Correct me if i am wrong
As I can understand you are trying to have two controllers one with APs connected and the other without APs located in the DMZ. You want to define a WLAN on both controllers and have the traffic of clients connected to that certain WLAN to be tunneled back to the DMZ controller for further filteration .
Correct
You are talking about WPA with RADIUS , so you mean WPA Enterprise?
Correct
Which means you are talking about L2 security measures.
If you are thinking of having the DMZ controller responsible for L2 authentication described above that is not going to happen cause everything on L2 is handled on the internal Foriegn not the DMZ. Thats what i'm getting :<
IF you mean that you want to have WPA PSK with Web auth , in that case it will work and the web authentication will be handled on the DMZ as the web auth is L3 security measure. No it's L2 We are trying to achive
Regards
Many thanks for taking the time to reply. I think the solution might have to be somehow get our internal ACS radius server to proxy requests to the remote radius server, and do it that way.
.jpg "Cisco Employee"){kind=icon}
