Hello Carlo,
You need to:
- Create a NAT translation / access rule on your firewall to allow UDP traffic from a public IP address to your controller's IP address. For security you should only allow connections from your remote sites (assuming those remote sites have a static IP address).
- Plug in your access point at your main site and let it connect to the controller. This will allow it to show up in the AP list so you can change settings. It will also get the newest firmware. As Ron mentioned - you cannot upgrade the AP remotely. It will fail. And whenever you upgrade your controller(s) - you must first pre-load the firmware to those remote AP's before rebooting the controller with the new firmware.
- Configure the controller's IP address on the AP to be the public IP you assigned.
- Plug in the AP at the site, connect to it with ssh, and manually set the controller IP to the public IP you assigned. Once it connects, it should retain that IP since you configured it in step #3.
That's a lot of steps and may create a lot more questions. You may want to
check out this post.
Hopefully that gives you some idea of how things would work.
