Concept Guide

2365| wlan virtual-ap Dell Networking W-Series ArubaOS 6.5.x| Reference Guide
Parameter Description Range Default
controller for processing.
The controller removes or
adds the GRE headers,
decrypts or encrypts 802.11
frames and applies firewall
rules to the user traffic as
usual.
l Bridge: When an AP is in
bridge mode, data is
bridged onto the local
Ethernet LAN. When in
bridge mode, the AP
handles all 802.11
association requests and
responses,
encryption/decryption
processes, and firewall
enforcement. 802.11e and
802.11k action frames are
also processed by the AP,
which then sends out
responses as needed. An AP
in bridge mode supports
only the 802.1X
authentication type.
l Split-Tunnel: Data frames
are either tunneled or
bridged, depending on the
destination (corporate
traffic goes to the controller,
and Internet access remains
local). The AP handles all
802.11 association requests
and responses,
encryption/decryption, and
firewall enforcement.
802.11e and 802.11k action
frames are also processed
by the AP, which then sends
out responses as needed.
An AP in split-tunnel mode
supports only the 802.1X
authentication type.
l Decrypt-Tunnel: An AP in
decrypt-tunnel forwarding
mode decrypts and
decapsulates all 802.11
frames from a station and
sends the 802.3 frames
through the GRE tunnel to
the controller, which then
applies firewall policies to
the user traffic. This mode
allows a network to utilize
the encryption/decryption
capacity the AP while
reducing the demand for
processing resources on the