WLC Mobility Tunnel

[benolyndav]

Hi

If I configure a site to site VPN between two Firewalls  is it possible to route WLC to WLC mobility tunnel traffic through the VPN? or does the site to site negate the need for the secure mobility tunnel.??

also whats th cisco recomended set up is it secure mobility tunnel between our WLC and 3rd party WLC using NAT etc on the Firewall or would it be best to utilize a site to site VPN ??

Thanks

[jonathga94]

The mobility tunnel is used to share client information between WLCs. This is necessary when APs are on the same site but connected to different WLCs. Another scenario where you need to build the mobility tunnel is a foreign anchor setup. This is when you tunnel all the traffic of a network to a WLC that is usually on a DMZ. If you are planning to use any of those options, you should build the mobility tunnel. If not, then it wouldn't be necessary to create it.