Performance issue in guest access anchored in DMZ

[qlgendrano]

Hello,

I've been having performance issue in our wifi guest network anchored in the DMZ.

I have 3-5508 anchor controllers behind the Checkpoint gaia firewall and have 24 guest SSIDs in here.

Right now, only 14 guest SSIDs are enabled and tunnelled out in this anchor DMZ setup, whenever I try to add few more SSIDs I run into performance issue.

It seems to me that the problem is not about these additional SSIDs that I add because the performance issue starts to appear only when the traffic peaks or associated clients reached to certain number which is in my case 4000 users.

The firewall serves as the NAT device and gateway for all these guest SSIDs. The cpu, memory, number of connections have been checked and verified low.

Has anyone seen a problem like this? or has a setup like mine?

thanks!

[David Watkins]

Presuming you're not exceeding client count maximums on the individual WLCs I can't say I've seen anything in line with this "specific problem", but anything is possible.

What are the specific "performance issues" the clients are experiencing?  Is it just general poor performance (slow web browsing/etc) or do you see other issues like no internet connectivity at all or something else?

May I ask, what is the use-case behind having 24 SSIDs on your anchors?