{"id":406,"date":"2019-09-11T15:34:04","date_gmt":"2019-09-11T19:34:04","guid":{"rendered":"http:\/\/localhost:8080\/?p=406"},"modified":"2025-07-31T16:35:00","modified_gmt":"2025-07-31T20:35:00","slug":"license-server-tunnel","status":"publish","type":"post","link":"https:\/\/knowledgebasev.kinsta.cloud\/?p=406","title":{"rendered":"License Server Tunnel"},"content":{"rendered":"<h2>Introduction<\/h2>\n<p>If you are unfamiliar with the terminology on this page, please contact <a title=\"Customer Support\" href=\"\/?page_id=115\">Sabalcore Suppor<\/a>t directly for assistance in setting up your license. If you already have a local license server and a valid license file for your software, it is possible to run your application on\u00a0Sabalcore by connecting to your license server to your Sabalcore account, even if your license server is behind a firewall. Follow these\u00a0instructions to enable a secure and encrypted connection between Sabalcore and your local license server. Our service\u00a0will only allow connections to your license server from your account so only that account will be able to use the license at Sabalcore. These instructions are for Flex-style licenses.\u00a0Contact support@sabalcore.com if your software uses a different licensing style.\u00a0If your license agreement does not allow this type of usage, you can also temporarily transfer your license to our site.<\/p>\n<p>In this section you will find:<\/p>\n<ul>\n<li>Methods of Remote Connections<\/li>\n<li>Request a\u00a0VPN Tunnel\n<ul>\n<li>Direct<\/li>\n<li>Routed<\/li>\n<\/ul>\n<\/li>\n<li>Setting up the SSH Tunnel\n<ul>\n<li>Special Instructions when using SSH Tunnel for ANSYS and STAR-CCM+<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h4>Terminology<\/h4>\n<p>&#8220;license server&#8221; &#8211; your local computer or server on your LAN where the software license is installed. Typically the software license is served up by a Flex-style license manager.<\/p>\n<p>&#8220;VPN or OpenVPN&#8221; &#8211;\u00a0OpenVPN provides flexible VPN solutions to secure data communications for networking Cloud data centers. It uses\u00a0AES-256-CBC cipher for encryption, HMAC-SHA256 for authentication, Diffie-Hellman Group 1 4, and 2048-bit RSA key length.<\/p>\n<h2>Methods of Remote Connections<\/h2>\n<p>There are two secure methods for connecting your license server &#8211; <strong>VPN<\/strong> or <strong>SSH Tunneling<\/strong>.<\/p>\n<h3>VPN<\/h3>\n<p>A OpenVPN Client (OpenVPN is a commercial grade <a href=\"https:\/\/openvpn.net\/\" target=\"_blank\">VPN solution<\/a>) will be created by Sabalcore specifically for your server\u00a0which hosts\u00a0your license. It is typically installed on your server. It will provide a private connect\u00a0between\u00a0your license\u00a0server\u00a0and your account at Sabalcore. The user controls the VPN connection from their server.\u00a0When running a job at Sabalcore, the license is checked-out over the VPN. Only you have access to the VPN.<\/p>\n<p>There are two VPN scenarios &#8211;\u00a0Direct or Routed<\/p>\n<h4>VPN Direct<\/h4>\n<p>This is the most common and most stable scenario. The illustration below illustrates the direct connection.\u00a0 In this scenario, the Sabalcore VPN client is installed directly on the license server and the system administrator controls the connection by starting or stopping the VPN. When the VPN is active,\u00a0the user (or multiple users from your organization) can\u00a0access\u00a0the license from their Sabalcore account or locally. Only license data traverses the VPN. When running a job at Sabalcore, the license is automatically\u00a0checked-out through the VPN and the job runs.<\/p>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 1px;\"><img decoding=\"async\" class=\"style1\" src=\"wp-content\/uploads\/vpn_tunnel-kb.jpg\" alt=\"\" \/><\/p>\n<h4>VPN Routed<\/h4>\n<p>The illustration below illustrates the routed connection. In this scenario, the Sabalcore VPN client is installed on the user&#8217;s PC located on their local LAN. The user controls the connection by starting or stopping the VPN. When the VPN is active, only the user can access the license from their Sabalcore account. Only license data traverses the VPN. When running a job at Sabalcore, the license check-out is automatically routed through the users PC. This is less optimal than VPN Direct. It requires the user&#8217;s host to be up the entire time.