With Aruba Networks equipment you will need licenses to enable use of features or functions of the AOS or access point. Some licenses are not necessary for all network deployments. While a complex network might employ all of the different capabilities available. For AOS operations there are 10 different licenses available, and each license is available in an eval or permanent state. The evaluation licenses are like the name states, they allow you to evaluate the product before placing it into production. The eval licenses are available for 90 days. Once you have decided on the product you can purchase the permanent version.
The different licenses available are found on the Aruba Licensing site. The available licenses are:
Base OS—base operating functions including VPN and VIA clients.
AP Capacity —capacity license for RAP indoor and outdoor Mesh APs. Campus, Remote, or Mesh APs can terminate on the controller without the need for a separate license.
Advanced Cryptography (ACR)—this is required for the Suite B Cryptography in IPsec and 802.11 modes. License enforcement behavior controls the total number of concurrent connections (IPsec or 802.11) using Suite B Cryptography. Bundled with this license are the xSec license features.
Content Security Service (CSS)—enables the Cloud-based Content Security service on your controller. This license is administered based on the number of users.
Policy Enforcement Firewall Virtual Private Network (PEFV)—enables Policy Enforcement Firewall for VIA clients. This is a controller license.
Policy Enforcement Firewall Next Generation (PEFNG)—Wired, WLAN Licensed per AP numbers including user roles, access rights, Layers 4 through 7 traffic control, per-service prioritization/QoS, authentication/accounting APIs, External Service Interfaces (ESI), Voice and Video. This is an AP count license.
Public Access—reserved for future use.
RFprotect—Wireless Intrusion Protection (WIPS) and Spectrum Analysis. This is an AP count license.
xSec (Extreme Security) for Federal—Layer 2 VPN for wired or wireless using FIPS-approved algorithms.
Internal Test Functions—for internal use only.
Some licenses are based on the number of Aps deployed in the network. For instance if you have 100 Aps you will need 100 ap licenses. If you want PEFNG on the same controller you will also need 100 licenses to support PEFNG. Other licenses are session based. Session being a client terminating on the controller, so if you have 100 current connected clients and want to use Advanced Cryptography you will need 100 licenses on the controller.
The different series of Aruba Mobility controllers range in terms of number of Aps supported. The number of campus Aps supported is one quarter of the total supported RAPs.
In order to get a license you will need the serial number of the controller you wish to apply the license to as the key are ties to the serial number of the controller. When you receive the certificate you will have to activate it through the licensing site with the serial number of the controller. You can apply the new license thru GUI or CLI. After a reboot the license will begin to work.
Adding a license through GUI
Navigate to Configuration > Controller > Licenses
Then enter the license key in the text box and hit apply.
Remember to reboot the controller after applying the license.
Maintenance > Reboot Controller > Continue
To add a license through CLI (enable mode):
(Airheads3600x2) #license add xxxxxxx-xxxxxxxxxxxxx-xxxxxx-xxxxxxxxx
Limits updated.
Please reload the switch to enable the new functionality.
(Airheads3600x2) #reload
Do you really want to restart the system(y/n): y
System will now restart!