Aruba Apps

last person joined: 3 days ago 

The HPE Aruba Networking Apps board is designed to address questions, comments, and feature requests for all HPE Aruba Networking mobile Apps
Back to discussions
Expand all | Collapse all

Is AppRF License and RF Protect the same license

This thread has been viewed 1 times

  • 1.  Is AppRF License and RF Protect the same license

    Posted Jul 28, 2016 02:13 PM

    I'm working on a 7030 controller and see the AppRF module in the Dashboard, and have read through the documentation.  I'm applying a block policy to a specific WLAN and the appropriate sacl.  As soon as I save it however and go back into it, before I've pushed the WLAN out again, the block rule is gone. 

     

    The reason for the question is I see a license in the licensing section for RF Protect but not for AppRF.  Are they separate licenses?  The problem I am having does smell of a licensing issue.



  • 2.  RE: Is AppRF License and RF Protect the same license

    EMPLOYEE
    Posted Jul 28, 2016 02:23 PM

    They are not the same, no, and one should have no effect on another.

     

    Type "show audit-trail" on the commandline to see what commands were applied.



  • 3.  RE: Is AppRF License and RF Protect the same license

    Posted Jul 28, 2016 02:55 PM

    Ok, I don't see a license in the licensing page. 

     

    Here's the last section of the show audit:

     

    Jul 28 09:22:50  webui[3613]: USER:admin@138.69.14.71 COMMAND:<user-role "guest" > -- command executed successfully
    Jul 28 09:33:53  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "global-sacl" any any web-cc-category "social-networking" web-cc-reputation trustworthy deny position 1 > -- command executed successfully
    Jul 28 09:34:48  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "Facebook" > -- command executed successfully
    Jul 28 09:34:48  webui[3613]: USER:admin@138.69.14.71 COMMAND:<user-role "GT_TEST-guest-logon" access-list session "Facebook" position 5 > -- command executed successfully
    Jul 28 09:34:48  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "global-sacl" no any any web-cc-category "social-networking" web-cc-reputation trustworthy deny > -- command executed successfully
    Jul 28 09:34:48  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "Facebook" any any web-cc-category "social-networking" web-cc-reputation trustworthy deny position 1 > -- command executed successfully
    Jul 28 09:37:52  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "Facebook" > -- command executed successfully
    Jul 28 09:37:52  webui[3613]: USER:admin@138.69.14.71 COMMAND:<user-role "GT_TEST-guest-logon" access-list session "Facebook" position 3 > -- command executed successfully
    Jul 28 09:37:52  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "logon-control" > -- command executed successfully
    Jul 28 09:37:52  webui[3613]: USER:admin@138.69.14.71 COMMAND:<user-role "GT_TEST-guest-logon" access-list session "logon-control" position 4 > -- command executed successfully
    Jul 28 09:37:52  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "captiveportal" > -- command executed successfully
    Jul 28 09:37:52  webui[3613]: USER:admin@138.69.14.71 COMMAND:<user-role "GT_TEST-guest-logon" access-list session "captiveportal" position 5 > -- command executed successfully
    Jul 28 09:38:23  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "Facebook" any any web-cc-category "social-networking" web-cc-reputation trustworthy deny dot1p-priority "1" position 1 > -- command executed successfully
    Jul 28 09:40:33  webui[3613]: USER:admin@138.69.14.71 COMMAND:<user-role "GT_TEST-guest-logon" no access-list session "Facebook" > -- command executed successfully
    Jul 28 09:40:33  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "Facebook" no any any web-cc-category "social-networking" web-cc-reputation trustworthy deny > -- command executed successfully
    Jul 28 09:46:45  webui[3613]: USER:admin@138.69.14.71 COMMAND:<firewall dpi > -- command executed successfully
    Jul 28 10:19:35  webui[3613]: USER:admin@138.69.14.71 COMMAND:<write memory > -- command executed successfully
    Jul 28 10:48:17  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "global-sacl" any any app "facebook" deny position 1 > -- command executed successfully
    Jul 28 10:48:17  webui[3613]: USER:admin@138.69.14.71 COMMAND:<ip access-list session "global-sacl" ipv6 any any app "facebook" deny position 2 > -- command executed successfully

     

     

    All that appears like it accepted the commands but when I go back into check/add more.  It's gone.