Hi,
I have Extreme Access Points managed by ExtremeCloud IQ and these broadcast two SSIDs and drop Clients on to two VLANs/ Subnets depending on which SSID they authenticate to. The APs and VLANs/Subnets are in different VRFs. The APs have a management address in the Management VRF. The Client VLANS/Subnets are one in a Private VRF and the other in the Public VRF. Communications between all these VRFs are controlled by a Firewall. Whilst tidying up rules for the Management VRF I can see that the APs on their Management Address are pinging the Client VLAN/Subnet Gateways in the other VRFs.
Is this normal behaviour? Does the AP Management need to ping the gateways of the VLAN/Subnets that the Clients are placed into? Why is this? and finally can I block these pings as unnecessary communications?
Answers will be gratefully received.
Thanks
