Wireless Access

last person joined: 8 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

RAP-Split tunnel

This thread has been viewed 2 times
  • 1.  RAP-Split tunnel

    Posted Jul 31, 2015 10:15 AM
      |   view attached

    I have a RAP that I have setup to do split tunnel. When user plugs into wired port on RAP they get a split-tunnel user role and it works great. All corporate traffic to 192.168.200.X goes down the tunnel and everything else (Internet) gets placed right on their home comcast.

     

    The problem...

     

    I also have an SSID being broadcasted from the RAP. When user connects to SSID they get the same split-tunnel user role. However, ALL of the traffic gets sent down the tunnel back to corporate and it does not split tunnel. I have confirmed that the wifi user gets the same role as what you get on the wire.

     

    See attached policy that I am referencing. This should send private IP addresses down the tunnel and everything else (Internet) on the home connection.

     

    Thanks for any advice...... bit stumped at the moment as to why it only works on wire.

     

     



  • 2.  RE: RAP-Split tunnel

    EMPLOYEE
    Posted Jul 31, 2015 10:18 AM
    Do you have the VAP set to split-tunnel?


    Thanks,
    Tim


  • 3.  RE: RAP-Split tunnel
    Best Answer

    EMPLOYEE
    Posted Jul 31, 2015 10:27 AM
    Do you have the WiFi SSID virtual AP forwarding mode configured as split tunnel?


  • 4.  RE: RAP-Split tunnel

    Posted Jul 31, 2015 10:38 AM

    Well then......... don't I feel silly.

     

    Is today Friday? Must have been a long week.

     

    Thanks for the quick reply Tim and Colin.