Technical data

Add an ESS with the Web UI
© 2012 Meru Networks, Inc. Configuring an ESS 55
— Bridged: (Bridged mode was formerly Remote AP mode.) In bridged mode, data
packets are not passed between AP300/AP1000 and the controller; only control
plane packets are passed. When bridged mode is configured in 5.1, an AP300
or AP1000 can be installed and managed at a location separated from the
controller by a WAN or ISP, for example at a satellite office. The controller
monitors the remote APs through a keep-alive signal. Remote APs can exchange
control information with the controller, including authentication and
accounting information, but they are unable to exchange data. Remote APs
can, however, exchange data with other APs within their subnet. ESSIDs in
bridged mode cannot exchange dataplane traffic (including DHCP) with the
controller and the following System Director features are not available in a
bridged configuration: Rate Limiting, and QoS (and all QoS-related features).
For more explanation, see Bridging Versus Tunneling in this chapter.
A VLAN tag can be configured for a Bridged mode profile (see Step 28 below)
and then multiple profiles can be associated to that VLAN tag. The AP VLAN
priority can be set in Step 26 below.
24. Provide an AP VLAN tag between zero and 4094. This VLAN tag value is configured
in the controller VLAN profile and is used for tagging client traffic for ESSIDs with
dataplane mode bridged, using 802.1q VLAN. This field indicates whether an AP
needs to map incoming VLAN 802.1p data packets into WMM ACs or not. By default
in a bridged ESS, this field is disabled and an AP always honors DSCP field in IPV4
packet to map an incoming packet to one of WMM ACs. When turned on, an AP
honors VLAN 802.1p priority over DSCP priority when the packet is mapped into
one of WMM ACs.
25. To Enable VLAN Priority, set this field to On.
— On: AP disregards the DSCP value in the IP header of a packet.
— Off: AP honors the DSCP values in the IP header of a packet. AP converts the
DSCP value in the IP header to appropriate WMM queues. This feature works
only for downstream packets and only for an ESSID with dataplane mode set to
bridged.
26. For Countermeasure, select when to enable or disable MIC Countermeasures:
— On: (default) Countermeasures are helpful if an AP encounters two
consecutive MIC errors from the same client within a 60 second period. The AP
will disassociate all clients from the ESSID where the errors originated and not
allow any clients to connect for 60 seconds. This prevents an MIC attack.
— Off: Countermeasures should only be turned off temporarily while the network
administrator identifies and then resolves the source of a MIC error.
27. In the Enable Multicast MAC Transparency field, indicate on or off. For more
explanation, see Multicast MAC Transparency Feature in this chapter.
— On: All downstream multicast packets will have the MAC address of the
streaming station.
— Off: (default) All downstream multicast packets will have the MAC address of
the controller.
28. Band steering balances multi-band capable clients on AP300/AP1000 by assigning
bands to clients based on their capabilities. To use band steering for ABGN traffic,
you could use A-steering to direct dual mode clients with A capability to the 5GHz
band and use N-steering to direct all dual mode clients with AN capability to the