We are developing a network where the APs will be connected to DSL connections(publics). Now we are seeing the subject of security in the WLC, and my question is if the amount of tunnels can be limited that can receive the WLC in simultaneous form. I was seeing that the possibility exists of forming CPP but this limits the traffic that goes to the CPU, but not them tunnels. My question is referred in case a possible attack exists generating many simultaneous tunnels.
Please, let me know your opinion about this issue.