Direct Forwarding vs Tunnel Forwarding

user_4001805 · Created Oct 21, 2020 13:23:50

Comparison Between Tunnel Forwarding and Direct Forwarding

In direct and tunnel forwarding modes, service packet are processed in different ways. The two forwarding modes have their advantages and disadvantages. In tunnel forwarding mode, all service data needs to be forwarded by an AC, facilitating service packet management and control on the AC. Service packets are encapsulated in the CAPWAP tunnel, improving service packet security. However, the AC must endure a heavy load because all service packets are forwarded to the AC. The direct forwarding mode has opposite advantages and disadvantages compared with the tunnel forwarding mode. The following table outlines the differences between the tunnel and direct forwarding mode:

Data Forwarding Mode	Advantage	Disadvantage
Tunnel forwarding	An AC centrally forwards data packets, ensuring security and facilitating centralized management and control. New devices are easy to deploy and configure, with small changes to the existing network.	Service data must be encapsulated and forwarded by an AC, reducing packet forwarding efficiency and burdening the AC.
Direct forwarding	Service data does not need to be forwarded by an AC, improving packet forwarding efficiency and reducing the burden on the AC.	Service data cannot be centrally managed or controlled. New device deployment causes large changes to the existing network.

Follow this link for further information: https://forum.huawei.com/enterprise/en/direct-forwarding-and-tunnel-forwarding-from-beginner-to-expert-wlan-fundamentals-section-9/thread/346359-869#:~:text=In tunnel forwarding mode, service,direct and tunnel forwarding modes.

Zebra · Created Oct 20, 2020 14:58:06

Hi @Vien

Direct forwarding: Packets do not need to be encapsulated and decapsulated. Therefore, the forwarding efficiency is high, and it is easy for network administrators to locate faults. However, user packets may be intercepted during transmission, threatening information security. In addition, packets of service VLANs need to be transparently transmitted, which increases maintenance workload on the Layer 2 network between ACs and APs.
Tunnel forwarding: Packets are encrypted using the Datagram Transport Layer Security protocol, which prevents attackers from intercepting packets transmitted on the network. Therefore, tunnel forwarding has high security. The configuration is also simple because only packets of the management VLAN need to be transparently transmitted between APs and ACs. However, encrypted packets make fault location difficult. Moreover, the forwarding efficiency is lower than that in direct forwarding because data packets must be encapsulated with a CAPWAP header.
Hope this help

stephen.xu · Created Oct 20, 2020 14:53:33

Hello, Vien.
Please kindly wait for a minute.
We are working on the question.

Zebra · Created Oct 20, 2020 14:58:06

Hi @Vien

Direct forwarding: Packets do not need to be encapsulated and decapsulated. Therefore, the forwarding efficiency is high, and it is easy for network administrators to locate faults. However, user packets may be intercepted during transmission, threatening information security. In addition, packets of service VLANs need to be transparently transmitted, which increases maintenance workload on the Layer 2 network between ACs and APs.
Tunnel forwarding: Packets are encrypted using the Datagram Transport Layer Security protocol, which prevents attackers from intercepting packets transmitted on the network. Therefore, tunnel forwarding has high security. The configuration is also simple because only packets of the management VLAN need to be transparently transmitted between APs and ACs. However, encrypted packets make fault location difficult. Moreover, the forwarding efficiency is lower than that in direct forwarding because data packets must be encapsulated with a CAPWAP header.
Hope this help

sohaib.ansar · Created Oct 20, 2020 15:50:29

Hello Users,
Direct forwarding: Packets do not need to be encapsulated and decapsulated. Therefore, the forwarding efficiency is high, and it is easy for network administrators to locate faults. However, user packets may be intercepted during transmission, threatening information security. In addition, packets of service VLANs need to be transparently transmitted, which increases maintenance workload on the Layer 2 network between ACs and APs.

Tunnel forwarding: Packets are encrypted using the Datagram Transport Layer Security (DTLS) protocol, which prevents attackers from intercepting packets transmitted on the network. Therefore, tunnel forwarding has high security. The configuration is also simple because only packets of the management VLAN need to be transparently transmitted between APs and ACs. However, encrypted packets make fault location difficult. Moreover, the forwarding efficiency is lower than that in direct forwarding because data packets must be encapsulated with a CAPWAP header.

user_4001805 · Created Oct 21, 2020 13:23:50

Comparison Between Tunnel Forwarding and Direct Forwarding

In direct and tunnel forwarding modes, service packet are processed in different ways. The two forwarding modes have their advantages and disadvantages. In tunnel forwarding mode, all service data needs to be forwarded by an AC, facilitating service packet management and control on the AC. Service packets are encapsulated in the CAPWAP tunnel, improving service packet security. However, the AC must endure a heavy load because all service packets are forwarded to the AC. The direct forwarding mode has opposite advantages and disadvantages compared with the tunnel forwarding mode. The following table outlines the differences between the tunnel and direct forwarding mode:

Data Forwarding Mode	Advantage	Disadvantage
Tunnel forwarding	An AC centrally forwards data packets, ensuring security and facilitating centralized management and control. New devices are easy to deploy and configure, with small changes to the existing network.	Service data must be encapsulated and forwarded by an AC, reducing packet forwarding efficiency and burdening the AC.
Direct forwarding	Service data does not need to be forwarded by an AC, improving packet forwarding efficiency and reducing the burden on the AC.	Service data cannot be centrally managed or controlled. New device deployment causes large changes to the existing network.

Follow this link for further information: https://forum.huawei.com/enterprise/en/direct-forwarding-and-tunnel-forwarding-from-beginner-to-expert-wlan-fundamentals-section-9/thread/346359-869#:~:text=In tunnel forwarding mode, service,direct and tunnel forwarding modes.

Direct Forwarding vs Tunnel Forwarding

Best answer

Recommended answer

Third Party’s Trade Secret

`@trans`bright_future`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

Direct Forwarding vs Tunnel Forwarding

Best answer

Recommended answer

Third Party’s Trade Secret

`@trans`bright_future`~trans`

My Followers