Product and Software: This article applies toall Aruba controllers that run ArubaOS 5.x and later.
The Virtual Internet Access (VIA) client is used to access enterprise networks across the WAN. When a user tries to establish a connection to the controller across the WAN, usually a firewall filters the traffic.
In this case, certain ports must be enabled on the firewall to establish a secure connection.
To establish a VIA connection through the firewall, these ports must be allowed:
For Windows client
TCP: Port 443
UDP: Port 4500
For MAC OS client
UDP: Ports 500, 1701, and 4500
TCP: 1723, 443
IP protocol: 50 (MAC OS has a different IP stack, so you must enable more ports.)
For detailed information about setting up the VIA client, see the ArubaOS 6.1 User Guide, chapter 18.