wireless with anchor controller and multiple VLAN

[mia.dobbeni@simac.be]

Hello

We would like to use an anchor controller in order to setup a managed guest service. The guest service will be provided by an external partner, the APs with GUEST SSID are in the customers network in different remote locations. The idea is to have the guest users tunneled to the local controllers from where we go over a L3 network to the anchor controller located at the partner. The idea is to have a VLAN per remote location. Is this possible with one anchor tunnel or do we need to setup 1 tunnel per remote location/VLAN? 

[Scott Fella]

Sure. If the SSID is different in each location, then you have an SSID to interface/vlan mapping on the anchor side.

[mia.dobbeni@simac.be]

Well, the SSID is the same. The reason why we like to do this is:

1. The high number of clients

2. This way we know the physical location of the client

especially the second point is important

[Scott Fella]

Well since you have added that information, what you do is create an SSID profile with the same SSID.  The profile should identify the site:

SSID: GuestNet

SSID Profile: Guest_Site_A

SSID: GuestNet

SSID Profile: Guest_Site_B

SSID: GuestNet

SSID Profile: Guest_Site_C

On the foreign controller, you just define one SSID profile and on the anchor you define all SSID profiles.  You probably have to use wlan id's 17+ to allow for multiple identical SSID's.

[mia.dobbeni@simac.be]

Hi Scott,

Thanks for your reply. What is not clear to me at the moment is what I need to define on the foreign controller. Do I create 1 dyn interface per remote location? One tunnel to the anchor controller? 

Mia

[Scott Fella]

On the foreign, you don’t need any dynamic interface when anchoring. You just need the SSID which has a mobility anchor to the anchor controller. The anchor controller will have the dynamic interfaces for each vlan for each site.