beautypg.com

Configuration updates, Securing data tunnels between the switch and aap, Adaptive ap switch failure – Brocade Mobility RFS7000-GR Controller System Reference Guide (Supporting software release 4.1.0.0-040GR and later) User Manual

Page 504

background image

490

Brocade Mobility RFS7000-GR Controller System Reference Guide

53-1001944-01

In this chapter

A

NOTE

For a review of some important considerations impacting the use of extended and independent
WLANs within an AAP deployment, see

Adaptive AP deployment considerations

.

Configuration updates

An AAP receives its configuration from the switch initially as part of its adoption sequence.
Subsequent configuration changes on the switch are reflected on an AAP when applicable.

An AAP applies the configuration changes it receives from the switch after 30 seconds from the last
received switch configuration message. When the configuration is applied on the AAP, the radios
shutdown and re-initialize (this process takes less than 2 seconds) forcing associated MUs to be
deauthenticated. MUs are quickly able to associate.

NOTE

When using a Brocade Mobility 7131N-FGR Access Point in Adaptive AP Mode you must enable
WMM on the associated WLAN in order to achieve the highest data rates available.

NOTE

When using a Brocade Mobility 7131N-FGR Access Point in dependant mode, be aware that any
configuration changes made directly on the AP will be overwritten once the AP is adopted by the
switch and the configuration file from the switch is received.

Securing data tunnels between the switch and AAP

If a secure link (site-to-site VPN) from a remote site to the central location already exists, the AAP
does not require IPSec be configured for adoption.

For sites with no secure link to the central location, an AAP can be configured to use an IPSec
tunnel (with AES 256 encryption) for adoption. The tunnel configuration is automatic on the AAP
side and requires no manual VPN policy be configured. On the switch side, configuration updates
are required to adopt the AAP using an IPSec tunnel.

To review a sample AAP configuration, see

Sample switch configuration file for IPSec and

independent WLAN

.

Adaptive AP switch failure

In the event of a switch failure, an AAP's independent WLAN continues to operate without
disruption. The AAP attempts to connect to other switches (if available) in background. Extended
WLANs are disabled once switch adoption is lost. When a new switch is discovered and a
connection is secured, an extended WLAN can be enabled.

If a new switch is located, the AAP synchronizes its configuration with the located switch once
adopted. If Remote Site Survivability (RSS) is disabled, the independent WLAN is also disabled in
the event of a switch failure.