Aruba IAP-335 User Manual page 241

Figure 57 Tunneling— Routing
3. Update the following parameters:
Destination— Specify the destination network that is reachable through the VPN tunnel. This defines
l
the IP or subnet that must reach through the IPsec tunnel. Traffic to the IP or subnet defined here will be
forwarded through the IPsec tunnel.
Netmask—Specify the subnet mask to the destination.
l
Gateway—Specify the gateway to which the traffic must be routed. This IP address must be the
l
controller IP address on which the VPN connection is terminated. If you have a primary and backup host,
configure two routes with the same destination and netmask, but ensure that the gateway is the primary
controller IP for one route and the backup controller IP for the second route.
Metric—The default metric value is 15. Specify a metric value for the datapath route. When two routes
l
or more routes with the same network destination are available for data forwarding, the route with the
least metric value takes preference.
4. Repeat step 3 to create the required number of routing profiles.
5. Click OK.
6. Click Finish.
In the CLI
(Instant AP)(config)# routing-profile
(Instant AP)(Routing-profile)# route <destination> <mask> <gateway> {<metric>}
(Instant AP)(Routing-profile)# end
(Instant AP)# commit apply
Routing profile is primarily used for IAP-VPN scenarios, to control which traffic should flow between the
master IAP and the VPN tunnel, and which traffic should flow outside of the tunnel.
241 | VPN Configuration Aruba Instant 6.5.0.0-4.3.0.0 | User Guide