<\/p>\n<p>&nbsp;<\/p>\n<p style=\"padding-left: 1px;\"><img decoding=\"async\" class=\"style1\" src=\"wp-content\/uploads\/vpn_tunnel-kb-routed.jpg\" alt=\"\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<h4>SSH<\/h4>\n<p>The illustration below shows connecting the License Server through a workstation using <strong>Secure Shell (SSH)<\/strong>. SSH is integrated into the Sabalcore Secure Client so no special software is required. SSH uses 256bit AES encryption.\u00a0 In this scenario, only the user can access the license from their Sabalcore account. When running a job at Sabalcore, the license check-out is automatically routed through the users PC using SSH.<\/p>\n<p style=\"padding-left: 1px;\"><img decoding=\"async\" class=\"style1\" src=\"wp-content\/uploads\/ssh_tunnel-kb.jpg\" alt=\"\" \/><\/p>\n<h3><strong><span style=\"font-size: 1em;\">Choose which method to use &#8211; VPN or SSH Tunneling<\/span><\/strong><\/h3>\n<p>VPN is the preferred method for connecting to your local license server. However, if you do not have access to your local license server directly, then SSH Tunneling is the only other option. SSH tunneling will require that the PC you are using to access Sabalcore also has access to your license server on your local network (i.e. you can use the license). You cannot use VPN <em>and<\/em> SSH Tunneling for the same license server. You must pick one or the other.<\/p>\n<p>1) VPN &#8211; if you choose VPN then read the section &#8220;Setting up the VPN Tunnel&#8221; below.<\/p>\n<p>2) SSH Tunneling &#8211; if you choose SSH then read the section &#8220;Setting up the SSH Tunnel&#8221; below.<\/p>\n<p><span style=\"font-size: 13px;\">After we have received the required information about your license server, we will setup the service to allow\u00a0secure connections to your licenses. You will receive an email when this has been completed.\u00a0<\/span><span style=\"text-decoration: underline;\">Follow the instructions in the email first.\u00a0<\/span><span style=\"font-size: 13px;\">After following the instructions in the email, you may connect to your licenses server on your next login.<\/span><\/p>\n<h2>Request a\u00a0VPN Tunnel<\/h2>\n<h3>Provide your license server details<\/h3>\n<p>In order to setup the VPN connection between Sabalcore and your license server, we need to know some information\u00a0about your license server in order to generate a node-locked VPN client for your server. Below is a list of the required information:<\/p>\n<ul>\n<li>Operating System (for example Windows 10, Linux, Mac).<\/li>\n<li>License server host name as it appears in the license file. This must be a unique name. It can not be &#8220;localhost&#8221;.<\/li>\n<li>Method you&#8217;d like to use, direct or routed.<\/li>\n<\/ul>\n<p>Email support@sabalcore.com the above information along with your Sabalcore account ID.<\/p>\n<h3><span style=\"font-size: 0.75em;\">Direct &#8211; Installing the OpenVPN client directly on your license server<\/span><\/h3>\n<p>After we\u00a0setup the service\u00a0you will receive an email with instructions when your server specific OpenVPN client is ready. You will need use the ssClient to install the OpenVPN client. You only need to use the ssClient to install the VPN once. <em>NOTE: the VPN client will <span style=\"text-decoration: underline;\">node-lock to the server it is first installed on<\/span>. If you inadvertently install it on the wrong server or if you ever need to move it to a different server, you will need notify Support so that we can refresh it. <\/em><\/p>\n<p>You do not need to always log in using the ssClient when running the VPN. To install, run the ssClient directly on the <span style=\"text-decoration: underline;\">license server<\/span> and log into your account. Then select &#8220;Tunnels -&gt; \u00a0Install OpenVPN&#8221; from the ssClient menu. Follow instructions at the prompts.<\/p>\n<p>After it is installed, you&#8217;ll need to launch the VPN client by double clicking the OpenVPN icon on your desktop or from the start menu as administrator. <span style=\"text-decoration: underline;\">You must launch it using an admin account.