8000 to 16000 sessions on Multiservices PICM120S-LNS-16K-UPGL2TP LNS license for 2000 sessions on AS PIC or IntegratedAdaptive Services Module and Multiservices PICM7i, M10i, and M120S-LNS-2KL2TP LNS license for 4000 sessions on AS PIC or IntegratedAdaptive Services Module and Multiservices PICM7i, M10i, and M120S-LNS-4KL2TP LNS license Upgrade—from 2000 to 4000 sessionson AS PIC or Integrated Adaptive Services Module and MultiservicesPICM7i, M10i, and M120S-LNS-4K-UPGL2TP LNS license for 8000 sessions on Multiservices PICM7i, M10i, and M120S-LNS-8KL2TP LNS license Upgrade—from 4000 to 8000 sessions on AS PIC and Multiservices PICM7i, M10i, and M120S-LNS-8K-UPGLink services software license on integrated ASM andIntegrated Multi Services Module—up to 4 ML bundlesM7iS-LSSL-BBNAT, FW license on Integrated ASM and Integrated MultiServices Module: Multi instanceM7iS-NAT-FW-MULTI-BBNAT, FW license on Integrated ASM and Integrated MultiServices Module: Single instanceM7iS-NAT-FW-SINGLE-BBTunnel services software license for AS PIC and MultiservicesPIC (chassis license)M7i and M10iS-TUNNELLicense Modes for PTX Series Routers
PTX Series routers are available in two license variants:IR and R. Depending on the license purchased, the router offers fullIP or LSR.Table 4 describes the two licensevariants for the PTX1000.Table 4: LicenseVariants for the PTX1000LicenseDescriptionScale RestictionsIRScaled up LSR and peering- Up to 1 million routes in the forwarding information base(FIB)
- Up to 6 million routes in the routing information base(RIB)
- Up to 256 routing instances of the virtual routing andforwarding (VRF) instance type
- Up to 128 thousand LSPs
RFull IP coreNoneTheLicenseDescriptionScale RestrictionsIRScaled up LSR and peering- Up to 2 million routes in the forwarding information base(FIB)
- Up to 6 million routes in the routing information base(RIB)
- Up to 256 routing instances of the virtual routing andforwarding (VRF) instance type
- Up to 128 thousand LSPs
RFull IP coreNoneFor the PTX3000 and PTX5000, If you purchase two FPCs: one withan IR license and one with an R license. After the FPCs are installedon a router, both FPCs appear identical. To distinguish between anFPC with an IR license and an FPC with an R license after the FPCis installed on the router, you must configure the license mode basedon the license purchased. For instance, if you purchased an FPC withthe IR license, you must configure the license mode for that FPC asIR. The license mode settings are set specific to each FPC slot. Ifthe FPC is installed in a different slot, or moved to another device,the license mode settings must be reconfigured on the new slot ordevice. Also, the license mode settings previously configured mustbe deleted.The license mode settings are used only to provide information.You cannot set or alter the license of the FPC by configuring thelicense mode.To view the current license mode settings, from the configurationmode, use the showchassis hardware extensive command. To delete the existing licensemode settings, use theLicenseHow to IdentifyDescriptionbaseNo special suffix in the license name.- All Layer 2, Layer 2.5, and Layer 3 features.
- Up to 32 Layer 3 routing instances of the virtual routingand forwarding (VRF) instance. The VRF support includes Layer 3 VPN(L3VPN).
- Up to 2 million routes in the forwarding information base(FIB), provided there is hardware support. (FIB is also known as forwardingtable.)
- Up to 6 million routes in the routing information base(RIB), also known as routing table.
IR-IR suffix in the license name.- All Layer 2, Layer 2.5, and Layer 3 features.
- Up to 32 Layer 3 routing instances of the virtual routingand forwarding (VRF) instance. The VRF support includes Layer 3 VPN(L3VPN).
