Setting FLEXlm to work across a Firewall

Article ID: x224

Applies to: All products
Version: All Versions
Category: Licensing
Created: 11/17/2004
Last Revised: 06/02/2006
Discussion
FLEXlm fully supports Firewall configuration. To configure FLEXlm to work across a Firewall, an open
and available TCP port should be assigned to each SERVER and VENDOR/DAEMON line in the license
file.
Note:

Windows XP SP2 automatically activates the Windows Firewall when installed, preventing
FLEXlm to work properly unless it is configured to work through the Firewall. The problem
is caused by the Firewall not allowing the ports used by the FlexLM service and the license
Daemon from being contacted by the client machines.

To configure the Windows Firewall to allow communication for FlexLM and SRAC daemon

You should first make sure that the COSMOS License Server is stopped before going through this
procedure. If it is running, please stop it first.

1. Open your Network Connections box either by double clicking on your network icon in your
system tray and click the Properties button
or
Click the Start button, go to Settings then Network Connections.
Show me

2. Then double click on your Local Area Connection. Both methods should give you this
dialog box.
3. Click the Properties button.
Show me
4. Click the Advanced tab.
Show me
5. Click the Settings button. Firewall should be set to On.
Show me
6. Click the Exceptions tab.
Show me
7. Click the Add Port button.
Show me
 Name is just a descriptive label for the exception you have made e.g. Port for FlexLM
License Manager service.
Port number needs to be the port used by the license manager (usually 7585), as stated at
the end of the first line of the COSMOS license file..
TCP should be selected.
8. You also need to define another exception for a second port. It is used by the SRAC license
Daemon. First, you have to edit your license file.

Note:

Unless explicitly specified in the VENDOR line of the license file, the port number the SRAC
daemon uses is a random one. Each time the COSMOS License Server is started, the SRAC
daemon uses a different port. Therefore, you will need to fix the port the license daemon
uses by editing your network license typically as shown below to allow the exception to
work:

SERVER SRAC0555 0008743954c1 7585

VENDOR SRAC "C:\Program Files\COSMOS Applications\License\Flexlm\SRAC.EXE"
port=8000
FEATURE DS_ASSEMBLIES SRAC 2.000 6-NOV-0 7 6B95D780941F
FEATURE CW_PARTS SRAC 2.000 6-NOV-0 7 3354161677E1
FEATURE CW_ASSEMBLIES SRAC 2.000 6-NOV-0 7 ABAFFAA89F29
Notice that port=8000 was added at the end of the license daemon line to assign a specific
port to the SRAC.EXE daemon.
Note:

You should make sure no other service is using port 8000 before making this change. If
8000 is in use then select another port number. The NETSTAT command can help find out
which ports are open and in use. Open a DOS prompt and type netstat ? to find how to
use the netstat command.

9. Repeat the procedure in step 7 naming your second exception something like SRAC Daemon
and set the port number to that you used when editing your license file e.g. 8000.
10. Restart the COSMOS License Server and your network license should work just fine.

Note:

For those who prefer to enter a command line instead of going through the dialog boxes, it
is possible to do so. All you have to do is type the following in a command prompt box and
it gets added to the registry.
netsh firewall add portopening protocol=TCP port=xyz name="My description"
Where xyz is the port number you want to open, and the name in quotes is a description,
which can include spaces. For instance:
netsh firewall add portopening protocol=TCP port=7585 name="Port for FlexLM
License Manager service"
netsh firewall add portopening protocol=TCP port=8000 name="Port for SRAC.
exe Daemon - COSMOS Licensing"