Maximum VLANS per Controller

  • 1
  • Question
  • Updated 3 months ago
Hi Team,

I tried to find some info for following details, i couldn't find those information from Datasheets

Hivemanager NG
------------------------
Maximum VLANS per Controller ?
Can we do Rate limit per SSID set as a percentage of total available bandwidth ?

AP550
------------
Does AP550 support Multiple VPN pass-through?
Does AP550 Block SSID Broadcast?

Can anyone help me out here ?
Photo of Prashan

Prashan

  • 8 Posts
  • 1 Reply Like

Posted 3 months ago

  • 1
Photo of Bill Lundgren

Bill Lundgren, Employee

  • 21 Posts
  • 12 Reply Likes
Hi Prashan,

Remember, HiveManager is not a "controller."  It is a management tool, and runs either cloud-based, or on-prem as a hosted VM Appliance.  To those means, that VM only needs a single IP address, and thus, to be on one VLAN.  HiveManager is just a reporting, monitoring, and configuration orchestration tool.   There is no "controller" aspect or need for many VLANs.

All of the intelligence in the Aerohive solution is vested in the AP's, which communicate with each other via the AMRP protocol, which allows the control plane of the wireless network to be distributed among each member of the Hive, in a method similar to a cluster computing environment.

Each AP can host up to 16 SSID's per radio, and multiple VLAN's per AP can be mapped using 802.1Q and the HiveManager configuration.  

QoS is supported on all of the AP's.  You can rate limit by SSID, by application, VLAN, or many other combinations, and use the 8 QoS queues in a WRR or strict queue.  Since the AP's are distributed we don't have any idea of total aggregate bandwidth through, so you'd have to rate-limit the total bandwidth consumed by all users of a VLAN at the nearest aggregation choke point, such as an upstream router or firewall.

AS for the AP-550, all Aerohive AP's will pass any traffic you send through them from radio to Ethernet and visa-versa.  We don't care about VPN's and any VPN traffic will pass right through by default.  There is a stateful, layer 2-7 firewall though that could be used to block VPN access if you wanted.

And yes, all AP's support hiding/not broadcasting the SSID name.

Hope that helps,

Bill Lundgren,
Director, Product Management
Photo of Prashan

Prashan

  • 8 Posts
  • 1 Reply Like
Thank you Bill, Appreciate the explanation