Scenario: Small office needs at least 2 RAPs to provide wi-fi to all colleagues. The RAPs must both be wired; no remote mesh.
I thought I'd setup the 2nd RAP on a trusted port of RAP 1 and bridge or split-tunnel the WLAN traffic. Seems kinda messy though and I'm not sure I want to burn a bunch of time testing the validity of it.
I could put both RAPs behind a firewall, but our RAPs occasionally failover between different data centers. It's possible that the RAPs could end up on different controllers which would create roaming issues and I'd prefer to avoid it.
The only other thing I can think of is to turn this into an IAP deployment. Any thoughts on making two RAPs work with relative ease?