No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S5720HI V200R010C00 Configuration Guide - WLAN-AC

This document describes native AC (hereinafter referred to as WLAN AC) configuration procedures and provides configuration examples.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Data Forwarding Mode

Data Forwarding Mode

Data on a WLAN involves control packets (management packets) and data packets. Control packets are forwarded through CAPWAP control tunnels. Data packets are forwarded in tunnel forwarding (centralized forwarding) or direct forwarding (local forwarding) mode according to whether data packets are forwarded through CAPWAP data tunnels.

Tunnel Forwarding

In tunnel forwarding mode, APs encapsulate service data packets over a CAPWAP data tunnel and send them to an AC, which then forwards these packets to an upper-layer network, as shown in Figure 4-21.
Figure 4-21  Tunnel forwarding

Direct Forwarding

In direct forwarding mode, an AP directly forwards service data packets to an upper-layer network without encapsulating them over a CAPWAP data tunnel, as shown in Figure 4-22.
Figure 4-22  Direct forwarding

Centralized Authentication in Direct Forwarding Mode

If direct forwarding is used, service data does not need to be forwarded by an AC. When user access authentication (for example, 802.1X authentication) is required on a wireless user access network and the access control point is deployed on an AC, user authentication packets cannot be managed by the AC in a centralized manner. This makes in controlling users in a uniform manner difficult.

In direct forwarding mode, the AC supports centralized authentication by default. User authentication packets can be forwarded over CAPWAP tunnels to the AC, while common data packets do not need to be forwarded by the AC, as shown in Figure 4-23.

Figure 4-23  Centralized authentication in direct forwarding mode

Comparison of tunnel forwarding and direct forwarding

Table 4-3  Comparison of tunnel forwarding and direct forwarding
Data Forwarding Mode Advantage Disadvantage
Tunnel forwarding

An AC forwards data packets in a centralized manner, ensuring security and facilitating centralized management and control.

Service data must be forwarded by an AC, reducing packet forwarding efficiency and burdening the AC.

Direct forwarding

Service data packets do not need to be forwarded by an AC, improving packet forwarding efficiency and reducing the burden on the AC.

Service data packets cannot be centrally managed or controlled.

Updated: 2019-12-28

Document ID: EDOC1000141952

Views: 203995

Downloads: 522

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next