Firewall policy with Local Bridging Mode & Tunnel Mode

[Bot5]

Hi 
I have Extreme Wing version 5.9 on VX9000
Need to configure IP firewall rule in the SSID to block the user from going to some VLAN's

Which would be the suggested mode..?( Local/Tunnel ).

As i read from the documentation, Local mode has no dependency on Controller.

So how will the firewall policy work in this case.?

[Christoph_S]

Hello Bot5,

Here's some info on the difference between local and tunnelled bridging modes: https://extremeportal.force.com/ExtrArticleDetail?an=000093067

We would recommend local bridging, whereas the AP handles traffic redirection. Once you create the firewall policy and map it to the WLAN, all APs using said WLAN will adhere to the rules within the policy and redirect traffic accordingly. 

BR,

[Bot5]

Hi Christoph S,

Thanks for the feedback.

We need to have captive portal as well on the SSID.

Will the Local bridging impact anything on the captive portal.

I mean, can we have the firewall policy, Data limiting and Captive portal together on one SSID..?

Thanks in advance..

[Christoph_S · Accepted solution]

Hello Bot5,

The difference between local and tunneled bridging is that with Local bridging, the AP handles traffic redirection and with Tunneling, the controller handles traffic redirection. SSID settings work in both modes. Yes you can have CP, filtering and data limiting on the SSID irrespective or what bridging mode you are using. If you want the AP to host the captive portal please make sure you enable it on the APs: https://extremeportal.force.com/ExtrArticleDetail?an=000093079

BR,