Dell 6.2 Configuring Ethe rnet Ports for Sec ure Jack O peration

lAccess mode forwards untaggedpackets received on the port to the controller and they appear on the
configuredaccess mode VLAN. Tagged packets are dropped. Allpackets received from the controller and
sent via this port are untagged.Define the access mode V LAN in the Access mode VLAN field.
lTrunkmode contains a list of allowed VLANs. Any packet receivedo nthe port that is tagged with an
allowedV LAN is forwarded to the controller.Untagged packets are forwarded to the controller on the
configuredNati ve VLAN. Packets received from the controllerand sent out the port remain tagged unless
the tag valuei nt hepacket is the Native VLAN, in which case the tag is removed. Define the Native
VLAN in the Trunk mode native VLANfield and the other allowed VLANs in the Trunk mode allowed
VLANsfi eld.
d. Optionally, select Trusted to co nfigurethis as a t rustedport.
5. Click Apply.
Use the followingco mmandsto c onfigureethernet port bridging via the CLI.
(host)(config) #ap wired-ap-profile <profile>
forward-mode bridge
wired-ap-enable
Optionally,you can co nfigurethe following wired AP profileset tings:
(host)(config) #ap wired-ap-profile <profile>
switchport mode {access | trunk}
switchport access vlan <vlan>
switchport trunk native vlan <vlan>
switchport trunk allowed vlan <vlan>
trusted
Configuring Ethe rnet Ports for Sec ure Jack O peration
You can configuret he Ethernet port(s) on mesh nodes to operate in tunnel mode. Known as secure jack operation
for mesh,this configuration allows Ethernet framesc oming into the specified wired interface to be generic routing
encapsulation(GRE ) tunneledto the controller. Likewise, Ethernet frames coming fromt het unnelare bridged to
the correspondingwi redi nterface.This allows an Et hernetport o n the meshnode t o appear as an Ethernet port on
the controllerseparated by one o r more Layer-3 domains. You can also enableV LAN tagging.
Unlikesecure jack o n non-meshAPs , any meshnode co nfiguredfor secure jack uses the mesh link, rather than enet0,
to tunnelt heframe to the controller.
Whenconfiguring mesh Ethernet ports for secure jack operation, note t he followingguidelines:
lMesh points support secure jack on enet0 and enet1.
lMesh portalsonly support secure jack on enet1. This functioni s onlyapplicable to Dell APs that support a
second Ethernet port and mesh,such as the W-AP13 0 Series andW-AP 120 Series.
You configuresecure jack operatio n in the wired AP profile.
NOTE:The param etersin the wi red AP profile only apply to thew ired AP interface tow hich theyare appl ied. Two wired interfaces
canhave di fferentparameter values.
In the WebUI
Use the followingprocedure to configure secure jack operation using the WebUI.
1. Navi gatet o the Configuration > Wireless > AP Configuration > AP G roup window.
2. Click the Edit button by the AP groupw ith the wired AP profile you want to edit.
3. Under the Profiles list, expand the APmenu,thenselect Wir ed AP profile. The settings for the currently selected
wired AP profile appear.
You can usea di fferentwired AP profile by selecting a profile from the Wired AP profile drop-down list.
DellPowerConnect W- Series ArubaOS 6.2 | User Guide SecureEnterprise Mesh | 465