Wireless Access

last person joined: 4 hours ago 

Access network design for branch, remote, outdoor and campus locations with Aruba access points, and mobility controllers.
Expand all | Collapse all

lic-sec-2 no AP license?

Jump to Best Answer
  • 1.  lic-sec-2 no AP license?

    Posted Oct 14, 2015 07:21 AM

    Issue w/AP not joining...  Am I missing a license?  I only got two certificates to redeem but AP indicates unlicensed?

     

    (r8-aruba7005-1) #show license-usage ap

     

    AP Licenses

    -----------

    Type                     Number

    ----                     ------

    AP Licenses               0

    RF Protect Licenses       2

    PEF Licenses             2

    Overall AP License Limit 0

     

    AP Usage

    --------

    Type             Count

    ----             -----

    Active CAPs     0

    Standby CAPs     0

    RAPs             0

    Remote-node APs 0

    Tunneled nodes   0

    Total APs       0

     

    Remaining AP Capacity

    ---------------------

    Type Number

    ---- ------

    CAPs 0

    RAPs 0

     

    (r8-aruba7005-1) #show license

     

    License Table

    -------------

    Key                                               Installed   Expires Flags Service Type

    ---                                               ---------   ------- ----- ------------

    6IVM9ZDJ-54C/VhnH-QCrwNY43-M20+LXpV-ZPKQ5gVl-WTE 2015-10-12 Never     E     Next Generation Policy Enforcement Firewall Module: 2

                                                      10:50:18

    Men8iiEe-/MhWqM7+-OyBukkep-OmFmsWJx-t5U39FQk-WWg 2015-10-12 Never     E     RF Protect: 2

                                                     10:50:37

     

    License Entries: 2

     

    Flags: A - auto-generated; E - enabled; R - reboot required to activate

     

     

     

    (r8-aruba7005-1) #show keys

     

    Licensed Features

    -----------------

    Feature                                             Status

    -------                                             ------

    Access Points                                       0

    RF Protect                                         2

    VPN Server Module                                   4096

    xSec Module                                         0

    Next Generation Policy Enforcement Firewall Module 2

    Advanced Cryptography                               0

    RF Protect                                         ENABLED

    Policy Enforcement Firewall                         ENABLED

    VPN Server                                         ENABLED

    xSec Module                                         DISABLED

    Policy Enforcement Firewall for VPN users           DISABLED

    Advanced Cryptography                               DISABLED

    Maritime Regulatory Domain                         DISABLED

     

    (r8-aruba7005-1) #show ap database

     

    AP Database

    -----------

    Name               Group   AP Type IP Address   Status     Flags Switch IP     Standby IP

    ----               -----   ------- ----------   ------     ----- ---------     ----------

    9c:1c:12:ce:72:ca bxb-300 103     192.168.80.2 Up 8m:51s IL     192.168.88.2 0.0.0.0

     

    Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed

           I = Inactive; D = Dirty or no config; E = Regulatory Domain Mismatch

           X = Maintenance Mode; P = PPPoE AP; B = Built-in AP

           R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP;

           c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2

           u = Custom-Cert RAP; S = Standby-mode AP; J = USB cert at AP

           M = Mesh node; Y = Mesh Recovery

     

    Total APs:1

     

    (r8-aruba7005-1) #show log system 10 | include stm

    Oct 14 06:58:48 :399899: <INFO> |ipstm| sapi_rsp, sapi.c:248: SAPI response service/level lookup failed

    Oct 14 06:58:48 :348306: <DBUG> |ipstm| papi_rcv_cb, Recvd PAPI Message, len=88

    Oct 14 06:58:48 :399899: <INFO> |ipstm| sapi_rsp, sapi.c:248: SAPI response service/level lookup failed

    Oct 14 06:58:48 :348306: <DBUG> |ipstm| papi_rcv_cb, Recvd PAPI Message, len=88

    Oct 14 06:58:48 :399899: <INFO> |ipstm| sapi_rsp, sapi.c:248: SAPI response service/level lookup failed

    Oct 14 06:58:49 :348306: <DBUG> |ipstm| papi_rcv_cb, Recvd PAPI Message, len=88

    Oct 14 06:58:49 :399899: <INFO> |ipstm| sapi_rsp, sapi.c:248: SAPI response service/level lookup failed

    Oct 14 06:58:49 :348306: <DBUG> |ipstm| papi_rcv_cb, Recvd PAPI Message, len=88

    Oct 14 06:58:49 :399899: <INFO> |ipstm| sapi_rsp, sapi.c:248: SAPI response service/level lookup failed

    Oct 14 06:59:26 :305038: <WARN> |stm| No available license for AP 9c:1c:12:ce:72:ca

     

    (r8-aruba7005-1) #show ap database long

     

    AP Database

    -----------

    Name               Group   AP Type IP Address   Status Flags Switch IP     Standby IP Wired MAC Address Serial #   Port FQLN Outer IP User

    ----               -----   ------- ----------   ------ ----- ---------     ---------- ----------------- --------   ---- ---- -------- ----

    9c:1c:12:ce:72:ca bxb-300 103     192.168.80.2 Down           192.168.88.2 0.0.0.0     9c:1c:12:ce:72:ca CU0081678       N/A   N/A

     

    Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed

           I = Inactive; D = Dirty or no config; E = Regulatory Domain Mismatch

           X = Maintenance Mode; P = PPPoE AP; B = Built-in AP

           R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP;

           c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2

           u = Custom-Cert RAP; S = Standby-mode AP; J = USB cert at AP

           M = Mesh node; Y = Mesh Recovery

     

    Port information is available only on 6xx.

     

    Total APs:1



  • 2.  RE: lic-sec-2 no AP license?
    Best Answer

    Posted Oct 14, 2015 11:10 AM
    The security license includes PEFNG and RFP, not AP. You'll need to add AP licenses. 

    You should also consider using enterprise licenses in the future which include all 3 plus AirWave. 


    Thanks, 
    Tim


  • 3.  RE: lic-sec-2 no AP license?

    Posted Oct 14, 2015 11:24 AM

    Does the AP license need to match the others two (2)?

     

    Thanks



  • 4.  RE: lic-sec-2 no AP license?

    Posted Oct 14, 2015 11:27 AM
    Yes. Licensing is least common denominator. If you have 6 RFP, 6 PEFNG and 1
    AP license installed, only 1 AP will come up.