Is it possible to monitor these APs eventhough they are not in one network?

[Carlo_Alviar]

Is it possible to monitor these APs eventhough they are not in one network? Could it possible to connect to the controller without using VPN?

[Steve_Ballantyn]

Hello Carlo,
You need to:

1. Create a NAT translation / access rule on your firewall to allow UDP traffic from a public IP address to your controller's IP address. For security you should only allow connections from your remote sites (assuming those remote sites have a static IP address).
2. Plug in your access point at your main site and let it connect to the controller. This will allow it to show up in the AP list so you can change settings. It will also get the newest firmware. As Ron mentioned - you cannot upgrade the AP remotely. It will fail. And whenever you upgrade your controller(s) - you must first pre-load the firmware to those remote AP's before rebooting the controller with the new firmware.
3. Configure the controller's IP address on the AP to be the public IP you assigned.
4. Plug in the AP at the site, connect to it with ssh, and manually set the controller IP to the public IP you assigned. Once it connects, it should retain that IP since you configured it in step #3.

That's a lot of steps and may create a lot more questions. You may want to check out this post.

Hopefully that gives you some idea of how things would work.

[Ronald_Dvorak]

I'm sorry but could you please be more precise - I don't unterstand the question.

[Carlo_Alviar]

What fo i need to do with the controller to gain access to the remote AP?

[Ronald_Dvorak]

There is one big limitation if you've the controller/AP behind a firewall with port forwarding = the software upgrade of the APs is not supported/working.

Yes you could do it... but it makes no sense in a real production deployment.