We are implementing a WLAN as in the attached figure. Planning to create 2 VLANS on AP, 1 for Employee's and other for Guest users. Employees should be able to access corporate network and we plan to create a GRE Tunnel so that guest users cannot access corporate network pass through the switches to use the DSL line attached to the core's. Where do I configure the tunnel at?. at the APs or at the distibution switch (1814FL) ?.. Any configuration guidance/ suggestions welcome.