Management Options for Provisioning

You must choose from one of the following two applications for configuring GRE tunneling and mapping those settings to given VLANs across the WLAN network. All tunnel provisioning and configuration must be handled using one of these two applications.

Managed by ExtremeCloud IQ Controller

Tunnels are configured and managed using the ExtremeCloud IQ Controller user interface. Tunnel Concentrator establishes an HTTPS connection to the controller on port 5825. The Concentrator uses stored read-only credentials to retrieve the configuration and to configure GRE/IPSec tunnels.

Managed by ExtremeCloud‌ IQ

Tunnels are configured and managed using the ExtremeCloud‌ IQ user interface. For management, Tunnel Concentrator uses the inlets tunnel, which is maintained by the Universal Compute Platform, with access through port 8090.

Note

Note

To generate encryption and decryption keys when IPSec is deployed, the management entity generates a private, pre-shared key using the IKEv2 protocol and uses a secure connection to provision the key on Tunnel Concentrator and on the access points.