Security

Hi guys,

Comparing IAP with A Mobility Controller are these needs cover on both ?

 

 

 

1. roaming between different ssid's - iamgine that we have two  floors , 2 ssid and the same  user.  Can he jump from one to another without re authenticate?

 

2. Is it possible to limit the power of certain AP's ( to for ex 50mw)? In IAP or only with Mobility Controller

 

3 . IAP permits to have captive portal configuration? Or only with a controller

 

4. APP RF is available in both IAP and controller 700 series ( OS rls 6.4.0.2-4.1) correct?

 

Thanks for the help

 

Regards

Yes to all of those questions. 

However a side note. For IAPs the newer IAP-11x, 20x, 21x, 22x, RAP-10x, and RAP-155 support the DPI piece for full control of AppRF.

And the 103.

Hi ,

 

Thanks for the help.

 

is there any document that stats the differences between IAP´s and Mobility Controllers?

 

Is it possible to IAP to have a DNS server internal?

 

All data between AP´s and mobility controllers is encrypted (GRE) . In IAP is the same? Is there any data passed in clear mode?

 

 

The GRE tunnel is NOT encrypted although the traffic that passes over the
GRE MAY be encrypted based on the wireless encryption.



In Instant, most traffic is bridged out the local AP. Things like
authentications, guest traffic, and traffic destined for a VPN tunnel are
sent through the virtual controller.

Hi.

I am asking because we need to certify that no data passes in clear?
Assuming your words, i get a little confused.
Since encription is related to wireless encription, is ok to tought that data passes clear between iap and ap or controller and ap's ?

Regards

If your requirement is that no data passes in the clear, I would most certainly use a mobility controller as the encryption happens between the wlan client and the controller...vs the IAP where the encryption happens at the IAPs

of your original questions then certainly IAP does all four things. but the buildin captive portal is very limited in configuration options and the accounts don't have an expire function. doesn't have to be an issue, but might be.