AP-VPN Deployment Scenarios
35.4 Scenario 4 - GRE: Single Datacenter Deployment with No Redundancy
SCALANCE W1750D UI
Configuration Manual, 02/2018, C79000-G8976-C451-02
551
7. Create access rule for wired and
wireless authentication.
(scalance)(config)# wlan access-rule wired-
port
(scalance)(Access Rule "wired-port")# rule
any any match any any any permit
For WLAN SSID employee roles:
(scalance)(config)# wlan access-rule wire-
less- ssid
(scalance)(Access Rule "wireless-ssid")#
rule any any match any any any permit
See Configuring ACL
Rules for Network Ser-
vices
Ensure that you execute the
command in the SCALANCE W CLI before saving the configuration and
propagating changes across the AP cluster
AP-Connected Switch Configuration
Client VLANs defined in this example must be opened on the upstream switches in multiple
AP deployments, as client traffic from the slave to the master is tagged with the client VLAN.
For information on controller configuration, see Configuring a Controller for AP-VPN
Operations on page 245. The following GRE configuration is required on the controller:
(scalance)(config)# interface tunnel <Number>
(scalance)(config-tunnel)# description <Description>
(scalance)(config-tunnel)# tunnel mode gre <ID>
(scalance)(config-tunnel)# tunnel source <controller-IP>
(scalance)(config-tunnel)# tunnel destination <AP-IP> (scalance)(config-tunnel)#
trusted
(scalance)(config-tunnel)# tunnel vlan <allowed-VLAN>