There is a difference between PEF (Policy Enforcement Firewall) and PEFV (PEF for VPN, which is VIA in practice).
PEF is the role-based stateful firewall for wireless clients, and indeed is applied per AP.
PEFV is applied per controller; and LIC-VIA is per User/Session as you can see per the screenshot; and either will allow VIA clients, just counted different.
There is a long history why and how this involved, but confusion on the PEFV, and the inflexibility that it's all or nothing, leaded to LIC-VIA which is the logical choice in most cases.
Your Aruba Partner should be able to explain this all in detail to you, and advise what is best in your situation.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jun 26, 2024 04:07 PM
From: technical_debt_collector
Subject: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?
Do you have any thoughts why its not using the licence that is installed
Original Message:
Sent: Jun 26, 2024 11:55 AM
From: Herman Robers
Subject: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?
Either use LIC-PEFV, which is an all-or-nothing, per controller license with unlimited user counts; or use LIC-VIA, which is a per user license, so more scalable.
For testing, you can use either. Reach out to your Aruba partner for evaluation licenses.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
Original Message:
Sent: Jun 26, 2024 08:10 AM
From: technical_debt_collector
Subject: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?
This appears to say I should be covered by the PEFV licence. So I'm not sure what I need to add.
Original Message:
Sent: Jun 26, 2024 07:29 AM
From: technical_debt_collector
Subject: VIA not licenced dropping IKE request , what Licence should I obtain ? testing / lab use ?
VIA not licenced dropping IKE request
I'm trying to setup VIA and a mobility controller in a lab setup