Wireless Access

Hi all, 

Can someone explain the reason why split-tunnel mode is not supported while using wpa3-ccm-128-aes encryption? I tried digging through the Wi-Fi Alliance papers on WPA3 and I didn't see anywhere that it was a requirement for all traffic to be tunneled back to a controller. It also seems other vendors support a flavor of split-tunnel operation with WPA3 encryption. Is this an Aruba practice or is there a fundamental requirement by WPA3 to only tunnel traffic? 

Thanks for the help!

Hi Michael,

Sorry I don't have an answer for you but I am curious what you observed, is this for an AOS 8 RAP deployment or an AOS microbranch? There is no mention in the guide below about this? 

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-110-cl2/#split-tunnel-in-cl2

As far as I can recall, you just follow the steps below.

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-130-configuring-cl2-ap/#configure-split-tunnel-in-cl2

Hi all, 

Can someone explain the reason why split-tunnel mode is not supported while using wpa3-ccm-128-aes encryption? I tried digging through the Wi-Fi Alliance papers on WPA3 and I didn't see anywhere that it was a requirement for all traffic to be tunneled back to a controller. It also seems other vendors support a flavor of split-tunnel operation with WPA3 encryption. Is this an Aruba practice or is there a fundamental requirement by WPA3 to only tunnel traffic? 

Thanks for the help!

Hi Michael,

Sorry I don't have an answer for you but I am curious what you observed, is this for an AOS 8 RAP deployment or an AOS microbranch? There is no mention in the guide below about this? 

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-110-cl2/#split-tunnel-in-cl2

As far as I can recall, you just follow the steps below.

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-130-configuring-cl2-ap/#configure-split-tunnel-in-cl2

Hi all, 

Can someone explain the reason why split-tunnel mode is not supported while using wpa3-ccm-128-aes encryption? I tried digging through the Wi-Fi Alliance papers on WPA3 and I didn't see anywhere that it was a requirement for all traffic to be tunneled back to a controller. It also seems other vendors support a flavor of split-tunnel operation with WPA3 encryption. Is this an Aruba practice or is there a fundamental requirement by WPA3 to only tunnel traffic? 

Thanks for the help!

Hi Michael,

Sorry I don't have an answer for you but I am curious what you observed, is this for an AOS 8 RAP deployment or an AOS microbranch? There is no mention in the guide below about this? 

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-110-cl2/#split-tunnel-in-cl2

As far as I can recall, you just follow the steps below.

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-130-configuring-cl2-ap/#configure-split-tunnel-in-cl2

Hi all, 

Can someone explain the reason why split-tunnel mode is not supported while using wpa3-ccm-128-aes encryption? I tried digging through the Wi-Fi Alliance papers on WPA3 and I didn't see anywhere that it was a requirement for all traffic to be tunneled back to a controller. It also seems other vendors support a flavor of split-tunnel operation with WPA3 encryption. Is this an Aruba practice or is there a fundamental requirement by WPA3 to only tunnel traffic? 

Thanks for the help!

When running AOS 8, WPA3 is only supported in tunnel and decrypt-tunnel modes, not bridge or split-tunnel mode.

Hi Michael,

Sorry I don't have an answer for you but I am curious what you observed, is this for an AOS 8 RAP deployment or an AOS microbranch? There is no mention in the guide below about this? 

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-110-cl2/#split-tunnel-in-cl2

As far as I can recall, you just follow the steps below.

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-130-configuring-cl2-ap/#configure-split-tunnel-in-cl2

Hi all, 

Can someone explain the reason why split-tunnel mode is not supported while using wpa3-ccm-128-aes encryption? I tried digging through the Wi-Fi Alliance papers on WPA3 and I didn't see anywhere that it was a requirement for all traffic to be tunneled back to a controller. It also seems other vendors support a flavor of split-tunnel operation with WPA3 encryption. Is this an Aruba practice or is there a fundamental requirement by WPA3 to only tunnel traffic? 

Thanks for the help!

When running AOS 8, WPA3 is only supported in tunnel and decrypt-tunnel modes, not bridge or split-tunnel mode.

Hi Michael,

Sorry I don't have an answer for you but I am curious what you observed, is this for an AOS 8 RAP deployment or an AOS microbranch? There is no mention in the guide below about this? 

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-110-cl2/#split-tunnel-in-cl2

As far as I can recall, you just follow the steps below.

https://arubanetworking.hpe.com/techdocs/VSG/docs/080-sd-branch-deploy/esp-sd-branch-deploy-130-configuring-cl2-ap/#configure-split-tunnel-in-cl2

Hi all, 

Can someone explain the reason why split-tunnel mode is not supported while using wpa3-ccm-128-aes encryption? I tried digging through the Wi-Fi Alliance papers on WPA3 and I didn't see anywhere that it was a requirement for all traffic to be tunneled back to a controller. It also seems other vendors support a flavor of split-tunnel operation with WPA3 encryption. Is this an Aruba practice or is there a fundamental requirement by WPA3 to only tunnel traffic? 

Thanks for the help!