ZyXEL Communications ZyWALL 310 - 6.4.1 Remote AP Notes; 6.4.2 Remote AP Commands

Chapter 6 AP Management
ZyWALL Series CLI Reference Guide
68
6.4.1 Remote AP Notes
• When you enable Remote AP, the Zyxel Device automatically creates a secure Network Virtualization
Using Generic Routing Encapsulation (NVGRE) over IPSec tunnel between itself and the AP using the
default VPN profile _remote_ap_vpn_profile. This profile cannot be edited.
• The first time Remote AP is enabled on an AP, the Zyxel Device adds the CAPWAP-CONTROL service
to the service group Default_Allow_WAN_To_ZyWALL. If Remote AP is disabled on all APs, this rule is
removed.
• Enabling Remote AP automatically enables Ethernet and wireless storm control on the AP.
• Remote AP is only supported on certain AP models. To check whether an AP supports Remote AP, run
the command show capwap ap ap_mac, and then ensure that “Remote AP Capability” equals “Yes”.
• Remote AP only supports IP version 4 (IPv4).
6.4.2 Remote AP Commands
The following table describes the commands available for managing Remote AP (RAP). You must use
the
configure terminal command to enter the configuration mode before you can use these
commands.
Table 15 Command Summary: Remote AP Management
COMMAND DESCRIPTION
capwap ap ap_mac
Enters the sub-command mode for the specified AP.
role remote
Enables the Remote AP feature on the AP.
no role
Disables the Remote AP feature on the AP.
rap slot_name ap-profile
profile_name
Sets the radio (slot_name) to AP mode and assigns a created
profile to the radio.
no rap slot_name ap-profile
Removes the AP mode profile assignment for the specified
radio (slot_name).
rap slot_name output-power
wlan_power
Sets the output power (between 0 to 30 dBm) for the AP radio.
rap slot_name ssid-profile
<1..6> ssid_profile_name [tunlif
interface] vid vlan_id
Sets an SSID profile and VLAN ID that is associated with this AP.
You can associate up to six SSID profiles with a Remote AP
radio.
• SSID profiles 1 to 4 are Secure Tunnel SSIDs. Network traffic
from clients connected to these SSIDs is sent through the
RAP tunnel to the ZyXEL device. The ZyXEL device then
sends the traffic out through the interface defined in the
SSID profile. This outgoing interface can be overridden by
specifiying an interface with the command tunlif.
• SSID profiles 5 and 6 are Local Bridge SSIDs. Network traffic
from clients connected to these SSIDs is sent directly to the
network through the AP’s local gateway.
• Traffic is tagged with the VLAN ID defined by
vlan_id.
no rap slot_name ssid-profile
<1..6>
Removes the SSID profile from the AP.
show sa monitor [ap-description
desc] rap
Displays the current IPSec SA for each Remote AP.