DTLS (Datagram Transport Layer Security) Encryption

• Encryption is disabled by default on the data channel and requires a DTLS license to be installed on the WLC before it can be enabled on the AP

DTLS provides security between the Access Point (AP) and the Wireless LAN Controller (WLC)

Encryption is enabled by default to secure the CAPWAP control channel and encrypt all management and control traffic between AP and WLC