
11-23
Cisco Wireless LAN Controller Configuration Guide
OL-13826-01
Chapter 11 Configuring Mobility GroupsWireless Device Access
Configuring Symmetric Mobility Tunneling
Figure 11-15 Asymmetric Tunneling or Uni-Directional Tunneling
This mechanism breaks when an upstream router has reverse path filtering (RPF) enabled. In this case,
the client traffic is dropped at the router because the RPF check ensures that the path back to the source
address matches the path from which the packet is coming. This issue is addressed in controller software
release 4.1 or later, which supports symmetric mobility tunneling for mobile clients. When symmetric
mobility tunneling is enabled, all client traffic is sent to the anchor controller and can then successfully
pass the RPF check, as shown in Figure 11-16.
Figure 11-16 Symmetric Mobility Tunneling or Bi-Directional Tunneling
You should also enable symmetric mobility tunneling if a firewall installation in the client packet path
may drop the packets whose source IP address does not match the subnet on which the packets are
received. You can configure symmetric mobility tunneling through either the GUI or the CLI.
Router
Server
Anchor Foreign
Mobile
210899
Mobile
Router
with RPF
Server
Static Anchor Foreign
MobileMobile
210952
Comentarios a estos manuales