topic Re: Foreign WLC and Anchor WLC in Wireless

Foreign WLC and Anchor WLC

abinaya.2.r — Mon, 05 Jul 2021 15:45:29 GMT

Hi,

I have a foreign WLC at America which is of model AIR-CT2504-K9 and the AIR-CAP3602I-A-K9 and AIR-CAP3502I-A-K9 APs registered to it. I also have an anchor WLC at Australia in DMZ zone which is of model AIR-CT5508-K9

I will establish an EOIP tunnel between these two WLCs. The Guest users will take a Layer2 PSK authentication on the Foreign WLC and a Layer 3 Web authentication at the Anchor WLC. The Anchor WLC has an internal DHCP configured. My question is

1. When I have an user connected at America, As the traffic will go through the EOIP tunnel, Will I have latency issues as these two WLCs are located in different regions?

2. Do I have an option for the user traffic to take a Layer2 PSK authentication on the foreign WLC and then Layer 3 Web authentication at anchor WLC and once the user will get an IP address from the anchor WLC, can the traffic be routed back to the local gateway Internet at America itself? Is that a good solution?

Re: Foreign WLC and Anchor WLC

Scott Fella — Wed, 20 Jun 2018 13:15:03 GMT

That is a bad design. Layer 2 auth is always done on the foreign and any layer 3 is done on the anchor along with dhcp. Why not have the web portal on the 2504 and then you can place the “guest” traffic locally. You can even look at FlexConnect local switching as a design and auth users but drop their traffic local at the site.

Re: Foreign WLC and Anchor WLC

abinaya.2.r — Wed, 20 Jun 2018 17:34:45 GMT

But, I would like to segregate the Guest traffic.

Re: Foreign WLC and Anchor WLC

abinaya.2.r — Thu, 21 Jun 2018 11:59:09 GMT

The issue here is I am trying to solve how we can keep the single WLC (Anchor) to manage the password for Guest users and use the local site gateway to access the internet.

Is it a feasible solution?

Re: Foreign WLC and Anchor WLC

Scott Fella — Thu, 21 Jun 2018 14:04:47 GMT

There is no possible way to do that. You would need something like ISE to host the portal page and user accounts.

Re: Foreign WLC and Anchor WLC

abinaya.2.r — Fri, 22 Jun 2018 15:20:29 GMT

ok. On the foreign WLC, can I say the guest users on Layer 3 web auth to redirect the web page to an external server and give the anchor WLC as external server?