We take a more Zero Trust approach and don’t put APs on a separate Vlan.

The APs are on the same Vlan as other devices in the building..

No problems in more than 14 years.

We do give them private IPv4 numbers but they get public IPv6 numbers.

> On Jun 17, 2020, at 2:56 PM, Jesse Thomas <[email protected]> wrote:
> 
> Hi Everyone,
> 
> We are preparing to replace our existing Cisco WiSM2 controllers with 9800s. 
> Part of this upgrade will include redesigning our AP management 
> network(s)—currently, we have about 500 APs spread across 3 different /24's. 
> 
> As we move towards an in-room design in our residence halls and provide 
> denser 5GHz coverage throughout campus in the coming years, we expect the 
> number of APs to grow by quite a bit. 
> 
> I am interested in how others have sized your AP management networks? I have 
> not found any concrete guidance from Cisco and various recommendations 
> elsewhere range from /25 to /21. Larger ranges would of course be easier to 
> manage, but at the same time we don't want to introduce issues related to 
> broadcast traffic.
> 
> Thanks for any input that you can provide.
> 
> Regards,
> 
> 
> --
> Jesse Thomas
> Network & Systems Administrator
> Hamilton College
> 315-859-4211
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire community 
> list. If you want to reply only to the person who sent the message, copy and 
> paste their email address and forward the email reply. Additional 
> participation and subscription information can be found at 
> https://www.educause.edu/community
> 

Bruce Curtis
Network Engineer  /  Information Technology
NORTH DAKOTA STATE UNIVERSITY
phone: 701.231.8527
[email protected]


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Reply via email to