Original Message:
Sent: Jan 21, 2025 02:34 AM
From: mkk
Subject: AOS10 SD Branch or VPNC for VIA?
Because I started to doubt myself and couldn't clearly find the information in the documentation, I checked with our Aruba SE this morning. He confirmed that the VIA Client can also be configured in the "Branch" persona. Learned something new today!
Thanks for the heads up Ariyap!
------------------------------
Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
Original Message:
Sent: Jan 20, 2025 07:04 PM
From: ariyap
Subject: AOS10 SD Branch or VPNC for VIA?
Just note that client VPN (VIA) is supported on any gateway with foundational, foundational-base etc subscription. The gateway can take the persona of VPNC or branch gateway.
It is outlined in the current Central subscription ordering guide that I shared, you can talk to your local Aruba system engineer to get the details.
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
Original Message:
Sent: Jan 20, 2025 05:31 PM
From: mkk
Subject: AOS10 SD Branch or VPNC for VIA?
Some more context...
No, an Aruba AOS 10 gateway configured with the Branch persona does not support Virtual Intranet Access (VIA) termination. VIA clients require a gateway configured with the VPN Concentrator (VPNC) persona or a Mobility Controller for remote access VPN termination.
Explanation:
1. Branch Persona:
• Primarily designed for SD-WAN, WLAN, and LAN functionality.
• Supports site-to-site VPN for connecting branches but does not terminate individual remote client VPN sessions, such as those initiated by VIA clients.
2. VPN Concentrator Persona:
• Specifically designed to terminate remote client VPN connections.
• Supports Aruba VIA clients for secure remote access.
3. AOS 10 Documentation Notes:
• Aruba explicitly separates the roles of gateway personas. The Branch persona focuses on branch networking functions, while the VPNC persona handles remote VPN access.
Recommended Setup for VIA Support:
If you need VIA client support:
• Deploy a separate gateway in the VPNC persona.
• Alternatively, use an Aruba Mobility Controller that supports VIA termination.
------------------------------
Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
Original Message:
Sent: Jan 20, 2025 05:23 PM
From: mkk
Subject: AOS10 SD Branch or VPNC for VIA?
See also the VIA solution guide. https://www.arubanetworks.com/techdocs/central/sd-branch-ref-docs/via-remote-access-solution-guide.pdf
------------------------------
Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
Original Message:
Sent: Jan 20, 2025 04:58 PM
From: Ronin101
Subject: AOS10 SD Branch or VPNC for VIA?
Dear Ariya
You mentioned vpnc or branch gateway persona, mkk said only vpnc. So can you confirm if it can be supported in branch gateway persona?
Original Message:
Sent: 1/20/2025 4:46:00 PM
From: ariyap
Subject: RE: AOS10 SD Branch or VPNC for VIA?
Yes as MKK mentioned VIA needs VPN concentration or branch gateway persona and is part of SD-WAN features
check the Central subscription ordering guide that explains it, look for table 8.
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
Original Message:
Sent: Jan 20, 2025 04:10 PM
From: mkk
Subject: AOS10 SD Branch or VPNC for VIA?
No, via-client is only supported in the VPN Concentrator persona.
------------------------------
Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
Original Message:
Sent: Jan 20, 2025 10:29 AM
From: Ronin101
Subject: AOS10 SD Branch or VPNC for VIA?
Just to confirm, if i am using gateway as branch gateway persona to provide WLAN functionality as well as WAN, will it support VIA clients?
Original Message:
Sent: Jan 17, 2025 05:05 PM
From: ariyap
Subject: AOS10 SD Branch or VPNC for VIA?
yes it is support and requires no extra licenses or subscriptions.
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
Original Message:
Sent: Jan 17, 2025 04:59 PM
From: mkk
Subject: AOS10 SD Branch or VPNC for VIA?
In SD-Branch solution the VIA clients are connected to a gateway with the VPNC concentrator persona.
See also https://www.youtube.com/watch?v=uy6T3MwXgIg
------------------------------
Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
Original Message:
Sent: Jan 17, 2025 03:33 PM
From: Ronin101
Subject: AOS10 SD Branch or VPNC for VIA?
Dear Experts,
Does SD Branch persona in AOS10 supports VIA clients?