Page Comparison

...

Firewall Settings

Communication Between License Server and Client System

Any intermediate firewall as well as the cloud-specific subnet and instance security settings must permit the following ports to the appropriate source systems:

...

• The default zone name can be found with the command firewall-cmd --get--default-zone, a list of all zones can be displayed with the command firewall-cmd --get-zones.
• The parameter permanent writes the command to the respective firewalld configuration files. To add the command to the running firewall, re-run it without the parameter permanent.
• The above simplified sample does not limit the source IP address to the addresses of the license clients. This would require a more sophisticated configuration. Please refer to the documentation of your Linux system.

Communication Between License Server and Cloud Infrastructure

The license server must be able to access information provided by the cloud infrastructure. In particular, it must be able to communicate with the following addresses/systems:

• The metadata server of the cloud environment (169.254.169.254) on OCI, AWS, Azure, and GCP
• If running on AWS, the host iam.amazonaws.com
• If running on GCP, the host www.googleapis.com

Any intermediate firewall as well as the cloud-specific subnet and instance security settings must permit communication with these systems for the VE license server to function properly. See Cloud-Specific Firewall Information for information about the mechanisms used in the different cloud environments, and your Linux firewall documentation for any Linux specific questions.

Charon-SSP VE-Capable Emulator and Management Software

...