RAPs should never be deployed in succession (things sharing a specified characteristic and following one after the other). In other words, the uplink port of one RAP should not be connected to the Ethernet port of another RAP to share the WAN uplink. This deployment model is not supported by the Aruba RAP solution.
For example, if RAP-A is connected through RAP-B, the IPsec tunnel of RAP-A will be formed within the IPsec tunnel of RAP-B and this causes double encryption and double decryption of traffic between the controller and RAP-A. The double IPsec encryption and decryption of traffic affects the performance by increasing the fragmentation and delay.
RAP behind a RAP deployment that is not supported by Aruba.