Wireless Access

last person joined: 15 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

PEFNG

This thread has been viewed 4 times
  • 1.  PEFNG

    Posted Jan 24, 2015 12:13 AM

    Hi,

    We have 7240 which has PEFNG license and have 7010 in DMZ zone, do I still need a PEFNG license for creating user based roles?



  • 2.  RE: PEFNG

    EMPLOYEE
    Posted Jan 24, 2015 12:18 AM
    If you are using centralized licensing with another controller that has PEFNG licenses, then no. 


    Thanks, 
    Tim


  • 3.  RE: PEFNG

    Posted Jan 25, 2015 11:09 AM

    Thanks for reply,

     

    I have PEFNG license in another controller in which centralized license is enable,

    I have 300 AP  and PEFNG License on the controller, if i enable centralized on guest / DMZ controller i will utilizes any license? Could you please explain more about this?

     

     



  • 4.  RE: PEFNG

    EMPLOYEE
    Posted Jan 25, 2015 11:12 AM
    No, it will not consume a license but centralized licensing is required to enable the PEFNG functionality on the controller if there are no licenses installed locally. 


    Thanks, 
    Tim


  • 5.  RE: PEFNG

    Posted Jan 26, 2015 12:37 AM

    I have enable centralized licensing, but still I could not able to add any policies on DMZ controller.

    1. After adding license server whether controller need a reboot?
    2. We have firewall in between master and Guest controller (Guest controller is in DMZ zone) whether I need allow any firewall port in between Master and Guest controller for license server communication? (ICMP is allowed).


  • 6.  RE: PEFNG

    EMPLOYEE
    Posted Jan 26, 2015 07:48 AM
    Is this a master-local topology?


  • 7.  RE: PEFNG

    Posted Jan 26, 2015 12:04 PM

    Its Master- standby topology (VRRP redundancy) in which all access points are registered to this controllers and we have DMZ / Guest controller all guest /client  traffic tunneled are redirected to this controller for internet access.

    Centralized license is enable between master and standby controller and created logon rules, policies for client traffic and access. We are yet to create logon rules and policies in guest controller but unable to do due to license issue.

     

     

     



  • 8.  RE: PEFNG

    EMPLOYEE
    Posted Jan 26, 2015 12:06 PM
    Is the DMZ controller a local or independent?


  • 9.  RE: PEFNG

    Posted Jan 26, 2015 11:06 PM

    its independent ?

     

    Controller role is master 

     

     



  • 10.  RE: PEFNG

    EMPLOYEE
    Posted Jan 26, 2015 11:10 PM
    If it’s an independent controller, you need to specify the license server’s address on the DMZ controller’s centralized licensing tab. Did you do that?


  • 11.  RE: PEFNG

    Posted Jan 26, 2015 11:41 PM

    Yes I did that,  whether I need enable Centeralized licensing?



  • 12.  RE: PEFNG

    EMPLOYEE
    Posted Jan 27, 2015 10:50 AM

    Can you run the command below on the DMZ controller and post the output?

     

    show license client-table

     



  • 13.  RE: PEFNG

    Posted Jan 27, 2015 09:01 PM

    (awc) #show license client-table
    Centralized licensing is disabled or the master is current unreachable



  • 14.  RE: PEFNG

    EMPLOYEE
    Posted Jan 27, 2015 09:04 PM
    How about:

    show license profile


  • 15.  RE: PEFNG

    Posted Jan 27, 2015 10:12 PM

    (awc) #show license profile

    License provisioning profile
    ----------------------------
    Parameter Value
    --------- -----
    Centralized Licensing Disabled



  • 16.  RE: PEFNG

    EMPLOYEE
    Posted Jan 27, 2015 10:15 PM
    Are you sure you enabled centralized licensing on the DMZ controller and entered the IP of the license master? The information you posted says it is disabled. 


    Thanks, 
    Tim