Deployment Considerations

Refer to the following table for information on supported Tunnel Concentrator capacities for each Universal Compute Platform hardware option.

Table 1. Supported Capacities per Universal Compute Platform Host
Hardware appliance	Supported Capacities
1130C	Single Tunnel Concentrator instance per appliance. Maximum of 1,000 tunnels per Tunnel Concentrator instance (without HA) or per HA redundancy configuration (for example, up to 1,000 tunnels per HA pair).
4120C	Up to three Tunnel Concentrator instances per applicance. Maximum of 5,000 tunnels per Tunnel Concentrator instance (without HA) or per HA redundancy configuration (for example, up to 5,000 tunnels per HA pair). Maximum of 15,000 tunnels per appliance.

Note

With ExtremeCloud‌ IQ as the management application, redundancy is configured using HA pairs. With ExtremeCloud IQ Controller as the management application, you can add up to three Tunnel Concentrator instances to the redundancy configuration. For more information, see Redundancy Configuration.

In addition, consider the following:

Tunnel Concentrator supports GRE tunneling (with IPSec encryption) only between wireless access points and Tunnel Concentrator. Note that IPSec is supported only if you deploy ExtremeCloud IQ Controller as the management application.
Tunnel Concentrator does not support the use of a NAT router between the access point and Tunnel Concentrator.
Tunnel Concentrator preserves DSCP markings for both upstream and downstream direction.
Tunnel Concentrator blocks all broadcasts (except DHCP and ARP).
Tunnel Concentrator does not support the use of LAG interfaces on the Universal Compute Platform.
IPSec is supported only with APs that are managed by ExtremeCloud IQ Controller.