Wireless Access

Hi,

 

Am new to WLAN and also new to ARUBA products.

 

Topology :

 

ArubaAccessPoint(CAP) ----> DistributionSwitch -----> ArubaController

                                                        |

                                                        DHCPServer

 

 

Initially any tunnel establishment will happen b/w AP and AC immediately After AP associated with AC

 

Below is scenario :

 

1. AP is in Campus access mode.

2. AP got ip address from DHCP Server

3. AP upgrade with image and basic configuration from Controller (AP is in "default" group)

4. ?

    (here tunnel will be established b/w AP and AC ? )

 

Appreciate your prompt response

 

While going through the Aruba documents found , GRE tunnel will be created b/w AP and AC.

Have one more doubt regarding this , is there in exceptional scenario where tunnel won't esablish b/w AP and AC.

No.  It always happens that way, by default.

Thanks Joseph.

 

Is this true for RAP (Remote Access Point) also in bridge mode ? as in one of the document they have mentioned 

 

"""The bridge-mode SSIDs do not have a GRE tunnel back to the controller"""

 

 

RAPs have an ipsec tunnel for management.

 

Thanks Joseph.

 

in both cases (GRE and IPSEC tunnel) , is PAPI used for detecting connection's health ?

------------------------------------------------------------------------------------------------------

Cjoseph wrote :

 

RAPs have an ipsec tunnel for management.

 

------------------------------------------------------------------------------------------------------

 

that means "ipsec tunnel will be established in RAP irrespective of forwarding-modes (Bridge,tunnel,split-tunnel .....) ?.

 

 

Am beginer , are there any documents available to get clear idea on different RAP forwarding modes (Bridge,tunnel,split-tunnel .....).

 

Hi Sorry for catching up late with this conversation, for CAP to Controller by using GRE tunnelling, does it imply there will be no data encryption for the traffic pass through? i 'm a beignner for this, but from end devices to APs after the successful authenticaions the traffic will be encrypted by WPA+AES?

---

@cjoseph wrote:

No.  It always happens that way, by default.

---

Hi Sorry for catching up late with this conversation, for CAP to Controller by using GRE tunnelling, does it imply there will be no data encryption for the traffic pass through? i 'm a beignner for this, but from end devices to APs after the successful authenticaions the traffic will be encrypted by WPA+AES?

Whatever encryption is used on the wifi, is tunneled back encrypted in the GRE tunnel.

 

In a campus ap, papi is used for control and ap state monitoring. Gre is used for tunneling user traffic.

In a remote ap that is done over ipsec.

1. Yes. Rap will have an ipsec tunnel regardless of forwarding mode.

The user guide at support.arubanetworks.com and the Aruba Validated Reference guides are a good starting point.

Thanks Joseph