We are trying to enable the ability to allow ios devices to work over two different IP schemes.
Our Core and MDM server are on our corporate 10.1.X.X network, and our devices are on our store's 172.18.X.X network.
When I have the devices set on our corporate SSID, everything works beautifully, however, on the store's SSID, I can only enroll devices, and get a partial inventory. I am not able to push policy, wipe, lock, unlock, etc.
We have router ACLs allowing ports 80, 443, 2195, 2196, and 5223 (All TCP) open between the two networks as well as 2195,2196, and 5228 open on our corp firewall to traffic originating from Apple's cloud. (gateway.push.apple.com).
So far, we can only telnet between the two SSID's over 80 and 443 (which explains why we can onlly enroll devices.)
What step are we missing here ?!?!?