Wireless Access

 View Only
last person joined: 19 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Confusion on RF Protect license with AP license

This thread has been viewed 29 times
  • 1.  Confusion on RF Protect license with AP license

    Posted Oct 11, 2021 02:00 PM
    Hi, 

    My customer have a MC model 7205 that purchased with 65 AP licenses, 65 PEF licenses and 65 RF protect licenses. Then, they purchased additional 5 more APs with 5 AP licenses and 5 PEF licenses without RF protect. As per my understanding, AP license should be sufficient for AP to register to the MC right while the PEF will be used as policy and implementation of firewall. And since customer is not using WIDS/WIPS on the MC, why the AP couldn't register to the MC? 

    Below are the licenses usage:

    AP Licenses
    -----------
    Type Number
    ---- ------
    AP Licenses 70
    RF Protect Licenses 65
    PEF Licenses 70
    Overall AP License Limit 65

    AP Usage
    --------
    Type Count
    ---- -----
    Active CAPs 65
    Standby CAPs 0
    RAPs 0
    Remote-node APs 0
    Tunneled nodes 0
    Total APs 65

    Remaining AP Capacity
    ---------------------
    Type Number
    ---- ------
    CAPs 0
    RAPs 0

    ------------------------------
    DarrenPJW
    ------------------------------


  • 2.  RE: Confusion on RF Protect license with AP license

    EMPLOYEE
    Posted Oct 11, 2021 02:24 PM
    The number of licenses must match.  If they do not match, it will be held to the smallest number of the three.  


    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 3.  RE: Confusion on RF Protect license with AP license

    Posted Oct 11, 2021 03:07 PM
    Hi Joseph,

    Eventhough I'm not using WIPS/WIDS or even Spectrum Analyzer? Can I delete or disable the RF protect license to resolve this issue?

    ------------------------------
    DarrenPJW
    ------------------------------



  • 4.  RE: Confusion on RF Protect license with AP license

    EMPLOYEE
    Posted Oct 11, 2021 03:51 PM
    Yes, you can delete the license.  It might require a controller reboot, however

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 5.  RE: Confusion on RF Protect license with AP license

    Posted Oct 11, 2021 10:50 PM
    Hi Joseph,

    I see. Thanks. Actually how can we determine if WIPS/WIDS were used and RF Protect license are required?

    ------------------------------
    DarrenPJW
    ------------------------------



  • 6.  RE: Confusion on RF Protect license with AP license

    EMPLOYEE
    Posted Oct 12, 2021 05:26 AM
    The RF Protect license is not required for client connectivity.  It is used for spectrum analysis and to report on IDS detection and protection.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 7.  RE: Confusion on RF Protect license with AP license

    Posted Oct 12, 2021 07:07 AM
    Hi Joseph,

    Thanks for the update. I have a few questions:

    1. If I deleted RF protect licenses for now, can I apply the same deleted RF protect licenses keys into the controller later on? 
    2. Without the RF protect, the controller can still perform rogue detection and containment as well as interference detection right?

    ------------------------------
    DarrenPJW
    ------------------------------



  • 8.  RE: Confusion on RF Protect license with AP license
    Best Answer

    EMPLOYEE
    Posted Oct 12, 2021 07:42 AM
    1.  Yes.
    2.  Yes.  RF Protect provides support for spectrum, IDS signatures, exotic IDS detection/protection configuration as well as an effective method of rogue protection called "tarpitting".  The base license provides for basic rogue detection and protection via deauths, which is not as effective as tarpitting.  The base license will report on interferring and rogue devices.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 9.  RE: Confusion on RF Protect license with AP license

    Posted Oct 12, 2021 11:07 AM
    Hi Joseph,

    Thank you so much for the insights and clarification. Cleared my doubts :)

    ------------------------------
    DarrenPJW
    ------------------------------