Is "hopping" between vlans easy in a wireless environment ? I, like WW writes, dont understand the major problem either. But you could tunnel the traffic from an MR to a MX, but that still "mixes" things up in my opinion. If you truly want all the VRF goodness, then its 9800, that actually supports VRFs on the box (lets call it "VRF light light" right now, but full VRF support is coming officially a little later for the 9800). From version 17.12.x there is officially VRF support : https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-12/config-guide/b_wl_17_12_cg/m_vrf-support-and-overlapping-ip-address.html But its a ... lets call it L2.5 VRF , not full L3, but still in separate instances. I think that 17.15.x might be the release where full L3 VRF and routing is supported on the 9800, then you can actually terminate all the clients L3 on the 9800 in each VRF, but dont judge me if Im wrong, and its a later release.
... View more