topic Re: AP management in LWAPP tunnel in ZoneDirector

AP management in LWAPP tunnel

bas_sanders — Thu, 26 Dec 2013 11:00:25 GMT

Hi,

We are tunneling all sessions from our AP's to our ZD's using standard LWAPP as provided in the ZD's.

Unfortunately it seems to be impossible to manage an AP directly over the tunnel as the AP does not have an IP interface inside the tunnel.

The only way of managing the AP is either on the local interface of the AP, or using the ZD.

As our AP's are behind internet connections, it is impossible for us to use speedflex for example.

When we are using L2TP this is however configurable, but then we lack configurability through the ZD.

Also using L2TP we are able to put a 2nd or third interface on the AP inside the tunnel. This is a GREAT feature we are missing when we use LWAPP.

Is there a way around this config?

Regards,

Bas

Re: AP management in LWAPP tunnel

michael_brado — Fri, 27 Dec 2013 21:08:31 GMT

Bas, you are correct. LWAPP, the AES encrypted Light Weight Access Point
Protocol, is a secure path for a ZoneDirector to manage APs under its control,
and to transport tunneled client traffic, from the AP wireless or wired interfaces.
It is not intended for other type of AP management.

You may open a browser, with limited display, to a local AP LAN port address of
a ZD managed AP.

L2TP was designed for management of standalone (not ZD managed) APs, thru
FlexMaster or similar NMS application, but we do not design our AP for customers
to put additional L2TP interfaces on them.

If you have a viable business reason and finances to convince Ruckus to pursue
your design feature request, please submit it thru your Account/Sales team.

Re: AP management in LWAPP tunnel

bas_sanders — Fri, 27 Dec 2013 21:39:03 GMT

Hi Michael, Thanks for your response.

You mention that the wired interfaces can be tunneled over LWAPP to the ZD as well, is that correct?

If so, that is the second functionality i asked for. To my knowledge it is not possible to tunnel a wired interface on the AP to the ZD using LWAPP but i am hoping i am wrong :-)

Having a management IP inside the tunnel for management would in our opinion bring an increased layer of security and manageability. Being able to tunnel a wired interface would be more beneficial to our concept though..

Re: AP management in LWAPP tunnel

bas_sanders — Mon, 24 Feb 2014 21:37:17 GMT

Hi Michael,

Could you please have a look at my previous questions?

Regards,

Bas

Re: AP management in LWAPP tunnel

michael_brado — Tue, 25 Feb 2014 01:24:56 GMT

No, we do not support tunneling the wired interface to the ZD, the AP port traffic would be locally switched onto that VLAN.

Re: AP management in LWAPP tunnel

bas_sanders — Fri, 28 Feb 2014 12:05:40 GMT

Thanks for clearing that up Michael.

This is possible when using L2TP.. Is this something that is on the roadmap to be implemented on LWAPP as well?

Regards,

Bas