<\/span> When asked, accept the new profile. If you are prompted for a hostname, username, or password there has been an error. Contact Sabalcore support.<\/p>\n<p>Double click the OpenVPN client and choose<\/p>\n<p style=\"padding-left: 30px;\">&#8220;Connect to the vpn-melb.sabalcore.com&#8221;.<\/p>\n<p>After a few moments, the VPN should connect. From this point, you only need to start the OpenVPN client on your license server when you want the tunnel up and active. You do not need to use the ssClient from the license server any longer.<\/p>\n<p>If you have a\u00a0 local firewall on your license server, be sure it is not blocking incoming connections from the VPN interface (TAP adapter). It would be simplest to set the firewall to allow connections from the VPN interface. Alternatively, you can set it to allow connections from the <a href=\"http:\/\/172.27.224.0\/20\" target=\"_blank\">172.27.224.0\/20<\/a> network.<\/p>\n<p>Next, log into your Sabalcore account from any computer other or workstation as you normally would, and start your software such as STAR-CCM+ or Ansys. Just starting the software GUI will normally trigger the license verification. The software should connect to your license server and you should not get any errors or license warnings. If you experience an issue, please contact support.<\/p>\n<h3><span style=\"font-size: 0.75em;\">Routed &#8211; Installing the OpenVPN client\u00a0on a Windows\u00a0 PC networked to a license server<\/span><\/h3>\n<p>After we\u00a0setup the service\u00a0you will receive an email with instructions when your server specific OpenVPN client is ready. You will need use the ssClient to install the OpenVPN client. To install,\u00a0log into your account. Then select &#8220;Tunnels -&gt; \u00a0Install OpenVPN&#8221; from the ssClient menu. Follow instructions at the prompts.<\/p>\n<p>After it is installed, you&#8217;ll need to launch the VPN client by double clicking the OpenVPN icon on your desktop or from the start menu as administrator.\u00a0<span style=\"text-decoration: underline;\">You must launch it using an admin account.<\/span>\u00a0When asked, accept the new profile. If you are prompted for a hostname, username, or password there has been an error. Contact Sabalcore support.<\/p>\n<ol>\n<li>Double click the OpenVPN client and choose &#8220;Connect to the login.sabalcore.com&#8221;.<\/li>\n<li>After a few moments, the VPN should connect.<\/li>\n<li>Next, configure your <span style=\"text-decoration: underline;\"><span style=\"color: #ff0000;\"><strong><a style=\"color: #ff0000; text-decoration: underline;\" href=\"\/wp-content\/uploads\/Sabalcore-license_server_routing.pdf\">Windows PC using these instructions.\u00a0<\/a><\/strong><\/span><\/span><\/li>\n<\/ol>\n<p>From this point, you\u00a0will need to start the OpenVPN client on\u00a0your PC to enable the license\u00a0tunnel.<\/p>\n<p>Next, log into your Sabalcore account and start your software such as STAR-CCM+ or Ansys.\u00a0Just starting the software GUI will normally trigger the license verification. The software should connect to your license server and you should not get any errors or license warnings. If you experience an issue, please contact your network&#8217;s system administrator and Sabalcore support.<\/p>\n<h2>Setting up the SSH Tunnel<\/h2>\n<p>If you do not have direct access to your local license server, then SSH Tunneling is the only option. SSH tunneling will require that the PC you are using to access Sabalcore also has access to your license server on your local network (i.e. you can use the license from your workstation).\u00a0In order to setup the connection between Sabalcore and your license server, we need to know some information\u00a0about your license server and license file. Below is a list of the required information:<\/p>\n<ul>\n<li>The operating system your license server is running (i.e. Windows, Linux, Mac).<\/li>\n<li>Local Server Port Number (LSPN) &#8211; \u00a0This is the listening port number of the license file server. This is usually the last number on the SERVER line of your license file. For example. If your license file contains the line \u201cSERVER host 00aa11bb22cc 2001\u201d, then 2001 is the LSPN.<\/li>\n<li>License Server Hostname (LSH) &#8211; \u00a0This is also listed on the SERVER line of your license file and is usually the same as the hostname of the computer on which the license server is running.