Product and Software: This article applies to all Aruba controllers and ArubaOS 3.x and RN 3.x and 2.x.
Bridge user: When the SSID or wired port of the AP is configured with forward mode as Bridge, the clients connecting to this SSID are bridge users. These users never show up in controller user table because the traffic of these users never reaches the controller. The traffic is locally bridged.
However, in RN code using Virtual Branch Networking (VBN), a bridge user can be seen in the user table of the controller though they do not consume PEF user licenses.
In normal ArubaOS, bridge users do not show up in the user table on the controller and they do not consume licenses.
Only users in tunnel or split-tunnel modes consume licenses.