Well that's what they want - now I have to make it happen.
So I see on the VLAN that I have enabled source nat for this VLAN. I"m guessing that I would need to change the ip address range for the vlan to be something that is routable on my network (which is currently a 10.0.x.x)
So (and I'm just trying to figure this out so forgive my ramblings) if I set up a vlan on my core switch that is the same as the vlan for the guest network on the aruba, then set up my dhcp scope for that address it *should* all work, and then all the traffic will be going over the network and then hitting the IDSd properly, at least in theory, right?
I would need to disable the DHCP pool on the aruba, but it should all work with the IDS since the natting won't take place at the router not before.
My apologies for all the questions - I just don't have anybody to bounce some of these off of.
Thank you in advance!
Gerri