R-R suffix in the license name.Full-scale Layer 2, Layer 2.5, and Layer 3 features.Scale is determined by the hardware capabilities.Suppose you have purchased two MPC4Es: one with IR license andone with R license. After the MPCs are installed on a router, bothMPCs appear identical. To distinguish between an MPC with an IR licenseand an MPC with an R license after the MPC is installed on the router,you must configure the license mode based on the license purchased.For instance, if you have purchased an MPC with the IR license, youmust configure the license mode for that MPC as IR. The license modesettings are set specific to each MPC slot. If the MPC is installedin a different slot, or moved to another device, the license modesettings must be reconfigured on the new slot or device. Also, thelicense mode settings previously configured must be deleted.The license mode settings are used only to provide information.You cannot set or alter the license of the MPC by configuring thelicense mode.To view the current license mode settings on an MPC, from theconfiguration mode, use the show chassis hardware extensive command.To delete the existing license mode settings on an MPC, use the Card notonline or TRIO/DPC based.To configure the license mode for MPCs on MX Series routers:- Configure the license mode for the MPC in a specifiedMPC slot. If the MPC has an IR license, configure the license mode asIR. If the MPC has an R license, configure the license mode of theMPC as R.
- In configuration mode, verify the configuration, for example:
- After verifying the license mode, commit the changes byusing the
- Configure the license mode R for the MPC5E in slot 4:
- In configuration mode, verify the configuration.
- After verifying the license mode, commit the changes byusing the
- Delete the license mode for the MPC5E.
- In configuration mode, verify the configuration.
- After verifying the license mode, commit the changes byusing the
- Configure the license mode R for the MPC5E.
- In configuration mode, verify the configuration.
- After verifying the license mode, commit the changes byusing the show chassis hardwareextensive command.
Meaning
License mode 4.Verifying That the Configured License Mode Is Deleted
Purpose
To verify that the configured license mode is deleted.Action
From operational mode, enter the 4.Verifying That the License Mode Is Configured for MPC5E inSlot 2
Purpose
To verify that license mode R is configured for theMPC5E in slot 2.Juniper License Activation Code
Action
From operational mode, enter the R is configuredfor the MPC5E in slot scale-subscriber licensed featurewith a later release-tied upgrade license key installed. If you requesta software upgrade to the later release of Junos OS, the softwareupgrade operation fails and the following error message is displayed:In this example, to successfully upgrade to the later releaseof Junos OS, the release number included in the upgrade license keyshould be greater than or equal to the later release number. Also,you can perform software upgrades up to the previous release withoutany additional license keys to retain the existing scale limit.When you install a release-tied license, the following apply:- You can purchase an upgrade capacity license only if abase capacity license for the same scale-tier has already been generatedor purchased.
- You cannot install an upgrade license if the capacitydoes not match any of the existing base capacity licenses on the system.
- The license installation fails when you install a lowerrelease number license key on a higher software release number.
- A release-tied license can be installed on a Junos OSrelease number that is lower than or equal to the release number includedin the license key. For example, a 12.2 license key is valid on JunosOS Release 12.1.
- An upgrade license is valid only on the target releasenumber specified in the license key, but can be installed on an earlierJunos OS release. For example, a 4 K scale-tier upgrade license forJunos OS Release 12.2 can be installed on an earlier release, andthe installed count of licenses remains unaltered.
- Release-tied licenses of the previous release are notdeleted on upgrading Junos OS to a newer release version.
Licensable Ports on MX5, MX10, andMX40 Routers
Starting with Junos OS Release 12.2, license keys are availableto enhance the port capacity on MX5, MX10, and MX40 routers up tothe port capacity of an MX80 router. The MX5, MX10, and MX40 routersare derived from the modular MX80 chassis with similar slot and portassignments, and provide all functionality available on an MX80 router,but at a lower capacity. Restricting port capacity is achieved bymaking a set of MIC slots and ports licensable. MICs without a licenseare locked, and are unlocked or made usable by installing appropriateupgrade licenses.The base capacity of a router is identified by the Ideepromassembly ID (I2C ID), which defines the board type. However, the JunosOS licensing infrastructure allows the use of restricted ports withouta license for a grace period of 30 days. After the grace period expires,the router reverts back to the base capacity if no upgrade licenseis purchased and installed for the locked ports. The I2C ID alongwith an upgrade license determine the final capacity of an MX5, MX10,or MX40 router.The MX5, MX10, MX40, and MX80 routers support the followingtypes of MICs:- A built-in 10-Gigabit Ethernet MIC with four 10-GigabitEthernet ports
- Two front-pluggable MICs
A feature ID is assigned to every license upgrade for enhancingport capacity. Table 7 displays the chassis types and their associated port capacity, I2CID, base capacity, feature ID, feature name, and the final capacityafter a license upgrade.Table 7: UpgradeLicenses for Enhancing Port CapacityChassis TypePort CapacityI2C IDBase CapacityFeature ID and Feature NameUpgrade CapacityMX520G0x556- 1/MIC0
f1—MX5 to MX10 upgradeSlot 1 and 2- 1/MIC0
- 1/MIC1
MX1040G0x555- 1/MIC0
- 1/MIC1
f2—MX10 to MX40 upgradeSlot 2 and first 2 ports on Slot 0- 1/MIC1
- First 2 ports on 0/MIC0
MX4060G0x554- 1/MIC0
- 1/MIC1
- First 2 ports on 0/MIC0
f3—MX40 to MX80 upgradeSlot 2 and all ports on Slot 0- 1/MIC1
- All 4 ports on 0/MIC0
When installing an upgrade license for enhancing port capacityon MX5, MX10 and MX40 routers, consider the following:- To upgrade an MX5 router to MX80 router capacity, licensesfor all three features (f1, f2, f3) must be installed. All three featurescan be provided in a single license key.
