Recommended Deployment Guidelines

The Sites feature introduces new and complex interactions between hardware and software components. Sites are recommended for customers who have an AP-to-controller link (in a normal deployment) which they expect will be disconnected for long periods of time, but still expect to give service to users.

Note

For best performance and maintainability, do not use the Sites feature if the AP-to-controller link is normally connected.

The following guidelines are recommended to configure a secure and easy-to-maintain Site:

• Use 802.1x and WPA2 Enterprise authentication and privacy.
• Do not use MAC-based authentication (MBA) unless absolutely required.
• Do not use more than 32 policy rules within a single AP filter.
• Do not configure a Sites AP Session Availability function without an AP-to-controller link.
• Do not configure the following features in a Sites configuration since they rely on a consistent AP-to-controller link:
  • Tunneled/Routed topologies
  • RADIUS accounting
  • Captive Portal