Wireless Access

Contributor I

Remote AP split tunnel always mode

Customer uses remote APs with 3G to connect to the controller. Today he uses a split-tunnel vap but this requires an initial connection from AP to the controller for the SSID to be broadcasted.


When the remote AP is booted on a location where there is no 3G reception, he wants the clients to connect to an SSID where they can communicate with eachouter.

Seems like the only option to broadcast a PSK SSID without initial controller connection = bridge mode.

If you chose bridge mode, all the traffic is bridged out locally. Which means for situation where there is controller connectivity, the traffic is not tunneled back to the controller hence he cannot remotely takeover these devices.


I have tried to work my way around that with 2 VAPs: one main split tunneled with rap operation persistent and one backup ssid with rap operation backup. The main issue here is there cannot be SSIDs with the same name in the same ap-group, regardless of their "rap operation". So this would require the clients to be reconfigured each time there is/isn't controller connection.


Is there no option to boot the split tunnel PSK SSID without initial controller connection? Or can this be solved otherwise?

Guru Elite

Re: Remote AP split tunnel always mode

You cannot have split-tunnel as an Always SSID, unfortunately..  The only option is a PSK bridged SSID..correct...

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Contributor I

Re: Remote AP split tunnel always mode

No other ideas on how to solve this ?

Re: Remote AP split tunnel always mode

You other option is to do IAP-VPN with DHCP Distributed L3 or Centralized L2

Sent from Outlook for iPhone
Thank you

Victor Fabian
Lead Mobility Architect @WEI
Search Airheads
Showing results for 
Search instead for 
Did you mean: