06-06-2016 08:35 AM
A customer is looking to have users create VPN tunnels on their laptops and then terminate the tunnels on a VPN concentrator on another site, which is not an Aruba device. Am I right in saying in this case they do not require the VIA/VPN licence for the controller?
As I understand it the VIA/VPN licence is only needed if the controller is terminating the tunnel, is that right?
06-06-2016 08:56 AM
Thanks for the reply Tim, so when you say "if you are not using VIA" - I assume you mean if you are not terminating the VPN tunnel on the controller you are not using VIA? Sorry if this seems obvious, but I am new to Aruba.
06-06-2016 09:00 AM
Basic site to site VPNs can be built on the controller without this license.
The only time you need PEFV is if you want to use the VIA client on your end user devices or if you want to customize the VPN tunnel firewall policy for site to site.
If your clients are terminating to a 3rd party VPN concentrator, this is just standard user traffic traversing the controller. Nothing is needed on the Aruba side.
06-07-2016 07:15 AM
Thanks again Tim. 1 last question on this, even though they are terminating the VPN overseas, if they want to apply PEF rules to the controller (i.e. limit to TCP wireless traffic locally and then VPN overseas) would they then require the VPN licence? Or would they just require LIC-PEF?