Administrator Guide

737 | Remote Access Points Dell Networking W-Series ArubaOS 6.4.x| User Guide
The following remote AP backup configuration options define when the SSID is advertised (refer to Table 147
for more information):
l Always—Permanently enables the virtual AP. Recommended for bridge SSIDs.
l Backup—Enables the virtual AP if the remote AP cannot connect to the controller. This SSID is advertised
until the controller is reachable. Recommended for bridge SSIDs.
l Persistent—Permanently enables the virtual AP after the remote AP initially connects to the controller.
Recommended for 802.1x SSIDs.
l Standard—Enables the virtual AP when the remote AP connects to the controller. Recommended for
802.1x, tunneled, and split-tunneled SSIDs. This is the default behavior.
While using the backup configuration, the remote AP periodically retries its IPSec tunnel to the controller. If you
configure the remote AP in backup mode, and a connection to the controller is re-established, the remote AP
stops using the backup configuration and immediately brings up the standard remote AP configuration. If you
configure the remote AP in always or persistent mode, the backup configuration remains active after the IPSec
tunnel to the controller has been re-established.
Backup Configuration Behavior for Wired Ports
If the connection between the remote AP and the controller is disconnected, the remote AP will be exhibit the
following behavior:
l All access ports on the remote AP will be moved to bridge forwarding mode ,irrespective of their original
forwarding mode..
l Clients will receive an IP address from the remote AP's DHCP server.
l Clients will have complete access to Remote AP's uplink network. You cannot enforce or modify any access
control policies on the clients connected in this mode.
This section describes the following topics:
l Configuring Fallback Mode on page 737
l Configuring the DHCP Server on the Remote AP on page 739
l Configuring Advanced Backup Options on page 741
Configuring Fallback Mode
To configure the fallback mode, you must:
l Configure the AAA profile
l Configure the virtual AP profile
Configuring the AAA Profile for Fallback Mode
In the WebUI
The AAA profile defines the authentication method and the default user role for unauthenticated users:
1. Navigate to the Security > Authentication > AAA Profiles page. From the AAA Profiles Summary list,
click Add.
2. Enter the AAA profile name, then click Add.
3. Select the AAA profile that you just created:
a. For Initial role, select the appropriate role (for example, “logon”).
b. For 802.1X Authentication Default Role, select the appropriate role (for example, “default”), then
click Apply.