


{"id":252864,"date":"2023-03-07T14:20:46","date_gmt":"2023-03-07T14:20:46","guid":{"rendered":"\/forum\/forums\/topic\/connecting-ansys-gateway-powered-by-aws-to-your-on-premises-license-server\/"},"modified":"2024-02-16T10:07:03","modified_gmt":"2024-02-16T10:07:03","slug":"connecting-ansys-gateway-powered-by-aws-to-your-on-premises-license-server","status":"closed","type":"topic","link":"https:\/\/innovationspace.ansys.com\/forum\/forums\/topic\/connecting-ansys-gateway-powered-by-aws-to-your-on-premises-license-server\/","title":{"rendered":"Connecting Ansys Gateway Powered by AWS to your on-premises license server"},"content":{"rendered":"<p class=\"MsoNormal\" style=\"text-align: center;line-height: normal\" align=\"center\"><strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif\">Connecting Ansys Gateway Powered by AWS to your on-premises license server<\/span><\/strong><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 24.0pt 0in 9.0pt 0in\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/<\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: black\"> Introduction<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">This article covers the steps required for a customer to set up a connection to an on-premises license server to utilize their floating Ansys software licenses on Ansys Gateway Powered by AWS.<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 24.0pt 0in 9.0pt 0in\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: black\">Setting up IP Forwarding<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">IP forwarding mode is a method that involves the relocation of address and\/or port numbers of a packet and sending it to a new destination. IP forwarding is quick and easy to set up. It is a self-service solution and when configured requires no ongoing maintenance. This is the simplest configuration that allows you to run jobs on Ansys Gateway Powered by AWS using your on-premises licenses. An alternative is to configure a VPN for connectivity of your VPC to your on-premises network to allow direct license checkout.<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">&nbsp;<\/span><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: black\">Prerequisites<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">To set up IP forwarding, you need the following:<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: .5in;text-indent: -.25in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">An IT administrator with access to your company&#8217;s on-premises license server.<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: .5in;text-indent: -.25in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">The public IP address of the on-premises license server or firewall. The IP address must be static.<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: .5in;text-indent: -.25in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">&middot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <\/span><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">A list of associated license and vendor ports:<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: 1.0in;text-indent: -.25in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">o&nbsp;&nbsp;&nbsp; <\/span><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">Ensure that vendor ports are fixed in license files<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: 1.0in;text-indent: -.25in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">o&nbsp;&nbsp;&nbsp; <\/span><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">For Ansys FlexLM licensing these are typically ports 1055,1056, and 2325<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif\">Obtain Information, Update Ports and Restart On-Premises License Server<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">This section lists the steps to be followed on your local on-premises workstation where the license server is hosted.<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 19.5pt 0in 9.0pt 0in\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: black\">Obtain Port Information<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">Let us first obtain the port (license and the vendor) information from the license file and\/or the license logs. For both FlexLM and RLM there are 2 processes that handle license access:<\/span><\/p>\n<ul type=\"disc\">\n<li class=\"MsoNormal\" style=\"color: #464749;line-height: normal;background: white\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">License Server (lmgrd or rlm)<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #464749;line-height: normal;background: white\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Vendor Daemon<\/span><\/li>\n<\/ul>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">For FlexLM, look at the part of the log when the license server was started. It will display information in the following format. You will need to obtain the ports from this part of the log:<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">00:00:00 (lmgrd) FlexNet Licensing () started on <\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">00:00:00 (lmgrd) lmgrd tcp-port <\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">00:00:00 (lmgrd) Started (pid )<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">00:00:00 (lmgrd) using TCP-port <\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 19.5pt 0in 9.0pt 0in\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: #464749\">Update Vendor Ports<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">Each time the license server is restarted the vendor port(s) might change therefore we need to persist a port number to be further used in the Ansys Gateway Powered by AWS IP Filtering setup. Before making changes to the vendor port(s), make sure you temporarily shut down the license server and there are no running jobs.