Citrix SD-WAN

Centralized licensing

As the network deployments grow with large number of network nodes, managing and licensing appliances becomes cumbersome. To simplify this process for efficient onboarding of the SD-WAN appliances and easy network operations, centralized licensing model for the SD-WAN network has been introduced.

In the new centralized license model, the SD-WAN center web management interface (SD-WAN appliance management and reporting portal), provides licensing services to individual SD-WAN appliances in the network without you having to log in to the appliance.

The SD-WAN center IP address is provided in the SD-WAN appliance GUI under Global > Centralized licensing. This IP address is propagated to individual appliances through the configuration packages or updates. When the IP address is changed, you have to go through the Change Management process to push it appliances. The global setting can be overridden by the local site settings.

The license bandwidth can be selected with the appliance model for Site settings. The WAN links bandwidth is audited against the license selected.

To enable centralized licensing in the SD-WAN appliance GUI:

  1. Navigate to Configuration > Virtual WAN > Configuration Editor. Open an existing virtual WAN configuration package or create configuration package. The configuration package opens.

  2. Navigate to the Global tab. Select Centralized Licensing. Click Enable.

  3. Enter the IP address for the License Server from which you can download and manage SD-WAN licenses. Provide the SD-WAN Center management IP address, so the configuration package for the SD-WAN MCN or branch appliances can download license from SD-WAN Center.

  4. Enter 27000 for the License Server Port which is a default port number. localized image

  5. Click Apply.

  6. Navigate to the Sites tab. Select MCN or Branch site under View Site, depending on the region and site for which you want to manage central licensing.

  7. Select Centralized Licensing. The central licensing options view is displayed. By default, the Local option is selected for the License Server Location. localized image

  8. Click the drop-down menu and select Central to change the default license server location. This displays the IP address and port information you provided for the license server when you enable central licensing in the Global settings. For example,; the license server could be the IP address of the SD-WAN Center managing the appliances in the network. localized image

  9. Choose the Appliance Edition and License Rate depending on the appliances to be installed. Click Apply. localized image Note: You can choose to override the license server information provided in the Global settings of the configuration.

  10. Select Override Global to override global settings. Configure new license server IP address. Retain the default license server port number; 27000. Click Apply. localized image

You can now manage licenses for all the nodes in branch and MCN sites configured for a specific SD-WAN appliance configuration package from the licensing server you configured.

The license server can be an SD-WAN Center management portal which acquires licenses obtained from the network configuration to the sites through the change management process.

License based on bandwidth allocation:

Each appliance can choose a license with bandwidth level greater than or equal to the configured bandwidth. If the configured bandwidth license is not available, the capability for an appliance to choose the next higher bandwidth license is added. This capability is valid for both the centralized and remote license server functionality. For example:

  • If you have three 410–200 Mbps licenses. You would use the same licenses for all bandwidth allocations associated with 410 appliance. Site A (20 Mbps), Site B (50 Mbps), and Site C (200 Mbps) should all be able to use 410–200 Mbps licenses.
  • If you have one each of 410-20 Mbps license and 410–200 Mbps license. Site A is configured to consume 50 Mbps, then Site A can use 410–200 Mbps license.

License grace period:

The grace period allowed is 30 days when the license file or license configuration is removed from the appliance. Grace alerts are supported for Syslog and emails.


When the selected license rate does not match configured WAN link rate, the following message is displayed on the appliance GUI for licensing events.

Message: The total configured permitted rate (LAN to WAN) NNNN (Kbps) must not exceed twice the License Rate which is NNNN (Kbps)

Severity: WARNING

Events: Syslog, Email

Centralized licensing

In this article