Wireless Access

Aruba VMC AOS8.3 License Server Client Share Problem Need Help!

We have Two Aruba VMC on Public Internet, please take a look the followed pictures

1.The Licenser Server ip is 172.31.4.51  1:1 Nat to Public IP 47.105.111.35 Work at AOS8.3 VMC Standalone 

(AOS83) [mynode] #show ip interface bri

Interface IP Address / IP Netmask Admin Protocol VRRP-IP
vlan 1 172.31.4.51 / 255.255.240.0 up up
loopback unassigned / unassigned up up
mgmt unassigned / unassigned up up
(AOS83) [mynode] #show image version

----------------------------------
Partition : 0:0 (/mnt/disk1) **Default boot**
Software Version : ArubaOS 8.3.0.0 (Digitally Signed SHA1/SHA256 - Production Build)
Build number : 64659
Label : 64659
Built on : Sat Apr 28 04:36:21 UTC 2018
----------------------------------
Partition : 0:1 (/mnt/disk2)
Software Version : ArubaOS 8.2.1.1 (Digitally Signed SHA1/SHA256 - Production Build)
Build number : 65265
Label : 65265
Built on : Sat Jun 9 17:20:32 UTC 2018
(AOS83) [mynode] #show license limits

License Limits
--------------
Limit Value
----- -----
1000 Access Points
0 RF Protect
0 120abg Upgrade
0 121abg Upgrade
0 124abg Upgrade
0 125abg Upgrade
1000 Next Generation Policy Enforcement Firewall Module
0 Advanced Cryptography
0 Service provider AP
0 WebCC
0 Beta AP
0 MM-VA
1000 MC-VA-RW
0 MC-VA-EG
0 MC-VA-IL
0 MC-VA-JP
0 MC-VA-US
0 VIA
(AOS83) [mynode] #show license server-table

License Server Table for pool / profile root
--------------------------------------------
Service Type PoolSize ExpiredLic ActualPoolSize UsedLic RemainingLic Warnings FeatureBit
------------ -------- ---------- -------------- ------- ------------ -------- ----------
Access Points 2048 0 2048 0 2048 Some licenses expiring enabled
Next Generation Policy Enforcement Firewall Module 2048 0 2048 0 2048 Some licenses expiring enabled
RF Protect 0 0 0 0 0 None disabled
Advanced Cryptography 0 0 0 0 0 None disabled
WebCC 0 0 0 0 0 None disabled
MM-VA 0 0 0 0 0 None disabled
MC-VA-RW 1000 0 1000 0 1000 Some licenses expiring enabled
MC-VA-EG 0 0 0 0 0 None enabled
MC-VA-IL 0 0 0 0 0 None enabled
MC-VA-JP 0 0 0 0 0 None enabled
MC-VA-US 0 0 0 0 0 None enabled
VIA 0 0 0 0 0 None enabled

(AOS83) [mynode] #show license
aggregate License aggregate table
box Show box license information
client-table License client-table entries
debug Debug
heartbeat License heartbeats
key Show single license key's information
keys Show license keys information based on feature/license
type
limits Current license limits
passphrase Show passphrase for license generation
platform-limits Current platform license limits
pool-profile Show license pool profile
remote License management remote command
server-table License server-table entries
verbose Verbose output (deprecated, output is always verbose)
| Output Modifiers
<cr>

(AOS83) [mynode] #show license heartbeat
% Incomplete command
(AOS83) [mynode] #show license heartbeat
stats License stats

(AOS83) [mynode] #show license heartbeat stats

License Server Heartbeat Table
------------------------------
Client IP Address Mac Addr HB Req HB Resp Total Missed Last Update (secs. ago)
----------------- -------- ------ ------- ------------ -----------------------
172.31.4.51 00:16:3e:05:a5:40 97 97 0 17

(AOS83) [mynode] #ping 106.14.2.163

Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 106.14.2.163, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 17.654/17.7424/17.845 ms

(AOS83) [mynode] #

2.The License Client is also AOS8.3 VMC, It's Public IP is 106.14.2.163 there are also 1:1 Nat from local ip 172.19.42.114 to 106.14.2.163

We can not get license shared from server why ? and we test them work well at local network without NAT.anybody can help to check the reason ?Thanks a lot.

(AOS83) [mynode] #show running-config
Building Configuration...

version 8.3
hostname "AOS83"
clock timezone America/Los_Angeles -8
!
location "Building1.floor1"
controller config 1
license server-ip 47.105.111.35
ip NAT pool dynamic-srcnat 0.0.0.0 0.0.0.0
ip access-list eth validuserethacl
permit any

(AOS83) [mynode] # ping 47.105.111.35

Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 47.105.111.35, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 17.683/17.7812/17.872 ms

(AOS83) [mynode] #

Last login: Thu Jul 19 01:38:33 2018 from 111.37.20.221
(AOS83) [mynode] #show ip interface bri

Interface IP Address / IP Netmask Admin Protocol VRRP-IP
vlan 1 172.19.42.114 / 255.255.240.0 up up
loopback unassigned / unassigned up up
mgmt unassigned / unassigned up up
(AOS83) [mynode] #show image version

----------------------------------
Partition : 0:0 (/mnt/disk1) **Default boot**
Software Version : ArubaOS 8.3.0.0 (Digitally Signed SHA1/SHA256 - Production Build)
Build number : 64659
Label : 64659
Built on : Sat Apr 28 04:36:21 UTC 2018
----------------------------------
Partition : 0:1 (/mnt/disk2)
Software Version : ArubaOS 8.3.0.0 (Digitally Signed SHA1/SHA256 - Production Build)
Build number : 64659
Label : 64659
Built on : Sat Apr 28 04:36:21 UTC 2018
(AOS83) [mynode] #show license heartbeat stats

License Client Heartbeat Table
------------------------------
Server IP Address Mac Addr HB Req HB Resp Total Missed Last Update (secs. ago)
----------------- -------- ------ ------- ------------ -----------------------
47.105.111.35 00:16:3e:02:56:22 137 0 137 4133

License Server Heartbeat Table
------------------------------
Client IP Address Mac Addr HB Req HB Resp Total Missed Last Update (secs. ago)
----------------- -------- ------ ------- ------------ -----------------------
172.19.42.114 00:16:3e:02:56:22 5096 5096 0 4133
(AOS83) [mynode] #show license client-table

Built-in limit: 0
License Client Table
--------------------
Service Type System Limit Server Lic. Used Lic. Remaining Lic. FeatureBit
------------ ------------ ----------- --------- -------------- ----------
Access Points 1000 0 0 0 enabled
Next Generation Policy Enforcement Firewall Module 1000 0 0 0 disabled
RF Protect 1000 0 0 0 disabled
Advanced Cryptography 4096 0 0 0 disabled
WebCC 1000 0 0 0 disabled
MM-VA 1001 0 0 0 disabled
MC-VA-RW 1000 0 0 0 enabled
MC-VA-EG 1000 0 0 0 enabled
MC-VA-IL 1000 0 0 0 enabled
MC-VA-JP 1000 0 0 0 enabled
MC-VA-US 1000 0 0 0 enabled
VIA 16000 0 0 0 enabled
(AOS83) [mynode] # ping 47.105.111.35

Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 47.105.111.35, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 17.683/17.7812/17.872 ms

(AOS83) [mynode] #

we can not get license shared from Lic server ! why ?