Reference Guide

128 | ap wired-ap-profile Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
Syntax
Usage Guidelines
This command is only applicable to Dell APs that support a second Ethernet port. The wired AP profile
configures the second Ethernet port (enet1) on the AP.
For mesh deployments, this command is applicable to all Dell APs configured as mesh nodes. If you are using
mesh to join multiple Ethernet LANs, configure and enable bridging on the mesh point Ethernet port.
Mesh nodes only support bridge mode and tunnel mode on their wired ports (enet0 or enet1). Split tunnel mode
is not supported.
Parameter Description
<profile> Name of this instance of the profile. The name must be 1-63 characters.
broadcast Forward broadcast traffic to this tunnel.
clone Name of an existing wired AP profile from which parameter values are copied.
forward-mode This parameter controls whether data is tunneled to the controller using generic routing
encapsulation (GRE), bridged into the local Ethernet LAN (for remote APs), or a combination thereof
depending on the destination (corporate traffic goes to the controller, and Internet access remains
local). All forwarding modes support band steering, TSPEC/TCLAS enforcement, 802.11k and station
blacklisting.
tunnel In this default forwarding mode, the AP handles all 802.11 association requests and responses, but
sends all 802.11 data packets, action frames and EAPOL frames over a GRE tunnel to the controller
for processing. The controller removes or adds the GRE headers, decrypts or encrypts 802.11 frames
and applies firewall rules to the user traffic as usual.
bridge 802.11 frames are bridged into the local Ethernet LAN. When a remote AP or campus AP is in bridge
mode, the AP handles all 802.11 association requests and responses, encryption/decryption
processes, and firewall enforcement. The 802.11e and 802.11k action frames are also processed by
the AP, which then sends out responses as needed.
An AP in bridge mode supports only the 802.1x authentication type.
NOTE: Virtual APs in bridge mode using static WEP should use key slots 2-4 on the controller. Key
slot 1 should only be used with Virtual APs in tunnel mode.
split-tunnel 802.11 frames are either tunneled or bridged, depending on the destination (corporate traffic goes to
the controller, and Internet access remains local). An AP in split-tunnel mode supports only the
802.1x authentication type.
An AP in split-tunnel forwarding mode handles all 802.11 association requests and responses,
encryption/decryption, and firewall enforcement. The 802.11e and 802.11k action frames are also
processed by the AP, which then sends out responses as needed.
NOTE: Virtual APs in split-tunnel mode using static WEP should use key slots 2-4 on the controller.
Key slot 1 should only be used with Virtual APs in tunnel mode.
no Negates any configured parameter.
switchport Configures the switching mode characteristics for the port.
access The VLAN to which the port belongs. The default is VLAN 1.
mode The mode for the port, either access or trunk mode. The default is access mode.
trunk allowed Allows multiple VLANs on the port interface.
You must define this parameter using VLAN IDs or VLAN names
VLAN IDs and VLAN names cannot be listed together.
trunk native The native VLAN for the port (frames on the native VLAN are not tagged with 802.1q tags).
trusted Sets port as either trusted or untrusted. The default setting is untrusted.
wired-ap-enable Enables the wired AP. The wired AP is disabled by default.