<\/span><\/p>\n<ul type=\"disc\">\n<li class=\"MsoNormal\" style=\"color: #464749;line-height: normal;background: white\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Open the license file in a text editor with admin privileges.<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #464749;line-height: normal;background: white\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Edit the vendor port(s) to assign a fixed port to the vendor daemon. We suggest using port 1056 as an example given below:<\/span><\/li>\n<\/ul>\n<p class=\"MsoNormal\" style=\"line-height: normal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">VENDOR ansyslmd PORT=1056<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 8.25pt 0in 8.25pt 0in\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #464749\">Restart the License Server and Verify Changes<\/span><\/p>\n<ul type=\"disc\">\n<li class=\"MsoNormal\" style=\"color: #464749;line-height: normal;background: white\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">In order to apply the changes, the license server should be restarted<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #464749;line-height: normal;background: white\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Look at the FlexNet license log file and verify if the vendor port is correctly updated<\/span><\/li>\n<\/ul>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 24.0pt 0in 9.0pt 0in\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: #464749\">Ensure Firewall Access<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">Firewalls often cause issues in these setups. Use the tips and guidelines below to ensure that Windows and Linux firewalls as well as company firewalls allow traffic to flow properly.<\/span><\/p>\n<ul type=\"disc\">\n<li class=\"MsoNormal\" style=\"color: #0a0a0a;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">In the&nbsp;<strong>ansyslmd.ini<\/strong>&nbsp;file on the license server, set the ANSYSLI_EXTERNAL_IP entry to the IP of the firewall&#8217;s Internet-facing IP address. Then, restart the license services.<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #0a0a0a;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Set up port forwarding on the main firewall for ports 1055, 1056, and 2325 (for the incoming Ansys IP address).<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #0a0a0a;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">The DNS resolution for the public-facing IP address used in the step above must resolve for both reverse lookups, and the name returned must resolve in a forward lookup to something that will eventually get to the IP address. Trying the DNS name of the firewall in the Cloud Admin interface and your license server may help.<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #0a0a0a;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">The IP and DNS must be static.<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #0a0a0a;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Add a new A-name record to the DNS hosting service to set the public IP address to a fixed DNS name (for example, 127.0.0.1 server.abc.com).<\/span><\/li>\n<li class=\"MsoNormal\" style=\"color: #0a0a0a;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">Use the Fully Qualified Domain Name in the license file (for example, server.abc.com).<\/span><\/li>\n<\/ul>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: white;margin: 24.0pt 0in 9.0pt 0in\"><strong><span style=\"font-size: 16.0pt;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;font-family: 'Times New Roman',serif;color: #464749\">Verify the Connection<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: #0a0a0a\">From a Windows command line, from a VM within your Ansys Gateway Powered by AWS environment, run the following command for each of the three ports (1055, 1056, 2325), changing 127.0.0.1&nbsp;to the DESTINATION IP and the Port value as appropriate:<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: .5in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">powershell -Command &#8220;Test-NetConnection 127.0.0.1 -Port 1055&#8221;<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: .5in;line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">A successful test looks similar to the following:<\/span><\/p>\n<p class=\"MsoNormal\" style=\"margin-left: .5in;line-height: normal\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif\">ComputerName &nbsp; &nbsp; : 127.0.0.1<br \/>&nbsp;<br \/>RemoteAddress &nbsp; &nbsp;: 127.0.0.1<br \/>&nbsp;<br \/>RemotePort &nbsp; &nbsp; &nbsp; : 1055<br \/>&nbsp;<br \/>InterfaceAlias &nbsp; : Loopback Pseudo-Interface 1<br \/>&nbsp;<br \/>SourceAddress &nbsp; &nbsp;: 127.0.0.1<br \/>&nbsp;<br \/>TcpTestSucceeded : True<\/span><\/p>\n<p class=\"MsoNormal\" style=\"line-height: normal;background: #FEFEFE\"><span style=\"font-size: 12.0pt;font-family: 'Times New Roman',serif;color: black\">Once connectivity is successful, the firewalls may be modified to restrict to only the necessary IP addresses to cover your VPC pool of potential IP addresses.