Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
If a shared IP is used it would be expected to the use that IP, depending on which interfaces is active/primary for VPNs would determine which of the potentially 2 VIPs to use.
It will scan the channel its on when clients are connected, that is a limitation of no security radio it needs to serve clients. When no clients are connected it is free to scan, there are some additional thresholds for busy times and dfs that apply ...
The MR28 has most of the features but does not natively have a scanning radio so if you need that with other functions it may be a bit limited. You can swap modes but if the AP is scanning it won't serve clients so testing air marshal events may be p...
All 3 of the features mentioned work similarly. The MX is not altering the Source IP, it alters the destination IP. You just need to monitor the Source IP for the requests. The MX IP shouldn't be observed, and the only information to identify the MX ...
The routing for the ISP and handoff can play a role as well. There are some ISPs that will do a transit IP and a block of public IPs behind that require at a minimum a static route in front of a warm spare MX setup.