IPsec Tunnel Establishment

IPsec tunnel for AirWave is auto-configured. The switch decides to create IPsec tunnel only when an Aruba controller IP is present in the device before establishing the connection to AirWave.

If the controller IP is not provided, the switch will try to establish a direct connection to AirWave.

If the controller IP is present, the switch auto configures and initiates an IPsec tunnel interface. Once the tunnel is established, the Aruba controller provides an inner IP which the switch will then use as source IP to send any AirWave bound traffic. The switch then creates a static route to AirWave with the IPsec tunnel interface as the gateway.