Controllerless Networks

I'm a little new to Aruba products and WiFi configuration in general...so bare with me. We have an off-site showroom that needs VPN access several times a year. Last year we used a couple of RAP-5s to VPN back to the corporate network, which worked great, but the two devices weren't enough to handle all the users (100+ devices). So what I am wanting to do is have one RAP-5 at the location and have 6 IAP-105s to handle the devices. Can this be done? Can the IAPs broadcast the VPN SSIDs from the RAP5? If yes, how would you configure this?

Any feedback is appreciated!

Troy

You may consider just using the IAPs to handle your clients and do without the RAP-5s.   The virtual controller of the IAP can then VPN back to your office location; removing the need for the RAP-5 in your case.        Review the VPN Configuration chapter in the IAP User Guide to see if it will provide you with what you need.

High level summary from the guide:

The IAP supports termination of a VPN tunnel on the Aruba controller.  VPN features are ideal for:

• enterprises with many branches that do not have a dedicated VPN connection to the corporate office.
• branch offices that require multiple APs.
• individuals working from home, connecting to the VPN.

This new architecture and form factor seamlessly adds the survivability feature of Instant APs with the VPN
connectivity of RAPs — providing corporate connectivity to non-corporates

Thank you for the reply!

I will review the user guide and see if I can get this working.

Troy

Another question pertaining to this topic. After the VPN connection from the IAP to the Controller is established could I also broadcast another network for public access? In other words, have one wireless network with VPN access and have another wireless network with public internet access? Could both of these networks be broadcast from the same IAPs?

Troy

Yes, you can still have a second guest network that is not tunneled back through the VPN.     Despite teh VPN connectivity, you still need to add the specific network routes that need to go back throug the tunnel.    It is under the VPN link: