anchor controller in DMZ

[Rik19972000]

I wondering which vlans need to be allowed over the trunk.

Management vlan

Vlan towards internet

...

I'm wondering via which vlan the EoIP tunnel is setted up?

I also suppose for AP-manager, I can use a useless random IP?

[weterry]

Both mobility tunnels are done from management IP to management IP. You are correct about the AP-Manager, no APs should be connecting to the DMZ so any address should work.

Trunk should consist of whatever vlans you have defined on the controller.