Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
3.6.2. Lightweight AP Modes
In controller-based deployments, APs are "lightweight"—they can't function without a WLC. The WLC tells them which SSIDs to broadcast, what security settings to use, and where to send traffic. But the AP's specific role can vary:
| Mode | What It Does | When to Use |
|---|---|---|
| Local | Normal operation—serves clients, tunnels all traffic to WLC | Default for most APs |
| FlexConnect | Local switching for branch offices (traffic doesn't traverse WAN to WLC) | Remote sites with local resources |
| Monitor | Listens passively for rogue APs and interference | Dedicated security monitoring |
| Sniffer | Captures wireless packets for Wireshark analysis | Troubleshooting |
| Rogue Detector | Correlates wireless and wired to pinpoint rogue APs | Security |
| Bridge | Point-to-point wireless link between buildings | Outdoor deployments |
FlexConnect is critical for branches: Imagine a branch office with 50 users and a 10 Mbps WAN link to headquarters. In Local mode, when a user prints to the local printer, traffic goes: User → AP → WLC (at HQ) → back to branch → Printer. That's absurd. FlexConnect lets the AP switch locally—traffic never leaves the branch for local destinations.