Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

WLC 4400 Config Issue

Status
Not open for further replies.

SLMHC

MIS
Jul 23, 2004
274
CA
I have a 4400 configured with a private wlan and a number of 1100 APs on 3 subnets. The APs get the correct IP but clients connected get an IP from the same subnet as the controller.

i.e.
subnet 1 10.1.1.1-254 (4400 + 4 APs - APs & clients get 10.1.1.x IPs)
subnet 2 10.2.1.1-254 (2 APs - APs get 10.2.1.x, clients get 10.1.1.x)
subnet 3 10.3.1.1-254 (3 APs - APs get 10.3.1.x, clients get 10.1.1.x)

Do I not have something set correctly or is how it is supposed to be?

In the future I want a guest vlan available on these 3 subnets as well so Id like to get this figured out.

-Dave
 
Hi,

I think you would need three (3) VLAN's. One for WLAN Mgt (LWAPP), one for internal WLAN clients, and one for guest. We have this setup and working well. Let me know if you need a hand with the config. I can look and refer at our WLC if needed.

Rgds,

John
 
Config help would be very appreciated.

-Dave
 
Hi,

OK, no problem. We have three WLAN's. One for: internal, external, and wireless voice. Each WLAN is associated with a VLAN that is configured on our Switches (L3 4506's). We have both ports connected to our LAN (Primary and Backup). We configured the following interfaces:
1. management (MGT VLAN, Primary Port = 1, Backup Port =2)
2. ap-manager (MGT VLAN, Port #1)
3. ap-manager2 (MGT VLAN, Port #2)
4. private_wvlan (InternalWLAN VLAN, w/ Primary/Backup Ports)
5. guest_wvlan (GuestWLAN VLAN, w/ Primary/Backup Ports)
6. voice_wvlan (Voice VLAN, w/ Primary/Backup Ports)

Once these are created, you should be able to configure your WLANs. We created our WLANs and bound them to the appropriate interface. We use RADIUS and Cisco ACS, but you options may vary. When setting up the guest, you can use the Layer 3 security with web auth. Just make sure your DHCP and DNS is correct. I would also recommend using an ACL if you plan to use your LAN switches for guest traffic. I hope this helps.

Rgds,

John
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top