topic Default-gateways for dynamic interfaces on 2504 controller in Wireless

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Mon, 05 Jul 2021 07:01:57 GMT

Hi,

I am setting up wifi flexconnect solution and is a bit confused regarding what should be the default gateway for the dynamic interfaces which will be created.

Will it be the same as the one for management interface or the will it be the one for the clients.

controller ip 172.16.1.100/24

default-gateway 172.16.1.254

vlan 10

dynamic interface 192.168.1.10/24

default-gateway ?????

vif for this vlan on switch 192.168.1.254

default-gateway for clients 192.168.1.254

Kindly suggest .

Thanks

Re: Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 07:34:13 GMT

Dynamic interface gateway should be 192.168.1.254 as per your configuration (which is the SVI of local switch).

If you create another dynamic interface (like 192.168.20.10) then gateway for that should be 192.168.20.254 (if that is the SVI on your switch)

Gateway should be always same subnet IP.

HTH

Rasika

**** Pls rate all useful responses ****

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 07:50:07 GMT

Thanks for the reply.

Also i am not able to ping the ip address of dynamic interface on the controller with switch vif as source.

What would be the issue, and will it impact on services ??

And if yes how to resolve it.??

Re: Default-gateways for dynamic interfaces on 2504 controller

Scott Fella — Thu, 23 Jan 2014 08:08:07 GMT

Are you trunking Vlan 10? The WLC needs to be connected to a trunk port with the vlan's that are defined on the WLC.

Sent from Cisco Technical Support iPhone App

Re: Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 08:08:43 GMT

Hi Sandeep,

Can you post the below output from your SW & WLC

WLC

show interface detailed mangement

show interface detailed <-where 192.168.1.10 configured

show run int Gx/x <- Gx/x is where WLC connected

HTH

Rasika

**** Pls rate all useful responses ****

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Choudhary — Thu, 23 Jan 2014 08:09:31 GMT

Hi Sandeep,

As per my exp.,

You can not ping the dynamic interface of WLC from Switch.

Management interface is the only consistently pingable interface.

Hope it helps.

Regards

Dont forget to rate helpful posts

Re: Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 08:13:13 GMT

Hi Sandeep Choudhary

That is not correct, you should be able to ping dynamic interface of your controller from switch

Rasika

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Choudhary — Thu, 23 Jan 2014 08:15:12 GMT

HI Rasika,

Thanks for correcting me.

But Even I tried many times.....still I did not find any reason , whx I am not able to ping, may be my firewall blocked ICMP ofr this vlan ...??

Regards

Re: Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 08:17:43 GMT

Yes, if you are not able to ping, something block that ICMP.

Try it in your study lab (if available) as this is a very basic troubleshooting tip for your CCIEW

HTH

Rasika

Re: Default-gateways for dynamic interfaces on 2504 controller

Sandeep Choudhary — Thu, 23 Jan 2014 08:19:53 GMT

Thanks.. I usually do my practice in my comapny test lab and i dont have rights to touch firewall.

So i must ask about this to my security colleauges.

I will remember this

Regards

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 09:37:05 GMT

Thanks guys.

I am configuring the LWAP in Flexconnect mode

Switchport(connected to wlc) is configured as Trunk

Just pondering how a ping to dynamic interface should work.

looks loke a VPLS concept.

Also plz go through the image. to understand my scenario a bit better.

Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 09:55:38 GMT

Did you configure FlexConnect Local switching or Central Switching. If it is local switching, then your SVI to be defined on your branch L3 switch.(if it is central switching then you can define it your HQ)

If it is FlexConnect, did you configure correct vlan mapping ? This configuration guide should help you if you are running WLC 7.4.x code

http://www.cisco.com/en/US/docs/wireless/controller/7.4/configuration/guides/consolidated/b_cg74_CONSOLIDATED_chapter_010001101.html

If you provide those output requested we can help you better

HTH

Rasika

**** Pls rate all useful responses ****

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 10:05:55 GMT

Thanks Rasika,

I have enabled Flexconnect in local switching mode and Vlan mappings are also correct, i have cross checked many times.

SVI is also configured on the branch L3 switch.

APS are registered and working fine, its just that the dynamic interfaces are not pinging.

I can't login to controller at this moment so output cannot be published, however for switchport config it is surely

switchport trunk encapsulation dot1q

switchport mode trunk

switchport nonegotiate

Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 10:12:09 GMT

If it is Flexconnect Local switching, can you ping the branch L3 switch SVI from a client who gets IP on this WLAN ? In this scenario all user traffic terminate at branch switch & no data traffic comes to WLC at all.

So WLC dynamic interface is not relevant (actually you cannot have WLC dynamic interface on the same subnet as branch L3 switch SVI as those two connected over WAN). You can put it on any dummy interface or management interface on WLC.

HTH

Rasika

**** Pls rate all useful responses ****

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 10:22:04 GMT

This looks quite clear.

Yes the clients are able to ping SVI but not the dynamic interface.

So you mean to say its not mandatory to create the dynamic interface on wlc when AP is in flexconnect mode, or is it that dynamic interfaces are not required at all and the wlans can be mapped to management interface ??

Re: Default-gateways for dynamic interfaces on 2504 controller

Rasika Nayanajith — Thu, 23 Jan 2014 10:24:10 GMT

Yes, In flexconnect local switching mode, you do not require a dynamic interface on your WLC (as traffic will never going to hit there)

As long as you configure branch L3 switch with required SVI & your FlexConnect AP for correct vlan mapping, that's it

When WLAN creating, since it require an interface to map, either you can create a dummy dynamic interface (which is not routable in your network) or simply assign management interface.

NB: If you have mixed of Local mode & FlexConnect mode AP on this controller using the same WLAN, then you need to have dynamic interface for the local mode ap users to get an IP from. In this scenario, FlexConnect AP still go for the branch vlan mapping rather using the WLC dynamic interface (because of Flexconnect local switching)

HTH

Rasika

**** Pls rate all useful responses ****

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 10:35:23 GMT

Thanks a lot for sharing this information.

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 12:52:43 GMT

Hi Rasika,

Can you help me with some reference on how to configure 802.1x for wireless users using cisco ACS 5.4

Re: Default-gateways for dynamic interfaces on 2504 controller

George Stefanick — Thu, 23 Jan 2014 13:56:05 GMT

Here are some videos

http://www.labminutes.com/blog/2013/10/cisco-acs-54-video-guide-installation-configuration-and-deployment

Sent from Cisco Technical Support iPhone App

Default-gateways for dynamic interfaces on 2504 controller

Sandeep Verma — Thu, 23 Jan 2014 14:01:50 GMT

Thanks George,

Gone through the videos, the guy's very fast.

bouncer for a beginner.