topic Re: Cant access WLC Dynamic interface over Layer 3 wired in Wireless

Cant access WLC Dynamic interface over Layer 3 wired

ittechk4u1 — Mon, 05 Jul 2021 16:01:37 GMT

Hello Experts,

I have a WLC which is configured as

Mgmt Interface: 10.99.80.1/24 , GW: 10.99.80.254(firewall)

Dynamic interface: 10.99.21.0/24 , gw:10.99.92.254(switch)

layout:

WLC------Trunk(vlan80,92)-----SW-----trunk------FW

switch has layer 3 interface:

vlan 21: 10.99.21.254/24

vlan 92: 10.99.92.254/24

I wanted to access the WLC from vlan 21(LAN) to dynamic interface (10.99.92.1) over https but its not working.

any thoughts?

Thanks in advance.

Re: Cant access WLC Dynamic interface over Layer 3 wired

RichardAtkin — Fri, 24 Aug 2018 10:49:38 GMT

Have you enabled management via dynamic interfaces?

config network mgmt-via-dynamic-interface {enable | disable}

Re: Cant access WLC Dynamic interface over Layer 3 wired

ittechk4u1 — Fri, 24 Aug 2018 10:55:50 GMT

yes i did.

I enabled both "mgmt over wireless" and "mgmt over dynamic interface "

Thanks

Re: Cant access WLC Dynamic interface over Layer 3 wired

RichardAtkin — Fri, 24 Aug 2018 13:26:40 GMT

Ok. So we need to establish if this is a WLC problem or a network one. I'm tempted to say network related as this is a well establishd feature, but let's not jump the gun...

If you physicaly plug a Client directly in to the Dynamic Interface's VLAN on the switch immediately adjacent to the WLC, can it access the WLC's dynamic interface in that same VLAN? (ie, pure L2, no FWs and as few switches as possible in the way)

Re: Cant access WLC Dynamic interface over Layer 3 wired

ittechk4u1 — Mon, 27 Aug 2018 10:57:17 GMT

yes in same VLAN (same as dynamic interface) I can access to WLC.

Thanks

Re: Cant access WLC Dynamic interface over Layer 3 wired

RichardAtkin — Mon, 27 Aug 2018 14:05:07 GMT

Ok, so assuming you have set the Default Gateway correctly on that Dynamic Interface on the WLC, then it’s a network / ACL / FW problem.

Look at the Routing and security devices you have in place at every physical/logical hop that takes you further from the switch you successfully tested from until you find out where the issue is.