I've got an internal (foreign) controller configured with both our internal SSID, as well as with a guest SSID. The controller is anchored to a DMZ-based guest controller. mping and eping all work, and clients can associate to the guest controller....