It is only applied to the master controller

It is only applied to the DMZ controller.

It is based on the number of APs

One license is needed on the master and the DMZ local

It is distributed by the license server as needed

Backup master only requires the AP license

Supported limits and installed licenses should be the same on primary master and backup Master

Licenses are pushed from the primary to the backup Master along with the configuration

The Backup Master does not require licenses to support master redundancy

On the backup only one license of each type,is needed.

Factory default licenses

Master Controller licenses

Evaluation licenses

Local Controller licenses

PEFV license

In the clear unencrypted since the master and local controllers already share IPSEC tunnels.

Using CPSec

Using IPSec site to site VPN tunnels

Encrypted using GRE

PAPI

Local controllers licenses will continue to be valid for 30 days

Local controllers will immediately remove all installed licenses

No licenses will be sent to any new controllers that come online

All licenses go back into the pool for redistribution

A Local Controller elects itself master license server