I often set up Instant networks at several branch offices with Guest access via L2-centralised MC, and using Aruba GRE as the mechanism.
Usually I install 1 or 2 small controllers in the data centre just to be the VPN concentrator.
Since a switch is more useful (and often already exists in the central data centre) it would be useful if I can terminate the GRE directly on a switch and remove the small controller from the network completely.