In direct forwarding mode, user data packets are encapsulated in a CAPWAP tunnel and then forwarded by the AC to the upper-layer network.