Wireless Access

HI there,

We're running an AOS 6.5 Master/Local controller deployment and, for various annoying reasons, I'd like to move the routing function for the tunnelled user VLANs away from our core routers and onto the Controllers themselves. 

I don't intend to use dynamic routing, just default routes and statics.

I've tested setting up a VRID (VRRP) for a client gateway address with static routes from our network and it all seems to work as expected.

However I have read snippets of info which suggest it's not a good idea to configure the client gateways on the controllers.

Any idea why?  Is it still a recommended design? 

Many thanks,

Ste

It can be done, without issue, period.  In many networks it is not recommended because you want client traffic to be an overlay to your routed network, instead of your controller being part of that network.  If your network was ever redesigned, you will have to redesign the controller network, as well, instead of client traffic just following a redesigned network.

thanks for the reply.

appreciated.

Oh, one more thing if I may?

Are there any gotchas if I want to implement OSPF on the controllers?  Or is that not recommended?

Thanks.

Is this a large-scale distributed environment?

2000+ APs tunnelled back to 2 x 7240 Controllers in our Data Centres.

I'll implement OSPF on the controllers to our core routers.

That is a large-scale deployment.  I hope you have professional services or a reseller help you with that.

Thanks, yes we have had professional services input into the design and implementation thus far.

I just sense a reluctance to confirm if OSPF works properly on the controllers and, like I mentioned, I had seen comments suggesting that they shouldn't even be used for routing.  Although you've kindly cleared that aspect up for me.

Typically OPSF is run on controllers if you have controllers at those 2000 sites with a few subnets behind them.  With a single controller being the default gateway of 2000 sites, it would be easier to have a summary route pointing to the controller, instead of running OSPF.