OEAP using WLC deployed in DMZ

[steve.blunt]

I have a customer who wishes to leverage OEAPs to extend their corporate network and terminate the DTLS tunnels on a pair of anchor Catalyst 9800 WLC's located in a firewall DMZ. I think there is a need to replicate the required SSID on anchor controllers to mirror the main "internal" corporate WLCs. Can any one see any issues, the anchor controllers may also terminate "guest" SSID traffic from APs deployed across the campus on the corporate network.

Thanks

[Haydn Andrews]

See no issue doing it.

I would restrict the OEAP to only broadcast the corporate SSIDs not guest though

[steve.blunt]

Many thanks