ExtremeIQ Cloud

Navigation

Navigate using the tab icons. Hover over an icon to see the name of the tab.

Configure > Network Policies > policy_name > Wireless Networks > SSID_name > Add Default User Profile > Traffic Tunneling

or

Configure > Common Objects > Policy > User Profiles > profile_name > Traffic Tunneling

About GRE Traffic Tunneling

You can enable three types of GRE (generic routing encapsulation) traffic tunneling for a user profile: Layer 3 roaming, identity-based, or standard GRE tunneling.

Tunneling for Layer 3 roaming allows you to adjust roaming thresholds so that a device will disassociate with a wireless client that has roamed to it from another subnet and has either been idle for a period of time, or whose traffic has dropped below a specified threshold.

Identity-based traffic tunneling tunnels guest traffic directly to the network.

Standard GRE tunneling tunnels traffic to non-Extreme Networks tunnel endpoints.

Configure GRE Traffic Tunneling

To configure traffic tunneling, perform the following steps:

Create or choose a user profile as described in User Profile Settings, or create or choose a Common Object User Profile as described in User Profiles.
Select the Traffic Tunneling tab.
Toggle Traffic Tunneling (GRE) ON to enable it. Select either Layer 3 Roaming, Identity-Based Traffic Tunneling, or Standard GRE Tunneling.

Continue with the following sections.

Configure Layer 3 Roaming

If you selected Layer 3 Roaming, complete the following fields:

Disassociate wireless clients if:

Client is idle for more than: Enter a time period between 10 and 600 seconds. The default is 60 seconds.

Average Network traffic is less than: Enter a threshold number between 0 and 2147483647 packets per minute. The default is 0.

Select Save User Profile.

Configure Identity-Based Traffic Tunneling

If you selected Identity-Based Traffic Tunneling, complete the following fields.

Tunnel Source: Tunnel all traffic originating from selected IP subnets: Select a subnet from the drop-down list, or add a new subnet for which you want traffic to be tunneled. You can also enter an IPv6 address for the subnet.

Tunnel Destination: Choose an IP address or host name from the drop-down list or add a new address. The new address can also be an IPv6 address.

Tunnel Authentication: Enter the password the AP uses to authenticate to the GRE termination point.

Select Save User Profile.

Configure Standard GRE Tunneling

Standard GRE tunneling is used to tunnel traffic to non-Extreme Networks tunnel endpoints. These endpoints must be configured separately.

If you selected Standard GRE Tunneling, complete the following fields.

Tunnel Destination: Choose an IP address or host name from the drop-down list or add a new address. The new address can also be an IPv6 address.

Tunnel Mode: Select one of the following:

dot1q: Enter, select, edit, or add the 802.1Q native VLAN ID.

Access Mode: Enter, select, edit, or add the VLAN ID.

Select Save User Profile.