w.ullah@bmc.com.sa wrote:
Thanks a lot for your help brother.
So let me summarize this..
Case-1: If my CAPs are inside my LAN or my LAN is extended through VPN to my branch offices then i can Provision CAP as a RAP.
Case-2: if my CAP is behind the NAT then in that case i will go for Remote AP.
To be clear Case #1, you just use access points configured as campus APs. EDIT: You need to make sure that control plane security is on (by default it is).
Case#2, you use access points configured as remote APs only if there is NAT between your controller and access points.
Why does your job want you to build ipsec tunnels?