I´m testing right now following solution :
We have a Flexconnect & OEAP WLC5508 installed in our DMZ ( LAG configured together with a DMZ switch ) . Our Firewall is a PaloAlo device.
Now I get following problems:
All working without problems . I get a connection over the internet with my OEAP600 AP and get an IP and can also use my Cisco Phone
which is connected to the RemoteLAN on the OEAP. Strange thing is now If I do for testing a reconnect on my Laptop
( disconnect OEAP SSID and reconnect ) the Tunnel interrups and rebuild. In the most cases then the tunnel come back and everything works ( Phone & WLAN ) again and sometimes only a reboot from the OEAP will fix the problem.
I checked if I see any blocking on the PaloAlto but I don´t see anything what is blocked.