<\/li>\n<li>Local Vendor Port Number (LVPN) &#8211; \u00a0This the listening port number of the vendor daemon. This is usually specified on the \u201cVENDOR\u201d line of your license file. For example, \u201cVENDOR aplmd PORT=2201\u201d. If you have a VENDOR line, but no port specification, you will need to add one. Sabalcore Support will provide you with the correct port number to use. For example, add \u201cPORT=2201\u201d to the end of your VENDOR line to set the LVPN to 2201. After modifying the license file, please restart your license server. Changing the LVPN should not affect your ability to run the software at your location.<\/li>\n<\/ul>\n<p>Please email the above information to support@sabalcore.com along with your Sabalcore user ID using the email address that was used to register your Sabalcore account with.<\/p>\n<p>At your LAN, if you are not running the license server on your computer,\u00a0then you must be able to connect to the license server from your own computer on your network. If you can run the software on your\u00a0computer, then the local connection to your license server is OK.<\/p>\n<p>To make the connection to your license server, simply select\u00a0\u2018Tunnels -&gt; License Servers\u2019 from the Sabalcore Secure Client menu options. See Figure 1: License Server Setup. Select each of your license\u00a0tunnels and click \u2018Open\u2019 to make the connection. The \u2018[*]\u2019 indicates the tunnel is connected. You can save them\u00a0so they automatically connect each time you login via the \u2018File -&gt; Save Settings\u2019 menu option.<\/p>\n<p style=\"padding-left: 5px;\"><img decoding=\"async\" class=\"style1 aligncenter\" src=\"wp-content\/uploads\/license_tunnel.jpg\" alt=\"\" \/><\/p>\n<p>\u00a0Note that in Fig. 1, two ports are forwarded to the license server. Ports 2345 and 2346 are the local ports on your\u00a0license server and port 3345 and 3346 are the remote ports on scicluster.com. The first line in Fig. 1, corresponds\u00a0to the license file SERVER. In order for the software to find your license file server, you will need to specify its\u00a0location, i.e. PORT@LIC_SERVER. This largely depends on the specific software that you are using. Please refer to\u00a0your software manual for details on specifying the location of your file server. It is common for this to be set in an\u00a0environment variable, e.g. LM_LICENSE_FILE. If this is the case for you software, you can simply add \u201cexport\u00a0LM_LICENSE_FILE=PORT@LIC_SERVER\u201d to your ~\/.bash_profile file where PORT is the remote port number (not\u00a0the local port) for license server on scicluster.com (3345 in Fig. 1) and LIC_SERVER is the hostname of your license\u00a0server (lic_server in Fig. 1). Some software may use a different environment variable name. Other software may\u00a0have a configuration file in which you can specify the license server. Usually, you will not have to specify the\u00a0location of the VENDOR daemon because the license server will communicate this to your software. Specific\u00a0instructions for a few software packages are included below. If you need additionally help, please contact us at\u00a0support@sabalcore.com.<\/p>\n<p>After we have received the required information about your license server, we will setup the service to allow\u00a0secure connections to your licenses. You will receive an email when this has been completed.\u00a0Follow the instructions in the email first.\u00a0After following the instructions in the email, you may connect to your licenses server on your next login.<\/p>\n<div class=\"st-alert st-alert- \">Follow the instructions in the License Tunnel email first. You will receive this email after we&#8217;ve configured your account for the Tunnel.