Wireless Access

Hi!

Is Mobility Conductor required for a setup where 2x 7010 terminate IAP-VPN ipsec from branches ?
Or is it possible to setup without ?

Another question I have about ArubaOS10, it seems to me that microbranch is the comparable solution. But docs state that only 1 AP per branch is supported here.
Any one know if more APs per branch is on the roadmap ?

no, you dont need mobility conductor if you want to terminate IAP-VPN on a pair of controllers. you can run the controllers as standalone.

On microbranch question, yes currently one AP is supported and most likely that will increase.
however today if you need more that one AP at a remote site, then the better option would be to use a SD-branch gateways like 9004/9004-LTE which could then take advantage of all the SD-WAN features and then connect your APs to it at that site. 

Hi!

Is Mobility Conductor required for a setup where 2x 7010 terminate IAP-VPN ipsec from branches ?
Or is it possible to setup without ?

Another question I have about ArubaOS10, it seems to me that microbranch is the comparable solution. But docs state that only 1 AP per branch is supported here.
Any one know if more APs per branch is on the roadmap ?

Ok, thank you.

So how would sync of licenses and config be handeled ? Manually ? Having trouble finding documentation on similar setup. Any tips on where to find it would be helpfull.

no, you dont need mobility conductor if you want to terminate IAP-VPN on a pair of controllers. you can run the controllers as standalone.

On microbranch question, yes currently one AP is supported and most likely that will increase.
however today if you need more that one AP at a remote site, then the better option would be to use a SD-branch gateways like 9004/9004-LTE which could then take advantage of all the SD-WAN features and then connect your APs to it at that site. 

Hi!

Is Mobility Conductor required for a setup where 2x 7010 terminate IAP-VPN ipsec from branches ?
Or is it possible to setup without ?

Another question I have about ArubaOS10, it seems to me that microbranch is the comparable solution. But docs state that only 1 AP per branch is supported here.
Any one know if more APs per branch is on the roadmap ?

generally you don't need any licenses unless you want to change a default user-role for IAP-VPN.
in either ways you can add 1x PEFNG lic to the standalone controllers.

here is the old IAP-VPN technote
Also remember you can use IAP-VPN with AOS10 VPNCs all done through Aruba Central, this is in addition to AOS10 VPNCs and APs running AOS10  (micro-branch)

Ok, thank you.

So how would sync of licenses and config be handeled ? Manually ? Having trouble finding documentation on similar setup. Any tips on where to find it would be helpfull.

no, you dont need mobility conductor if you want to terminate IAP-VPN on a pair of controllers. you can run the controllers as standalone.

On microbranch question, yes currently one AP is supported and most likely that will increase.
however today if you need more that one AP at a remote site, then the better option would be to use a SD-branch gateways like 9004/9004-LTE which could then take advantage of all the SD-WAN features and then connect your APs to it at that site. 

Hi!

Is Mobility Conductor required for a setup where 2x 7010 terminate IAP-VPN ipsec from branches ?
Or is it possible to setup without ?

Another question I have about ArubaOS10, it seems to me that microbranch is the comparable solution. But docs state that only 1 AP per branch is supported here.
Any one know if more APs per branch is on the roadmap ?

generally you don't need any licenses unless you want to change a default user-role for IAP-VPN.
in either ways you can add 1x PEFNG lic to the standalone controllers.

here is the old IAP-VPN technote 
Also remember you can use IAP-VPN with AOS10 VPNCs all done through Aruba Central, this is in addition to AOS10 VPNCs and APs running AOS10  (micro-branch)

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.

Original Message:
Sent: Apr 26, 2023 07:14 AM
From: Gonz
Subject: IAP-VPN ArubaOS8

Ok, thank you.

So how would sync of licenses and config be handeled ? Manually ? Having trouble finding documentation on similar setup. Any tips on where to find it would be helpfull.

Original Message:
Sent: Apr 25, 2023 09:37 PM
From: ariyap
Subject: IAP-VPN ArubaOS8

no, you dont need mobility conductor if you want to terminate IAP-VPN on a pair of controllers. you can run the controllers as standalone.

On microbranch question, yes currently one AP is supported and most likely that will increase.
however today if you need more that one AP at a remote site, then the better option would be to use a SD-branch gateways like 9004/9004-LTE which could then take advantage of all the SD-WAN features and then connect your APs to it at that site. 

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.

Original Message:
Sent: Apr 25, 2023 03:47 AM
From: Gonz
Subject: IAP-VPN ArubaOS8

Hi!

Is Mobility Conductor required for a setup where 2x 7010 terminate IAP-VPN ipsec from branches ?
Or is it possible to setup without ?

Another question I have about ArubaOS10, it seems to me that microbranch is the comparable solution. But docs state that only 1 AP per branch is supported here.
Any one know if more APs per branch is on the roadmap ?

Oh you meen I can run ArubaOS10 on VPNC and terminate IAP-VPN (ArubaOS8) on sites with more then 1 AP. Combined with running ArubaOS10 Microbranch on smaller sites ?

Original Message:
Sent: Apr 26, 2023 08:11 PM
From: ariyap
Subject: IAP-VPN ArubaOS8

generally you don't need any licenses unless you want to change a default user-role for IAP-VPN.
in either ways you can add 1x PEFNG lic to the standalone controllers.

here is the old IAP-VPN technote 
Also remember you can use IAP-VPN with AOS10 VPNCs all done through Aruba Central, this is in addition to AOS10 VPNCs and APs running AOS10  (micro-branch)

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.

Original Message:
Sent: Apr 26, 2023 07:14 AM
From: Gonz
Subject: IAP-VPN ArubaOS8

Ok, thank you.

So how would sync of licenses and config be handeled ? Manually ? Having trouble finding documentation on similar setup. Any tips on where to find it would be helpfull.

Original Message:
Sent: Apr 25, 2023 09:37 PM
From: ariyap
Subject: IAP-VPN ArubaOS8

no, you dont need mobility conductor if you want to terminate IAP-VPN on a pair of controllers. you can run the controllers as standalone.

On microbranch question, yes currently one AP is supported and most likely that will increase.
however today if you need more that one AP at a remote site, then the better option would be to use a SD-branch gateways like 9004/9004-LTE which could then take advantage of all the SD-WAN features and then connect your APs to it at that site. 

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.

Original Message:
Sent: Apr 25, 2023 03:47 AM
From: Gonz
Subject: IAP-VPN ArubaOS8

Hi!

Is Mobility Conductor required for a setup where 2x 7010 terminate IAP-VPN ipsec from branches ?
Or is it possible to setup without ?

Another question I have about ArubaOS10, it seems to me that microbranch is the comparable solution. But docs state that only 1 AP per branch is supported here.
Any one know if more APs per branch is on the roadmap ?