You definet hebackup configuration in the virtual AP profile on the controller. Theremote A P checks for
configuration updates eacht ime it establishes a connection with t hec ontroller.If the remote AP detects a change,
it downloads the configuration changes.
The followingremote A P backup configuration options define when the SSID is advertised (refer to Table 170 for
more information):
lAlways—Permanentlyenables the virtual AP. R ecommendedfor bridge SSIDs.
lBackup—Enablesthe virtual AP if the remote AP cannot connect to the controller.This SSID i s advertised until
the controlleris reachable.Recommended for bridge SSIDs.
lPersistent—Permanentlyenables the virtual AP after the remote AP initially connects to t heco ntroller.
Recommendedfor 8 02.1x SSIDs.
lStandard—Enablesthe virtual AP when the remote AP connects to the controller. Recommended for 802.1x,
tunneled,and split-tunneled SSIDs. This is the default behavior.
Whileusing the backup configuration, the remote AP periodically retries its IPSec tunnel to the controller. If you
configurethe remote AP in backupmode, and a connection to t heco ntrolleris re-established, the remote AP stops
using the backupconfiguration and immediately brings up the standard remoteA P configuration. If you configure
the remote AP in always or persistent mode, the backupco nfigurationremains active after the IPSec tunnel to the
controllerhas been re-established.

Backup Configuration Behavior for Wired Ports

If the connection between remote AP and the controlleris di sconnected,the remote AP will be exhibit the following
behavior:
lAll access ports on the remote AP, i rrespective of their original forwardingmode w illbe moved to bridge
forwardingmode.
lClients willreceive IP address fromthe remote AP's DHCP server.
lClient will have complete access to Remote A P's uplinknetwo rk.You cannot enforceor modify any access
control policies on the clients connected in this mode.
This section describes the following topics:
l"ConfiguringFallback Mode" on page 524
l"Configuringthe DHCP Serveron the Remote AP " on page 526
l"ConfiguringAdvanced Backup Options" on page 528
Configuring Fa llback Mode
To configure the fallbackmode, you must
lConfigurethe AA A profile.
lConfigurethe vi rtualAP profile

Configuring the AAA Profi le for Fallback Mode in the WebUI

The AAA profile defines the authentication method andt hedefault user role for unauthenticatedusers.
1. Navigate to the Security > Authentication > AAA Profiles page. From the AA A Profiles Summarylist , click
Add.
2. Enter the A AA profile name, then click Add.
3. Select the AAA profile that you just created:
a. Fo r Initial role, select the appropriate role (for example,“logon”).
b. For 802.1X Authentication Default Role, select the appropriate role (for example, “default”),then click Apply.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide RemoteAccessPoints | 524