l"Workingwith A ccess Control Lists and Firewall Policies" on page 53 5
l"UnderstandingSplit Tunneling" on page 535
l"Provisioning Wi-Fi Multimedia" on page 541
NOTE:The i nformation in this sectionassumes you have already configured the remote AP functionality, as described "Configuring
the Secure Remote Access PointS ervice"on page 512.
Understand ing Remote AP Mode s of Operation
Table1 70 summarizes the differentremote AP modes o fo peration.You specify bo th theforward mode setting
(which controls whether80 2.11 framesare tunneled to the controller using GRE, bridgedt o the localE thernetLAN ,
or a combination thereof) andt heremote AP modeof operatio n(when the virtual AP operates on a remote AP) i n
the virtual AP profile.
The columnon the left of the table lists the remote AP operation sett ings.The row across the to po f thet ablelists
the forwardmode setti ngs.To understand how these settings work in concert, scan the desired remote AP operation
with the forward modeset ting andread the information in the appropriate table cell.
The “all”c olumnand row lists features that all remote AP operation and forward mode settings have in common
regardlessof other settings. For example, at the intersection of “all” and “bridge,” the description outlines what
happensin bridge mode regardless of the remote AP mode of operatio n.

Remote

AP

Oper-

ation

Setting

Forward Mode Setting

all bridge split-tunnel tunnel decrypt-tunnel
all Management
frameson AP.
Framesare bri dged
betweenw ired and
wireless interfaces.
Noframes are
tunneledto the
controller.
Stationacquires i ts
IPaddress local ly
froman external
DHCPserver.
Managementframes
onAP.
Framesare ei ther
GREtunneled to the
controller toa
trustedtunnel or
NATedand bridged
onthe wi red
interfaceaccording
touser role and
sessionACL.
Typically, the station
obtainsan IP
addressfrom a V LAN
onthe controller.
Typically, the AP has
ACLsthat forward
corporatetraffic
throughthe tunnel
andsource NAT the
non-corporatetraffic
tothe Internet.
Framesare GRE
tunneledto the
controller toan
untrustedtunnel.
100%of station
framesare tunneled
tothe controller.
Management
frameson AP.
Framesare
alwaysGRE
tunneledto
controller.

Table17 0:

RemoteAP Modes of Operationand Behavior

DellPowerConnect W- Series ArubaOS 6.2 | UserGuide RemoteAccessPoints |522