<\/span><\/p>\n<p class=\"MsoNormal\"><strong><span style=\"font-size: 16.0pt;line-height: 107%;font-family: 'Times New Roman',serif;color: #ffc000\">\/ <\/span><\/strong><span style=\"font-size: 18.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">Setting up Ansys License Manager for Express Setup&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">With Express Onboarding Setup, since there is no Active Directory, AWS DNS is used for resolving hostnames. For Linux machines the hostname is set appropriately and is of the format ip-x-x-x-x.region.compute.internal. Windows hostname should be similar but Windows OS does not accept &ldquo;.&rdquo; In the hostname. AWS instead creates a dummy hostname of the format &ldquo;EC2AMAZ-xxxxx&rdquo; which is not<\/span><span style=\"font-family: 'Times New Roman',serif\"> <\/span><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">resolvable to an IP address. The hostname displayed on Windows VDI tile on Ansys Gateway interface of the format &ldquo;ansxxx&rdquo; is also a dummy hostname.&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">To address above issue, Ansys License Manager should be configured to use private IP address instead of hostname. Before using the license file to setup Ansys License Manager, ensure that the private IP address of the server hosting the Ansys License Manager is used.&nbsp;&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">&nbsp;<\/span><\/p>\n<ol style=\"margin-top: 0in\" start=\"1\" type=\"1\">\n<li class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">Using the hostname as shown in Ansys License Manager below will not work due to the hostname resolution issue mentioned above. <strong><u>Use private IP address<\/u><\/strong>.<\/span><span style=\"font-family: 'Times New Roman',serif\"> <\/span><a class=\"wp-colorbox-image cboxElement\" href=\"\/forum\/wp-content\/uploads\/sites\/2\/2023\/12\/19-12-2023-1703001178-mceclip0.png\"><img decoding=\"async\" src=\"\/forum\/wp-content\/uploads\/sites\/2\/2023\/12\/19-12-2023-1703001178-mceclip0.png\"><\/a><\/li>\n<li class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">When you receive your license file, you will need to edit the file to replace the server hostname with the private ip address of the license server.<\/span><\/li>\n<li class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">You will also need to add the static port for ansyslmd by adding PORT=1056 on the SERVER line.&nbsp;<\/span><\/li>\n<\/ol>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\"><img decoding=\"async\" src=\"\/forum\/wp-content\/uploads\/sites\/2\/2023\/12\/19-12-2023-1703006481-mceclip0.png\">&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">To summarize, using private IP address for any communication within VPC should work.&nbsp;&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">For cross communication across VPCs, VPCs should be peered. For example, if Ansys License Server is hosted on another region\/VPC, it should be peered with the VPC from which you are trying to connect to the license server.&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-size: 12.0pt;line-height: 107%;font-family: 'Times New Roman',serif\">For communication with a local network, the local network and VPC should be connected via VPN. For example, if Ansys License Server is hosted on a local network, local network and the VPC from which you are trying to connect to the license server should be connected by VPN.&nbsp;&nbsp;<\/span><\/p>\n<p class=\"MsoNormal\"><span style=\"font-family: 'Times New Roman',serif\">&nbsp;<\/span><\/p>\n","protected":false},"template":"","class_list":["post-252864","topic","type-topic","status-closed","hentry"],"aioseo_notices":[],"acf":[],"custom_fields":[{"0":{"_bbp_author_ip":["23.192.164.14"]," _bbp_last_reply_id":["0"]," _bbp_likes_count":["0"],"_btv_view_count":["1935"],"_bbp_likes_count":["3"],"_edit_lock":["1703006402:38365"],"_bbp_topic_status":["answered"],"_bbp_status":["publish"],"_bbp_topic_id":["252864"],"_bbp_forum_id":["233598"],"_bbp_engagement":["197"],"_bbp_voice_count":["1"],"_bbp_reply_count":["0"],"_bbp_last_reply_id":["0"],"_bbp_last_active_id":["252864"],"_bbp_last_active_time":["2023-03-07 14:20:46"]},"test":"mmadore"}],"_links":{"self":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/252864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics"}],"about":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/topics\/252864\/revisions"}],"wp:attachment":[{"href":"https:\/\/innovationspace.ansys.com\/forum\/wp-json\/wp\/v2\/media?parent=252864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}