HPE Aruba Networking Wireless Operating System 10 Capacity Licenses

The HPE Aruba Networking 9240 gateways support license based capacity limits instead of building separate hardware platforms for different capacity requirements. There are three capacity levels:

Base (no license)
Silver license
Gold license

The following tables list the differences in the license types supported on the HPE Aruba Networking 9240 gateway.

Table 1: Technical Specifications —Throughput
Performance	Base	Silver	Gold
Firewall Throughput (Gbps)	20	30	40
Encrypted Throughput GRE (Gbps)	20	30	40
Encrypted Throughput AES-CBC-128 (Gbps)	20	30	38
Encrypted Throughput AES-CBC-256 (Gbps)	20	30	39
Encrypted Throughput AES-GCM-128 (Gbps)	20	30	40
Encrypted Throughput AES-GCM-256 (Gbps)	20	30	40
Encrypted Throughput AES-CCM (Gbps)	20	28	30

Table 2: Technical Specifications—HPE Aruba Networking Wireless Operating System 10
AOS-10 Specifications	Base	Silver	Gold
Maximum Clients	32K	48K	64K
Maximum Clients per Cluster	128K	192K	256K
Max APs	4K	8K	16K
Max APs per Cluster	8K	16K	32K
Active Firewall sessions	4M	4M	4M
Concurrent IPSec Tunnels (Minimum)	32K	64K	128K
Concurrent GRE Tunnels (Minimum)	8K	16K	32K

Important Points

HPE Aruba Networking 9240 gateways with Silver or Gold capacity license do not support IDPS Intrusion Detection and Prevention System (IDPS) monitors, detects, and prevents threats in the inbound and outbound traffic. Aruba IDPS provides an extra layer of protection that actively analyzes the network and takes actions on the traffic flows based on the defined rules. It inspects data packets, and if any threat is identified, acts real-time to prevent it.. Only the 9240 Base model supports the IDPS feature and its functionalities, with the following security licenses:

Gateway WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. Advanced with Security
SD-Branch Foundation with Security
SD-Branch Advanced with Security

For more information on supported gateways for IDPS, see Preparing to add IDPS-Supported Gateways.

Table 3: IDPS—SKU for Aruba 9240 Gateways with Capacity License
SKU for 9240 with Capacity License	Base	Silver	Gold
SD-Branch Foundation	Yes	Yes	Yes
SD-Branch Foundation with Security	Yes	No	No
SD-Branch Advanced	Yes	Yes	Yes
SD-Branch Advanced with Security	Yes	No	No
Gateway WLAN Advanced	Yes	Yes	Yes
Gateway WLAN Advanced with Security	Yes	No	No

Key Features

The key features of the Capacity license for HPE Aruba Networking 9240 platforms are:

The licenses are generated per device for HPE Aruba Networking Wireless Operating System 10 and must be activated on the License Management System (LMS Local Management Switch. In multi-controller networks, each controller acts as an LMS and terminates user traffic from the APs, processes, and forwards the traffic to the wired network. ). LMS is part of the HPE Networking Support Portal.
The licenses are manually applied or updated on the gateway in HPE Aruba Networking Wireless Operating System 10, using the license-add or license-remove CLI commands.
The license keys are obtained per gateway serial-number and applied per gateway MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. on the gateway CLI.
The capacity is identified after decrypting the license and only the capacity-type is stored in an encrypted file on the flash.
If the encrypted file is not present (ZTP Zero Touch Provisioning. ZTP is a device provisioning mechanism that allows automatic and quick provisioning of devices with a minimal or at times no manual intervention. or write erase all) on the gateway, it is considered as a Base license.

How Capacity License Works

Capacity licenses must be manually applied or updated on the 9240 gateways using CLI.

Capacity license management through GLCP and HPE Aruba Networking Central will be added in a future release.

The license is generated in the HPE Networking Support Portal and is also emailed to the customer. The customer copies the license and pastes on the gateway's console, after which the capacity license remains on the gateway. In the case of write erase, the capacity license remains on the gateway. In the case of write erase all, the capacity license is removed from the gateway. You must log into HPE Networking Support Portal or get the license keys from the email and copy-paste the license again on the gateway.

For more information on configuring HPE Aruba Networking 9240 gateway capacity licenses, see Configuring Capacity Licenses on HPE Aruba Networking 9240 Gateways.