Configure User Profile Traffic Tunneling

First create a new user profile, or select an existing user profile to edit. Go to:

Configure > Network Policies or to

Configure > Common Objects > Policy > User Profiles.

You can enable the following types of GRE traffic tunneling for new and existing user profiles:

Layer 3 Roaming
Adjusts roaming thresholds so that a device disassociates with a wireless client that has roamed to it from another subnet and has either been idle for a period of time, or for which traffic is below a specified threshold.
Identity-Based Traffic Tunneling
Tunnels guest traffic directly to the network.
Standard GRE Tunneling
Tunnels traffic to non-Extreme Networks tunnel endpoints.
Tunnel Concentrator
Tunnels traffic to Extreme Networks Tunnel Concentrator.

Configure the following options based on your tunnel policy requirements. These options are mutually exclusive.

  1. On the TRAFFIC TUNNELING tab, turn on Traffic Tunneling (GRE).
  2. Select an existing profile from the Re-use Tunnel Policy menu, and then select the type of tunneling.
  3. Layer 3 Roaming:
    1. Specify a time period between 10 and 600 seconds.
    2. Specify a threshold number between 0 and 2147483647 packets per minute.
  4. Identity-Based Traffic Tunneling:
    1. Tunnel Source: select a subnet from the drop-down list, or add a new subnet.
      To add a new IP address or host name, see Configure IP Objects and Host Names.
    2. Tunnel Destination: choose an IP address or host name from the drop-down list or add a new address or host name.
      To add a new IP Address or Host Name, see Configure IP Objects and Host Names.
    3. Tunnel Authentication: type the password the AP uses to authenticate to the GRE termination point.
  5. Standard GRE Tunneling:
    1. Tunnel Destination: choose an IP address or host name from the drop-down list or add a new address or host name.
      To add a new IP address or host name, see Configure IP Objects and Host Names.
    2. Tunnel Mode dot1q: type, select, edit, or add the 802.1Q native VLAN ID.
      To add a VLAN ID, see Configure VLAN Settings.
    3. Tunnel Mode Access Mode: type, select, edit, or add the VLAN ID.
      To add a VLAN ID, see Configure VLAN Settings.
    4. Tunnel Failover: type, select, edit, or add the IP address or host name of the secondary GRE tunnel endpoint. The secondary tunnel is used automatically if the primary tunnel goes down and traffic fails back to the primary tunnel when it its available.
    5. Keep Alive Interval: Enter the interval (in seconds) used to monitor the failover tunnel.
    6. Keep Alive Retries: Enter the number of retry attempts before the failover tunnel is considered down.
  6. Tunnel Concentrator: select up to three tunnel concentrator services to act as the Primary (required) Secondary (optional) and Tertiary (optional) tunnel destinations.
    You can add a new Tunnel Concentrator service by selecting Add, or select Edit to modify an existing instance. For more information, see Configure Tunnel Concentrator Services.
  7. Continue configuring the user profile, or select SAVE USER PROFILE.