Security

I used to use AP-315 and Controller 7205 without PEF license.

but I need to set QOS per client. so I applied PEF license on controller 7205.

now client can't get ip. I don't know what is the reason.

Hi,

You are most likely experiencing this issue because:  When you enabled PEF (Policy Enforcement Firewall), the session rules in the user roles may have blocked DHCP. While there is a loose behavior like "allowall" when PEF is not present, with PEF enabled, if there are no svc-dhcp permissions in the ACL within the initial role (logon) and/or authenticated role, the client cannot obtain an IP address.

Please check if there is a policy for the following rules:
svc-dhcp
svc-dns

Sorry, to be precise... Client can get ip. It says "You have to login this wi-fi". 

Looks like you have a captive portal enabled on this SSID.

Best, Gorazd