Cisco Catalyst IW9165E Rugged Access Point and Wireless Client Configuration Guide, Cisco IOS XE 26.2.x

PDF

Cisco Catalyst IW9165E Rugged Access Point and Wireless Client Configuration Guide, Cisco IOS XE 26.2.x

CAPWAP modes

Updated: September 28, 2026

Want to summarize with AI?

Log in

Learn how the different CAPWAP modes available for access points determine AP behavior, client traffic processing, and network interaction within a wireless infrastructure.

CAPWAP modes are operational configurations that define how access points (APs) interact with wireless controllers and the network infrastructure.

  • Each mode determines how the AP processes client traffic and performs network functions.

  • Modes include Local, FlexConnect, Fabric, Sniffer, Monitor, and Site Survey.

  • Modes are selected based on network requirements such as centralized management, resiliency, segmentation, monitoring, or RF analysis.

Modes of operation and their characteristics

CAPWAP modes categorize the operational behavior of APs in a network, affecting traffic handling, management, and additional wireless functions.

Table 1. CAPWAP Modes Comparison Table

Mode

Description

Key Features

Use Case

Local Mode

Default mode where AP serves clients and centralizes traffic through CAPWAP tunnels.

  • Creates two CAPWAP tunnels.

  • Central switching (data bridges to controller).

Centralized traffic management.

FlexConnect

AP switches traffic locally while Controller manages it, ensuring operation even if Controller connection is lost.

  • Local traffic switching.

  • Operates like an autonomous AP.

  • Resilient to Controller disconnection.

Resiliency and local traffic handling in branch offices or remote sites.

Fabric

AP establishes a VxLAN tunnel to the fabric edge, ensuring network segmentation.

  • Maintains segmentation to AP.

  • Inserts SGT into VxLAN traffic.

  • Supports EN and PEN nodes.

Segmentation and secure communication in fabric-based networks.

Sniffer

AP captures air traffic on a specific channel for analysis using tools like Wireshark.

  • Forwards packets to remote analysis tools.

  • Tags traffic with SGT during transit.

Network troubleshooting and packet analysis.

Monitor

AP acts as a sensor for LBS, rogue AP detection, and IDS without handling client traffic.

  • Dedicated airwave monitoring.

  • Does not serve clients.

Security monitoring and intrusion detection.

Site survey

AP used to configure RF parameters for site surveys. For information, see the AP Survey Mode section in the Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide .

Assists in RF analysis.

RF analysis for wireless planning.
Note

Sniffer mode: Ensure both server and Controller must be on the same VLAN to avoid errors.

Functionalities of each CAPWAP mode

  • Local mode: Default mode, two CAPWAP tunnels, central switching.

  • FlexConnect mode: Local switching, behaves like an autonomous AP, works even if the controller is unavailable.

  • Fabric mode: VxLAN tunnel to fabric edge, supports segmentation, SGT tagging.

  • Sniffer mode: Captures packets, sends to analysis tools, tags traffic with SGT.

  • Monitor mode: Acts as a sensor, no client traffic, supports LBS, IDS, rogue AP detection.

  • Site survey mode: Used for RF configuration during site surveys.