In decrypt-tunneled forwarding mode, which of the following is true?
A.
Client sets up an IPSEC tunnel with the controller
B.
The AP decrypts and then the 802.11 frame is sent in a GRE tunnel to the controller
C.
The AP decrypts the 802.11 frame and bridges it on the wire
D.
The AP decrypts the 802.11 frame, encrypts it as an Ethernet frame and sends it to the controller
E.
Clients decrypted traffic is sent down the GRE tunnel