Greetings,
I'm trying to configure a network profile with forward-mode split tunnel. Here's the configuration I'm using:
******************************************************************************
wlan ssid-profile <profile_name>
wlan ssid-profile <profile_name> no hide-ssid
wlan ssid-profile <profile_name> essid <name>
wlan ssid-profile <profile_name> wpa-passphrase <password>
wlan ssid-profile <profile_name> opmode wpa-psk-aes
aaa authentication dot1x <profile_name>
aaa authentication dot1x <profile_name> no termination enable
aaa authentication dot1x ST05_static no machine-authentication enable
aaa authentication dot1x <profile_name> max-authentication-failures 0
aaa authentication dot1x <profile_name> timer reauth-period 86400
aaa profile <profile_name>
aaa profile <profile_name> initial-role authenticated
aaa profile <profile_name> mac-default-role guest
aaa profile <profile_name> authentication-dot1x <profile_name>
aaa profile <profile_name> dot1x-default-role guest
wlan virtual-ap <profile_name>
wlan virtual-ap <profile_name> aaa-profile <profile_name>
wlan virtual-ap <profile_name> vlan <vlan>
wlan virtual-ap <profile_name> ssid-profile <profile_name>
wlan virtual-ap <profile_name> forward-mode split-tunnel
ap-group default
ap-group default virtual-ap <profile_name>
write memory
******************************************************************************
The above configuration worked for tunnel and decrypt-tunnel; however, I do not see the SSID going active and appear on the network for split-tunnel. Am I missing something? Does it also work with TKIP (WPA, WPA2)?
Thank you for your support.