Can IAP coexist with CAP/RAP on the same L2

[Andrei]

hi guys,

just was wondering if I can inject some IAPs into the existent network, which already has an amc3200  and a bunch of AP-93s configured as RAPs. All that is supposed to be within the same vlan/broadcast domain.

what would be the consequences ? can these two technologies remain as two separate entities?

thanks.

[cjoseph · Accepted solution]

Yes.

[Andrei]

Much appreciated for the answer.

I was afraid that IAPs will discover the controller and will join it and eventually will get converted to RAPs.

[Michael_Clarke]

If they are broadcasting different ssids then that should be fine, though the controller will see them as rogues.

[Andrei]

what would be the issue with the same SSID, since I'm planning to have exactly that ?

[msabin]

No issue unless you're automatically attempting to prevent rogues.

The WIPS functions from either set of access points will try to block use of the other if you've got it turned on.

If not, you'll just get warnings from each that the other may be a rogue.

[Michael_Clarke]

Might be issues with clients roaming between the two systems.  Will be somewhat worse for dot1x or captive portal users.

At least make them use the same subnet and dhcp server so there's no chance of duplicate ips etc.

[Andrei]

no dot1x and the captive portal is going to be external, and on top of that the subnet for the users is going to be the same with the same DHCP, so I guess I should be fine. In regards of rogue APs detection, I guess I can define which APs are not rogue so I don't get the alarms.

thanks guys for good advise.

[Marcus]

You can change Rogue status on the Controller but you cannot on the IAP.