Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
3.6.2. Lightweight AP Modes
In controller-based deployments, APs are "lightweight": they depend on a WLC for configuration and, in Local mode, for forwarding as well. The WLC tells them which SSIDs to broadcast, what security settings to use, and where to send traffic. But the AP's specific role can vary:
| Mode | What It Does | When to Use |
|---|---|---|
| Local | Normal operation—serves clients, tunnels all traffic to WLC | Default for most APs |
| FlexConnect | Local switching for branch offices (traffic doesn't traverse WAN to WLC) | Remote sites with local resources |
| Monitor | Listens passively for rogue APs and interference | Dedicated security monitoring |
| Sniffer | Captures wireless packets for Wireshark analysis | Troubleshooting |
| Rogue Detector | Correlates wireless and wired to pinpoint rogue APs | Security |
| Bridge | Point-to-point wireless link between buildings | Outdoor deployments |
FlexConnect is critical for branches: Imagine a branch office with 50 users and a 10 Mbps WAN link to headquarters. In Local mode, when a user prints to the local printer, traffic goes: User → AP → WLC (at HQ) → back to branch → Printer. That's absurd. FlexConnect lets the AP switch locally—traffic never leaves the branch for local destinations.
Enroll to unlock the 3 practice questions written for this section, so you can test what you just read while it is fresh.
Enroll to unlock the 1 flashcard for this section and review them on a spaced-repetition schedule.
Written byAlvin Varughese
Founder•20 professional certifications