<\/div>\n<h3>Special Instructions when using SSH Tunnel for ANSYS and STAR-CCM+<\/h3>\n<h4>ANSYS\u00a0** This is NOT required if you are using VPN **<\/h4>\n<p>** This is NOT required if you are using VPN ** ANSYS software licensing requires at least 3 ports to be forwarded from scicluster.com to your license server. The\u00a0first port is the ANSYS License Server Port and is found on the SERVER line of your license file and is typically\u00a01055. This corresponds to the ANSYSLMD_LICENSE_FILE variable. You must set this environment variable in your\u00a0~\/.bash_profile by adding the line:<\/p>\n<pre>export ANSYSLMD_LICENSE_FILE=PORT@LIC_SERVER<\/pre>\n<p>Where PORT is the remote port on scicluster.com corresponding to your local license server port and LIC_SERVER\u00a0is the hostname of your license server. Note that the remote port is NOT the same as the local port and will be\u00a0provided to you by Sabalcore Support. The second port is the Local Vendor Port. For ANSYS, this is the port that the ansys vendor daemon (ansyslmd)\u00a0uses. After forwarding this port, you do not need to specify it as the server will communicate this to your software.\u00a0This port must be specified in the license file on the VENDOR line, for example:<\/p>\n<pre>VENDOR ansyslmd port=2346<\/pre>\n<p>Sabalcore Support will provide you with the port number to use here. Changing this port number in your license\u00a0file will not affect your ability to use your license locally. The third port is the ANSYSLI_SERVERS port and is used for ANSYS\u2019s license interconnect server. This port is\u00a0typically 2325 on the license server. You must set this environment variable in your ~\/.bash_profile by adding the\u00a0line:<\/p>\n<pre>export ANSYSLMD_LICENSE_FILE=PORT@LIC_SERVER<\/pre>\n<p>Where PORT is the remote port on scicluster.com corresponding to your local license interconnect server port and\u00a0LIC_SERVER is the hostname of your license server. Note that the remote port is NOT the same as the local port\u00a0and will be provided to you by Sabalcore Support.<\/p>\n<h4>STAR-CCM+\u00a0** This is NOT required if you are using VPN **<\/h4>\n<h5>Power Session License with SSH license tunnel ( ** This is NOT required if you are using VPN Tunnel**)<\/h5>\n<p>STARCCM+ sofware licensing requires at least 2 ports to be forwarded from scicluster.com to your license server.\u00a0The first port is the STARCCM+ License Server Port and is found on the SERVER line of your license file and is\u00a0typically 1999. This corresponds to the CDLMD_LICENSE_FILE variable. You must set this environment variable in\u00a0your ~\/.bash_profile by adding the line:<\/p>\n<pre>export CDLMD_LICENSE_FILE=PORT@LIC_SERVER<\/pre>\n<p>Where PORT is the remote port on scicluster.com corresponding to your local license server port and LIC_SERVER\u00a0is the hostname of your license server. Note that the remote port is NOT the same as the local port and will be\u00a0provided to you by Sabalcore Support. The second port is the Local Vendor Port. For STARCCM+, this is the port that cd-adapco vendor daemon (cdlmd)\u00a0uses. After forwarding this port, you do not need to specify it as the server will communicate this to your software.\u00a0This port must be specified in the license file on the VENDOR line, for example:<\/p>\n<pre>VENDOR cdlmd port=2346<\/pre>\n<p>Sabalcore Support will provide you with the port number to use here. Changing this port number in your license\u00a0file will not affect your ability to use your license locally.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction If you are unfamiliar with the terminology on this page, please contact Sabalcore Support directly for assistance in setting up your license. If you already have a local license server and a valid license file for your software, it is possible to run your application on\u00a0Sabalcore by connecting to your license server to your [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[],"class_list":["post-406","post","type-post","status-publish","format-standard","hentry","category-userguideadvanced"],"_links":{"self":[{"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=\/wp\/v2\/posts\/406","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=406"}],"version-history":[{"count":60,"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=\/wp\/v2\/posts\/406\/revisions"}],"predecessor-version":[{"id":2058,"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=\/wp\/v2\/posts\/406\/revisions\/2058"}],"wp:attachment":[{"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=406"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=406"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/knowledgebasev.kinsta.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=406"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}