Controllerless Networks

Does anyone know if it's possible to have Layer 3 mobility between an IAP-based domain and an 3200-controller domain? If this is possible, are there any limitations in terms of how many GRE tunnels any one AP or IAP can support when clients are Layer 3 roaming?

As far as i aware,You may try,IAP VPN Controller

http://community.arubanetworks.com/t5/Controller-less-WLANs/How-to-configure-basic-IAP-VPN-Controller-Configuration/ta-p/175014

http://community.arubanetworks.com/t5/Aruba-Solution-Exchange/Create-VPN-Tunnel-from-IAP-to-Mobility-Controller/ta-p/202669

Summary

Aruba Instant support building secure VPN connections to the head end Mobility Controller (MC). This allows wireless and wired users to access the corporate network's resources seamlessly. The traffic forwarding mode is determined by the selection of the station IP address assignment (VPN Mode).

IP allocation by the DHCP daemon in IAP is unique. User specified, the start and end IP address which could be a relatively large subnet, example 172.16.0.0/16. This large subnet will be further subnet by the controller based on the client count specified by users in the IAP. This process is automatic and no configuration is required. The calculated networks range will then be sent back to the IAP once the VPN is established. The following VPN modes are supported:

• Distributed L3
• Distributed L2
• Local *
• Centralized L2 *

So Tim, L3 mobility between a IAP cluster and a 3200-based domain won't work?

That's a shame! You would think this should be fairly easy to do across the two platforms! Thanks for the clarification.

RP2013,

You typically do not have a controller-based and instant-based deployment within airshot and that is probably why L3 Mobility does not exist.

You can request this is an enhancement, through your local Aruba Sales Team.

Thank you Colin! This is only a stop-gap solution until the customer gets a more powerful controller which can support the full complement of current campus AP's+ new IAP's (converted to campus AP's). I guess they'll have to use Layer 2 roaming instead.