|

[ACMA Training #6] AOS 8 License (1)

⏱️ Estimated reading time: Approx. 5 minutes (5 min read)

In this post, we will learn about the license of AOS 8.
As of now (November 2022), AOS 8.11 has been released, but, ACMA Certification (HPE6-A70)Since the questions are based on AOS 8.6, we will explain them accordingly. Therefore, please be aware that there may be slight differences.

License Classification

Each license is Evaluation or Permanent It can be divided into licenses.

A perpetual license permanently activates the desired software module on a specific Aruba controller. Perpetual licenses can only be obtained through the Aruba purchasing process. Perpetual software license keys Sent via e-mailIt will work.

A trial license allows unlimited functionality of the software module on a specific controller. For 90 days(available in three 30-day increments). Trial licenses are added to the Mobility Master (Conductor) and can be shared within the license pool.

Remove all license keys write erase all Expired evaluation licenses remain in the license database until you reset the controller using the command.

You can check the remaining period of your trial license by clicking the warning flag in the UI title bar on the web. The web UI displays information about the trial license status.

When the evaluation period expires, the controller automatically backs up its startup configuration and reboots at midnight (system clock). All permanent licenses are unaffected. Expired evaluation license features are no longer available and are marked as "Expired" in the Web UI.

Additionally, subscription licenses are feature-specific licenses that must be installed for each additional feature as needed.

For example, the WebCC (Web Content and Classification) license is a subscription license that allows you to use WebCC features only for the duration of the subscription period (1, 3, 5, 7, or 10 years). The subscription period begins when you generate a time-based license key on the licensing website.

License Types and Assignments

MM (HMM) License

Starting with Aruba OS 8.0.1.0 Mobility Master (Conductor)To manage the controller or AP MM LicenseIf there is not enough MM license or the AP does not obtain a license, the AP will obtain an IP address. I can connect to that controller, but it doesn't broadcast the SSID.
Each device (AP/Controller) connected to MM uses one MM license.

HMM LicenseThe license is pre-installed on the Mobility Master (Conductor) hardware appliance and works with ArubaOS 8.1.0 and later versions.

Currently, instead of MM licenses, you can purchase HMM-style hardware or virtual machine appliances. Use only the licenses pre-installed on the appliance.do.

AP License

Any AP using one or more BSSIDs (virtual APs) AP LicenseThis means that each AP (Campus AP/RAP/Mesh AP) advertising a BSSID, whether connected to LAN, Mesh or Remote AP, uses one AP license.

PEF License

PEF LicenseEnables APs to use Policy Enforcement Firewall (PEF) features, such as intelligent application identification, policy-based traffic management and control, or stateful firewalling. Each AP (Campus AP/RAP/Mesh AP) that uses a firewall policy consumes one PEF license.

RFP License

RFProtect Licenseis required to enable one or more RF protection features on each AP, such as frequency analysis, wireless intrusion protection (WIP), and MultiZone.

Starting with Aruba OS 8.2.0.0, the Data Zone Management Device (MD) does not consume licenses, Only the Primary Zone Management Device (MD) consumes the license.Prior to Aruba OS 8.2.0.0, APs connected to the Data Zone management device used PEFNG licenses. When the AP boots, the management device checks whether the Primary Zone management device requires an RFP license. If not, MultiZone is disabled on that AP.

Each AP (Campus AP/RAP/Mesh AP) that uses the RF Protect feature consumes one license.

VIA License

Each VIA (Virtual Intranet Access) or third-party VPN client requires one VIA license. However, Site-to-Site VPN does not require a VIA license.

Each client session where traffic flows through a VPN (VIA tunneling) uses a VIA license.When using user licensing, each user must purchase a license for the exact number of users. VIA also supports centralized licensing, allowing you to distribute licenses to the required number of devices (MDs) rather than to users.

WebCC License

The Web Contents Classification license is subscription-based and provides WebCC functionality to APs for the duration of the subscription period.

Each AP using WebCC consumes one license.

ACR License

The ACR license enables ArubaOS Advanced Cryptography features. A license is required for each active client connection using a Suite-B algorithm or protocol.

Each client session uses one license.

So far, we have looked at the types of AOS 8 licenses and how they are used/consumed.
In the next post, we will look at how to manage and activate licenses.

Similar Posts

  • [ACMA Training #1] Introduction to Wireless LAN (802.11)

    ⏱️ Estimated reading time: Approx. 12 minutes (12 min read) Following the previous basic training on ArubaCX switches, this time we would like to proceed with training on Aruba Wireless LAN (WLAN, Wireless Local Area Network). In this post, we will provide a basic introduction to wireless LAN and explain the technology. Introduction to the Wireless LAN Organization To break down the terminology of wireless LAN, wireless short-range…

  • [ACSA Education #1] Network Basics

    ⏱️ Estimated reading time: Approx. 2 minutes (2 min read) Today, shall we start with a brief look at networks? Before that, I think we need to understand what communication is. In English, communication is called "Communication." In other words, it means communicating with one another. People conveying their intentions and exchanging information with one another—that is what communication means. The same applies to machines….

  • [ACSA Training #38] OSPFv2 Operation

    ⏱️ Estimated read time: Approx. 16 minutes (16 min read) In the last post, we looked at what OSPF is as a protocol and how it works. Today, we will explore what needs to be kept in mind to actually operate OSPFv2. Network Types From a protocol perspective, there are two network types. Point-to-Point Network: Only two peers are located on the link. The interface is Point-to-Point…

  • [ACP-DC Training #4] Building a Data Center Network

    ⏱️ Estimated reading time: Approx. 9 minutes (9 min read) We have finally successfully completed the first step of building a data center network. Over the past time, we have understood the basic overview of the data center network and secured sufficient important resources and materials, namely the necessary products (hardware) and technologies (protocols). It is just like the process of an architect understanding the blueprints and preparing the necessary materials before constructing a building…

  • [ACSA Training #9] UDP Header

    ⏱️ Estimated reading time: Approx. 2 minutes (2 min read) In the last post, we looked into TCP. TCP and UDP are the representative protocols used in the Layer 4 transport layer. So today, let's take a look at UDP. If you look at the figure, you will see how simple the UDP header is compared to the TCP header. The source and… used just like in TCP

  • [acp-dc training#10] vsx (2)

    ⏱️ Estimated reading time: Approx. 8 minutes (8 min read) In the previous post, we explored VSX, the virtualization technology of HPE Aruba Networking AOS-CX switches. We explained the components of VSX, the differences from VSF, and its advantages. Today, we would like to cover the practical aspects. We will examine how to actually utilize VSX to perform live software upgrades and look at technologies such as Split Brain… .