AP's over layer 3?

UTM Wireless Protection listens for traffic from 1.2.3.4.  You only need to route traffic to that IP to the UTM on one of the interfaces in 'Allowed Interfaces' on the 'Global' tab.

Cheers - Bob

Sorry, you've lost me on that one. If we have the following:

REMOTE SITE = 10.1.1.0/24 (dhcp served from central site)
 |
MPLS Network (only route out to internet is via central site & UTM)
 |
CENTRAL SITE = 10.1.100.0/24 (dhcp server leases ip's & ranges to remote sites)
 |
 |
UTM
 |
Internet

From what I'm told, the AP's are plug and play once the UTM has been configured. In the above scenario, anything at the remote site that wants to access anything that the network doesn't know about eg internet address, will automatically route to the UTM and internet>
So are you saying that the AP will try and access 1.2.3.4 which the UTM will have as a virtual address?

Yes, as long as the MPLS traffic comes in to an interface that is in 'Allowed Interfaces' in Wireless Protection.

Cheers - Bob

hi bob - which tcp/udp ports are needed ?

thanks

hi bob - which tcp/udp ports are needed ?

thanks