Controller Based WLANs

Q:

Why is it recommended to have a dedicated AP VLAN for its communication?

It is always recommended to have a separate AP VLAN which is different from wireless user VLAN for security purpose. Because if an AP VLAN and wireless user VLAN are same, a flood in user VLAN can affect AP's functioning or a rogue user can get to know the MAC address of APs from open SSIDs and can potentially attack them.

So it is always recommended to have a dedicated VLAN for APs to overcome the security vulnerabilities.