ap wired-ap-profile

Name of this instance of the profile. The name must be 1–63 characters.

Forward broadcast traffic to this tunnel.

Name of an existing wired AP profile from which parameter values are copied.

In this default forwarding mode, the AP handles all 802.11 association requests and responses, but sends all 802.11 data packets, action frames and EAPOL frames over a GRE tunnel to the managed device for processing. The managed device removes or adds the GRE headers, decrypts or encrypts 802.11 frames and applies firewall rules to the user traffic as usual. This parameter controls whether data is tunneled to the managed device using generic routing encapsulation (GRE), bridged into the local Ethernet LAN (for remote APs), or a combination thereof depending on the destination (corporate traffic goes to the managed device, and Internet access remains local). All forwarding modes support band steering, TSPEC or TCLAS enforcement, 802.11k and station blacklisting/denylisting.

802.11 frames are bridged into the local Ethernet LAN. When a remote AP or campus AP is in bridge mode, the AP handles all 802.11 association requests and responses, encryption or decryption processes, and firewall enforcement. The 802.11e and 802.11k action frames are also processed by the AP, which then sends out responses as needed.

An AP in bridge mode supports 802.1X and MAC authentication types.

Virtual APs in bridge mode using static WEP should use key slots 2–4 on the managed device. Key slot 1 should only be used with Virtual APs in tunnel mode.

802.11 frames are either tunneled or bridged, depending on the destination (corporate traffic goes to the managed device, and Internet access remains local). An AP in split-tunnel mode supports only the 802.1X authentication type.

An AP in split-tunnel forwarding mode handles all 802.11 association requests and responses, encryption or decryption, and firewall enforcement. The 802.11e and 802.11k action frames are also processed by the AP, which then sends out responses as needed.

Virtual APs in split-tunnel mode using static WEP should use key slots 2–4 on the managed device. Key slot 1 should only be used with Virtual APs in tunnel mode.

In this default forwarding mode, the AP handles all 802.11 association requests and responses, but sends all 802.11 data packets, action frames, and EAPOL frames over a GRE tunnel to the managed device for processing. The managed device removes or adds the GRE headers, decrypts or encrypts 802.11 frames and applies firewall rules to the user traffic as usual.

Negates any configured parameter.

Configures the switching mode characteristics for the port.

The VLAN to which the port belongs. The default is VLAN 1.

The mode for the port, either access or trunk mode. The default is access mode.

Allows multiple VLANs on the port interface.

You must define this parameter using VLAN IDs or VLAN names

VLAN IDs and VLAN names cannot be listed together.

The native VLAN for the port (frames on the native VLAN are not tagged with 802.1q tags).

Sets port as either trusted or untrusted. The default setting is untrusted.

Enables the wired AP. The wired AP is disabled by default.

Enables the wired AP mode. The wired AP mode can be set to daisy-chain or normal modes.

Enables daisy-chain mode. In this mode, the port works on trusted bridge mode and it retains the previous wired port configuration even when the Controller is disconnected.