Do I Need to Create a Service VLAN on an AC When the AC Is Deployed in Bypass Mode and Service Data Is Forwarded in Direct Mode?

When an AC is deployed in bypass mode, service data is forwarded in direct mode, and the AC functions as the gateway for STAs, service VLANs must be created on the AC.

When an AC is deployed in bypass mode, service data is forwarded in direct mode, and the AC does not function as the gateway for STAs, service data does not pass through the AC. Therefore, you do not need to create service VLANs locally on the AC. However, if 802.1X authentication is used, you need to create service VLANs on the AC because authentication packets are forwarded through CAPWAP tunnels. Operations on the CLI and web platform are as follows:

• On the CLI:

  Create service VLANs on the AC in any version.

• On the web platform:

  In versions earlier than V200R008, create service VLANs on the AC. In V200R008 and later versions, the system automatically creates a service VLAN when you perform service VLAN configurations.