as the APs seem to connect to the ASG via the 1.2.3.4 pseudo IP address: is it possible to DNAT this IP to the v7 ASG from a different network, in order to use the ASG as e.g. a WiFi controller in a DMZ?
yaay. NAT deployment worked. I decided to go for Full NAT (just in case) and created a Source Any - Service Any - Destination 1.2.3.4 Destination NAT to - Source NAT to rule.
However I had to define 1.2.3.4 as additional IP on the internal AP facing interface.
Easier and also working: I've also created a static route for 1.2.3.4/32 pointing to the ASG v7.
A good reason for this would be if you already have a well-established non-ASG infrastructure, but want to use our Wireless product. Another good reason would be if you happen to have a 425 as your main ASG but only want to deploy a few (say 1-3) APs without wanting to pay $$$ for the 425 Wifi subscription. Then you could easily deploy a 120 as a standalone wireless controller.
Of course you can always deploy using VLANs and a dedicated ASG in the upstream, but it's good to know that redirecting the IP works as well.
yaay. NAT deployment worked. I decided to go for Full NAT (just in case) and created a Source Any - Service Any - Destination 1.2.3.4 Destination NAT to - Source NAT to rule.
However I had to define 1.2.3.4 as additional IP on the internal AP facing interface.
Easier and also working: I've also created a static route for 1.2.3.4/32 pointing to the ASG v7.
A good reason for this would be if you already have a well-established non-ASG infrastructure, but want to use our Wireless product. Another good reason would be if you happen to have a 425 as your main ASG but only want to deploy a few (say 1-3) APs without wanting to pay $$$ for the 425 Wifi subscription. Then you could easily deploy a 120 as a standalone wireless controller.
Of course you can always deploy using VLANs and a dedicated ASG in the upstream, but it's good to know that redirecting the IP works as well.