Wireless Access

Hi Guys,

in a single controller deployment with 2 different ap-group and VLAN, is it possible to roam them? i'm thinking IP Mobility but not quite sure if it applicable in this scenario.

 the reason behind different VLAN is that the customer wants to route some APs to different ISP based on location.

Are you saying that in the same location there are two different ISPs?  What is the topology?  Why are they using two different ISPs?

Hi Collin,

it's a hotel deployment where they use a dedicated ISP for some high dense location like ballrooms.

they use separate VLAN for those rooms.

the issue is roaming for people coming in or getting out of the rooms and the cust dont want to use different SSID.

i was thinking to use IP Mobility but not sure if it would work (still planning, havent got the chance to try it) or i might try to use RAP and do dst-nat to route the traffic from one VLAN to the other. so the WLAN's VLAN stays the sames but i change it through split-tunnel dst-nat.

any suggestion for me?

Ip mobility is for when clients roam between controllers.

Frankly, having two ISPs for a single deployment is a poor design from a management, troubleshooting and performance perspective.  Clients that roam to the second ISP would have to reestablish all of their connections.  When users complain and have issues, you would have almost no way to determine if the problem is the client device, the wifi or the ISP, complicating your management of such a possible solution.

They should have all clients on the same  ISP. The ISP should be sized correctly and be done with it. - That is my advice.

Hi Collin,

yes that what i told the customer. but sometimes, they always have a weird idea to do things. i will keep advising them to do it the right way but i might try to do the RAP idea with split tunneling. thanks though.

RAP with split tunneling at a Campus Site?  You cannot roam from ap to AP with a split tunneled SSID.  What is the problem that needs to be solved?

basically we need roaming between VLAN without re-dhcp.

how about if i implement vlan pooling and user derivation rule.

vlan pooling consist 2 VLAN A and B but VLAN B only being used if users associates from certain AP (we can use User derivation to set VLAN based on AP location name). so even if user B roams, it still able to hold its old VLAN because of vlan pooling.

do you think this would work?

What is the purpose of users being on different VLANs?

they use different vlan tag as rule to route them to different ISP.

Why do users have to go to different ISPs?  Make all the wireless users go to the same ISP.

that's what i told them. but they want to route certain area with a dedicated ISP for better internet throughput, and they use different vlan to do this.

Then they should just have a different SSID, then.  Doing it any other way could be challenging.

suggested it and they rejected it.

my best idea to try now is to use User derivation based on AP name in that area but there is a risk if this user doesnt get disconencted any time after they leave the room, the vlan will stay.
 do you have any other idea to do this?

Are they already doing this with their existing network?

it's an old issue with non-aruba devices. now they are replacing all their AP and expecting the same topology but without the issues. i'm just trying my best to solve it for them by using some tricks here and there but in the other hand i also suggested them to fix the topology to be more reasonable.

Ding Ding Ding