1010520 - netflows for windows licensing - lpsync1.private.scl3.mozilla.com

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[Chris Knowles [:cknowles]]

Need some netflows opened up for lpsync1.private.scl3.mozilla.com to reach kms1.ad.mozilla.com on TCP port 1688 - to allow for windows activation to occur.

If you've got questions/comments, please let me know.

CJK

Comment 1

[Dave Curado :dcurado]

working on this...

Comment 2

[Dave Curado :dcurado]

Hmm, there is a policy in place for this already.
It allows anything in the vlan you're coming from to the kms host for the kms protocol.

  From zone: private, To zone: db
  Source addresses:
    any-ipv4: 0.0.0.0/0 
    any-ipv6: ::/0
  Destination addresses:
    kms1.ad: 10.22.69.24/32
  Application: kms
    IP protocol: tcp, ALG: 0, Inactivity timeout: 1800
      Source port range: [0-0] 
      Destination port range: [1688-1688]

Is this not working? 
Thanks -- Dave

Comment 3

[Chris Knowles [:cknowles]]

It is not working.  In  the past it's been due to netflows, hence this ticket, but apparently not this time.

cc'ing Q on this, as he's helped in the past.  

For the record, I've done the following:

slmgr.exe kms1.ad.mozilla.com /ipk <the key for 2k8r2>
slmgr.exe kms1.ad.mozilla.com /skms 1688 
slmgr.exe kms1.ad.mozilla.com /ato

Get errors connecting to remote server.

CJK

Comment 4

[Q]

This worked for me using the publicly accessible key YC6KT-GKW9T-YTKYR-T4X34-R7VHC from here: http://technet.microsoft.com/en-us/library/jj612867.aspx.

I added svr dns records from kms so the commands should be easier as such:

slmgr /ipk YC6KT-GKW9T-YTKYR-T4X34-R7VHC
slmgr /ato

Comment 5

[Chris Knowles [:cknowles]]

Verified, it's working - sorry for the misdirected ticket.

Comment 6

[Dave Curado :dcurado]

no problem!  Glad it is working for you =-)