Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

This thread has been viewed 15 times

  • 1.  VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    Posted 3 days ago

    VIA not licenced dropping IKE request

    I'm trying to setup VIA and a mobility controller in a lab setup

     



  • 2.  RE: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    Posted 3 days ago

    This appears to say I should be covered by the PEFV licence.  So I'm not sure what I need to add. 


    Original Message


  • 3.  RE: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    EMPLOYEE
    Posted 3 days ago

    Either use LIC-PEFV, which is an all-or-nothing, per controller license with unlimited user counts; or use LIC-VIA, which is a per user license, so more scalable.

    For testing, you can use either. Reach out to your Aruba partner for evaluation licenses.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 4.  RE: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    Posted 2 days ago

    First of all, thanks for replying. I'm newish to Aruba and have to say this forum has been helpful, and it's so great to see employees contributing.

    I saw this one before but it says "per AP" so does not look correct. 


    Original Message


  • 5.  RE: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    Posted 2 days ago

    Do you have any thoughts why its not using the licence that is installed 


    Original Message


  • 6.  RE: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    EMPLOYEE
    Posted 2 days ago

    There is a difference between PEF (Policy Enforcement Firewall) and PEFV (PEF for VPN, which is VIA in practice).

    PEF is the role-based stateful firewall for wireless clients, and indeed is applied per AP.

    PEFV is applied per controller; and LIC-VIA is per User/Session as you can see per the screenshot; and either will allow VIA clients, just counted different.

    There is a long history why and how this involved, but confusion on the PEFV, and the inflexibility that it's all or nothing, leaded to LIC-VIA which is the logical choice in most cases.

    Your Aruba Partner should be able to explain this all in detail to you, and advise what is best in your situation.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 7.  RE: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?

    Posted 2 days ago

    Installing the VIA licence seems to have be further, Not sure why the PEFV licence did not cover it. 


    Original Message