- To upgrade an MX10 router to MX40 router capacity, installinga license key with f2 feature is sufficient.
- Non-applicable feature IDs in a license key reject theupgrade license. For example:
- An f1 feature ID on an MX10 upgrade license key rejectsthe license.
- Feature IDs f1 and f2 on an MX40 upgrade license key rejectthe entire license.
Port Activation on MX104 Routers
Starting with Junos OS Release 13.3, license keys are availableto activate the ports on the MX104 router. MX104 routers have fourbuilt-in ports. By default, in the absence of valid licenses, allfour built-in ports are deactivated. By installing licenses, you canactivate any two of the four or all of the four built-in ports. Forinstance, you can install a license to activate the first two built-inports (xe-2/0/0 and xe-2/0/1) or you can install a license to activatethe next two built-in ports (xe-2/0/2 and xe-2/0/3). You can alsoinstall a license to activate all four built-in ports (xe-2/0/0, xe-2/0/1,xe-2/0/2, and xe-2/0/3). If you have already activated two of thebuilt-in ports, you can install an additional license to activatethe other two built-in ports on the MX104 router.A feature ID is assigned to every license for activating thebuilt-in ports on the MX104 router. The port license model with thefeature ID is described in Table 8.Table 8: Port Activation License Model for MX104 RoutersFeature IDFeature NameFunctionalityF1MX104 2X10G Port Activate (0 and 1)Ability to activate first two built-in ports (xe-2/0/0 and xe-2/0/1)F2MX104 2X10G Port Activate (2 and 3)Ability to activate next two built-in ports (xe-2/0/2 and xe-2/0/3)Both the features are also provided in a single license keyfor ease of use. To activate all four ports, you must either installthe licenses for both the features listed in Table 8 or the single licensekey for both features. If you install the single license key whenfeature IDs F1 and F2 are already installed, the license does notget rejected. Also, MX104 routers do not support the graceful licenseexpiry policy. A graceful license expiry policy allows the use ofa feature for a certain period of time (usually a grace period of30 days), and reverts if the license for that feature is not installedafter the grace period.See also
Subscriber Access Licensing Overview
To enable some Juniper Networks Junos OS features or routerscaling levels, you might have to purchase, install, and manage separatesoftware license packs. The presence on the router of the appropriatesoftware license keys (passwords) determines whether you can configureand use certain features or configure a feature to a predeterminedscale.For the latest information about subscriber access licensing,contact your Juniper Networks sales representative at https://www.juniper.net/in/en/contact-us/.Subscriber Secure Policy Licensing Requirements
To enable and use subscriber secure policy, you must installand properly configure the Subscriber Secure Policy license.See also
Address-Assignment Pools Licensing Requirements
The address-assignment pool feature is part of the Junos OSSubscriber Management Feature Pack license. You must install and properlyconfigure the license to meet the requirements for using the address-assignmentpool feature.Related Documentation
DescriptionStarting in Junos OSRelease 16.1R1, after the completion of the 30 day grace period, DHCPbindings on MX series devices are limited to 10. This counts againstbroadband scale licenses S-MX104-SA-FP and S-SA-4K.Starting in Junos OS Release 16.1, there is also a base variant,making a total of three licence variants.Starting with JunosOS Release 14.2, you can set the license mode for enhanced MPCs suchas MPC4E, MPC5E, and MPC6. - Initiate a failover to change node 1 (secondary node)to be the primary node: