Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

RMP and MP Split-Tunnel

This thread has been viewed 0 times
  • 1.  RMP and MP Split-Tunnel

    Posted May 23, 2018 02:13 PM

    Hello,

     

    I was wondering if it is possible to run split-tunnel on Mesh Points when connected to RMP.

     

    I want to do this because we currently run RAPs in locations that could use a second RAP due to coverage.  The issue with running two or more RAPs in one location, is they dont hand off well when split-tunneled (loss of firewall state) and it causes the network to drop.

     

    One fix for this is to run the RAPs in full tunnel but some of our locations have poor internet access and running full tunnel makes their connection to the internet very poor.

     

    From what i understand, the issue is due to the firewall state being on the RAP and when a client moves to another split-tunnel RAP, their firewall state is lost and this will cause all network applications to reconnect.  This crashes out one of our web applications and we can not use mutiple RAPs in locations.

     

    What i am hoping we can do is setup RMP with MP and the firewall state would be on the RMP for all users (like a IAP cluster and the virtual controller) and setup the VAP on the MP to be split-tunneled.



  • 2.  RE: RMP and MP Split-Tunnel

    Posted May 24, 2018 09:44 AM

    Anyone have any ideas?



  • 3.  RE: RMP and MP Split-Tunnel

    EMPLOYEE
    Posted May 24, 2018 11:15 AM

    Only RAPs are capable of performing split-tunneling, so for sites as you've described with poor internet access, using an Instant cluster for mesh and local termination of traffic is probably your best bet.



  • 4.  RE: RMP and MP Split-Tunnel

    Posted May 24, 2018 11:18 AM

    I tested using a instant cluster and had some issues with it and it wouldnt fit our needs.

     

     

    A Remote Mesh Portal is a RAP that is also a mesh portal.  From the documentaion i have read, it sounds like the RMP supports split tunnel.  What im not 100% sure about is if the MP support split tunnel.



  • 5.  RE: RMP and MP Split-Tunnel
    Best Answer

    EMPLOYEE
    Posted May 24, 2018 12:18 PM

    @Mathew Flowerswrote:

    A Remote Mesh Portal is a RAP that is also a mesh portal.  From the documentaion i have read, it sounds like the RMP supports split tunnel.  What im not 100% sure about is if the MP support split tunnel.


     

    Correct, the Mesh Point does not support split-tunnel.



  • 6.  RE: RMP and MP Split-Tunnel

    Posted May 24, 2018 01:25 PM

    Thank you.