@bjackson wrote:
I understand the load balancing with the Master/local and plan to take advantage of that. I've been reading the recommended VRD and it seems to indicate in an 802.1X authentication environment, which we are mostly, that having a single AP VLAN is recommended. Which would seem to answer my initial question. Does anyone have any other thoughts or input relative to configuring VRRP's on multiple segments with 802.1X authentication?
You do not need multiple VRRPs on multiple segments. No matter what subnet an AP is in, it still contact the controller or controllers on the same ip address. The controller does not need an ip address on every subnet where APs reside; the access points only need to be able to route to the management ip address of the controller. Sometimes it is not practical to have an instance of the same VLAN at every location where you need an AP, so being able to put an AP on ANY vlan, as long as it can route to the controller keeps you from having to redesign your network to accomodate access points.
I hope this makes sense.