Users Guide

2347 | wlan virtual-ap Dell Networking W-Series ArubaOS 6.4.x| User Guide
Parameter Description Range Default
and responses,
encryption/decryption
processes, and firewall
enforcement. 802.11e
and 802.11k action
frames are also
processed by the AP,
which then sends out
responses as needed.
An AP in bridge mode
supports only the 802.1x
authentication type.
l Split-Tunnel: Data
frames are either
tunneled or bridged,
depending on the
destination (corporate
traffic goes to the
controller, and Internet
access remains local).
The AP handles all
802.11 association
requests and
responses,
encryption/decryption,
and firewall
enforcement. 802.11e
and 802.11k action
frames are also
processed by the AP,
which then sends out
responses as needed.
An AP in split-tunnel
mode supports only the
802.1x authentication
type.
l Decrypt-Tunnel: An AP
in decrypt-tunnel
forwarding mode
decrypts and
decapsulates all 802.11
frames from a station
and sends the 802.3
frames through the GRE
tunnel to the controller,
which then applies
firewall policies to the
user traffic. This mode
allows a network to
utilize the
encryption/decryption
capacity the AP while
reducing the demand
for processing
resources on the
controller. APs in
decrypt-tunnel
forwarding mode also
manage all 802.11
association requests