Wireless Access

Reply
Occasional Contributor II

Controller placed in DMZ

Hi,

 

Is it feasible to put a wireless controller inside the DMZ? Any implications? Highlight any limitations?

In my case, the DMZ comprises of 2 firewalls and 1 cisco switch (in between)

 

Regards,

Guru Elite

Re: Controller placed in DMZ

Suggestforme,

 

Very few people deploy controllers in the DMZ, because of the complexity.  It is much simpler to deploy it internally.  We typically only DMZ deployments  in high-security environments like banks where it is their policy.  



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Re: Controller placed in DMZ

In a campus deployment the natural place of the controller is the inside zone especially because it have integrated statefull firewall (if you have the PEF-NG licences).

But if you are deploying the controller to work with remote AP outside of your network, the DMZ zone will be more suitable for the controller


Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACCP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]
Occasional Contributor II

Re: Controller placed in DMZ

Hi cjoseph,

 

Having solved the placement of the controller, now the customer want to establish a link (allow Aruba controller from Country A communicate with Country B),

 

Can Aruba controller supports IPsec tunnelling VPN?

 

How does controller in Country A and Country B communicates? What is involved in this case?

Please advice.

Re: Controller placed in DMZ


Suggestforme wrote:

Hi cjoseph,

 

Having solved the placement of the controller, now the customer want to establish a link (allow Aruba controller from Country A communicate with Country B),

 

Can Aruba controller supports IPsec tunnelling VPN?

 

How does controller in Country A and Country B communicates? What is involved in this case?

Please advice.


Aruba controllers , can act as a VPN routeur, for your case you need a public IP addres from each way.


Raouf CHAHBOUNE
ICT Network & Security Engineer
CCNP R/S | CCNA Security | ACMP|ACCP|ACDX



[If my post is helpful please give kudos, or mark as solved if it answers your post.]

Re: Controller placed in DMZ

you can find more specific info in here with respect to setting up a site-to-site VPN.

 


If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACCX #817, ACMP, ACMX #294
Guru Elite

Re: Controller placed in DMZ


Suggestforme wrote:

Hi cjoseph,

 

Having solved the placement of the controller, now the customer want to establish a link (allow Aruba controller from Country A communicate with Country B),

 

Can Aruba controller supports IPsec tunnelling VPN?

 

How does controller in Country A and Country B communicates? What is involved in this case?

Please advice.


Suggestforme,

 

What does the customer want to accomplish?  What is the main goal of the controllers communicating?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Controller placed in DMZ

Hi cjoseph,

 

The purpose of the two controllers communicating such that:

Users in Country A goes to Country B for conference or meeting etc. Users (in Country A) will access the Wi-Fi (authenticated to AP) in Country B and join the network of Country B.

 

Hope this clarifies.

Guru Elite

Re: Controller placed in DMZ

SuggestforMe,

 

Do you have any other wired traffic that functions like this?  For example, does the wired traffic have an ipsec tunnel from site a to site b?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Controller placed in DMZ

Hi cjoseph,

 

Yes, IPsec tunnel do exist from one site to another site.

 

Regards,

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: