Administrator Guide
82 | Preparing the Mobility Controller for W-ClearPass PolicyManager Integ-
ration
Dell Networking W-ClearPass Deployment Guide
VAP Parameter Action/Description
To associate that VLAN with the virtual AP profile:
a. Click the drop-down list to select a configured VLAN.
b. Click the Arrow button.
Forward mode
The Forward mode parameter controls whether data is tunneled to the mobility
controller using generic routing encapsulation (GRE), bridged into the local
Ethernet LAN (for remote APs), or a combination thereof depending on the
destination—corporate traffic goes to the mobility controller, and Internet access
remains local.
All forwarding modes support band steering, Traffic Specification (TSPEC) and
Traffic Classification (TCLAS) enforcement, 802.11k, and station blacklisting.
3. Click the drop-down list to select one of the following forward modes:
l Tunnel: The AP handles all 802.11 association requests and responses, but it
sends all 802.11 data packets, action frames, and Extensible Authentication
Protocol Over LAN (EAPOL) frames over a GRE tunnel to the mobility controller
for processing. You can configure both remote and campus APs in tunnel mode.
l Bridge: 802.11 frames are bridged into the local Ethernet LAN. Both remote and
campus APs can be configured in Bridge mode. You must enable the control
plane security feature on the mobility controller before you configure campus
APs in bridge mode.
l Split-Tunnel: 802.11 frames are either tunneled or bridged, depending on the
destination.
NOTE: Decrypt-Tunnel: Both remote and campus APs can be configured in decrypt-
tunnel mode. When an AP uses decrypt-tunnel forwarding mode, that AP decrypts
and decapsulates all 802.11 frames from a client and sends the 802.3 frames
through the GRE tunnel to the mobility controller, which then applies firewall policies
to the user traffic.
NOTE: Before you configure campus APs in decrypt-tunnel forward mode, you must
enable the Control Plane Security feature on the mobility controller.
RF
Allowed band
4. Specify the band on which to use the virtual AP:
l a—802.11a band only (5 GHz)
l g—802.11b/g band only (2.4 GHz)
l all—Both 802.11a and 802.11b/g bands (5 GHz and 2.4 GHz)
The default band setting is all.
Band Steering
5. Enable the Band Steering parameter to reduce co-channel interference and
increase available bandwidth for dual-band clients (because there are more
channels on the 5GHz band than on the 2.4GHz band).
l This feature supports both campus APs and remote APs that have a virtual AP
profile set to tunnel, split-tunnel, or bridge forwarding mode.
l This feature is disabled by default, and must be enabled in a virtual AP profile.
Steering Mode
6. Specify the Band Steering mode:
l Force-5GHz: When the AP is configured in force-5GHz band steering mode, the