I'm setting up several wireless controllers for several sites, all 3504s or 5520s running 8.5.161. The 5520s will be deployed in HA at the primary site and will provide wireless for the main site, and all the smaller remote sites (1-2 APs each). We want to use the same EAP-TLS enabled SSID at all sites supported by the 5520s. The main site uses IDFs which are routed, and cannot support a common Vlan, so we need to use Local mode. We don't want to back-haul all the traffic from the remotes however, so would prefer to use Flex for the remote sites. I've created two different WLans on another install where one used Flex and one used Local. Then I create an AP-group for the main site which included the Local WLAN, and a different AP-group for the remotes which used the Flex WLAN. In this config the WLANs were not automatically added to the default AP group. I'm trying to use the same config again on this install, but when I try to enable two WLANs with the same SSID and security settings, I get an error that says I cannot have two WLANs with the same SSID and security settings enabled at the same time. I noticed that all my WLANs, as soon I create them, get added to the default AP-Group with this config, which I think is my problem. Why are my WLANs automatically being assigned to the default AP group, and how can I removed them from that group? I believe if I have an AP group that only includes my Flex enabled WLANs, and a different AP group which only includes my Local mode WLANs, then I shouldn't have a problem, but can't remove any of my WLANs from the default group. Why? Is there some other way to have an SSID use local mode on some APs, and Flex on other APs?
