Ace the 2026 HPE Aruba Networking Certified Pro Test – Conquer Campus Access and Network Like a Pro!

In tunnel mode, the AP forwards authentication results and user traffic to the central enforcement point through a dedicated tunnel rather than handling everything locally. When the RADIUS server responds with Access-Accept, that response is carried back to the AP over a GRE tunnel. GRE provides lightweight encapsulation to transport the control-plane messages between the AP and the central device, enabling the AP to establish the authenticated session and start tunneling the user’s traffic through the network. Other tunnel types are used for different purposes or security contexts, but for this path in tunnel mode with default AP-group settings, GRE is the mechanism used.