Wireless Access

Contributor I

Limitation on Bridge forwarding mode!


What are the limitation if i select AP's forwarding mode as Bridge. Will QOS ,Firewall policies (web catagory or IP session based ACL's) work?


I have two different location connected through MPLS. I have 7210 controller placed  in both Location and I require that if location 1 controller goes down it should latch to location 2 controller and vice versa.I can see that in tunnel forwarding mode it can be a challlenge hence want AP's to work in bridge forwarding mode. Please suggest if bridge mode will have any limitations! 


Will centralized licensing work or i need to add additional licenses on both controller for failure AP;s

thanks in advance.

Guru Elite

Re: Limitation on Bridge forwarding mode!

Firewall policies will work, along with session-based acls.  Web Category and QOS will not work.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Contributor II

Re: Limitation on Bridge forwarding mode!

If you really plan to use Bridge Mode (that you should avoid using unless no other solutions exist; tunnelling makes much more sense in pretty all cases), do not forget to enable Control Plane Security (CPsec).


A few bugs on Bridge Mode were fixed over the last year; pay close attention to the version you are using now as AOS is the minimum in the 6.4 series branch to be usuable.


Engage your Partner or Aruba Support center if you have any doubts or question about your implementation.


Re: Limitation on Bridge forwarding mode!

Other limitations are also outlined here

If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACCX #817, ACMP, ACMX #294
Search Airheads
Showing results for 
Search instead for 
Did you mean: