topic Re: Question about 2504 Wireless Controller in Wireless

Question about 2504 Wireless Controller

kennin.simmons — Sun, 04 Jul 2021 04:19:42 GMT

Hello,

I am tasked with configuring a 2504 wireless controller. Is it possible to assign an SSID to an interface that has dynamic ap management enabled?

Scenario:

Location1:

1) 10.0.0.0/24

2)192.168.0.0/24 DMZ

Location 2:

1) 10.0.5.0

Both locations are routable using network 1 at each location. However, I need to configure several access points and send them to location 2. These access points will communicate with the controller at location 1 on network 1. Two SSIDs will need to be on network 1 at location 1. The other SSID will be on Network 2 at location 1. This network is not routable.

Thank You for your help.

Re: Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 21:30:20 GMT

Is there a reason you have dynamic ap management enabled? If you have the 2504 at location 1, those ap should be in local mode. The AP's at location 2 should be configured for h-reap. This allows you to say, this SSID will map to this vlan at location 2. If you enable h-reap local switching on the wlan ssid, this give you the otion of mapping ssid to vlans or else it will tunnel back tothe wlc. Make sense?

Here is a link for h-reap

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080736123.shtml

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807cc3b8.shtml

Re: Question about 2504 Wireless Controller

kennin.simmons — Wed, 04 Jan 2012 21:34:54 GMT

I am new to cisco wireless controllers. Without dynamic AP management enabled how can the access points communicate with the controller?

Re: Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 21:39:06 GMT

They connect through the management interface.

Re: Question about 2504 Wireless Controller

kennin.simmons — Wed, 04 Jan 2012 21:40:11 GMT

Once I disable dynamic ap management on the management interface, All access points stop communicating with the controller.

Re: Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 21:44:35 GMT

Okay... I thought you were configuring multiple ap manager interfaces. If you want to use the management interface as the ap manager, you enable that there. Then you can use the other ports for your other vlans.

Look at senerio 1 and senerio 2.

http://www.cisco.com/en/US/products/ps11630/products_tech_note09186a0080b8450c.shtml

Re: Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 21:55:26 GMT

So this is how you want this to be setup:

Scenario:

Location1:

1) 10.0.0.0/24

2)192.168.0.0/24 DMZ

Location 2:

1) 10.0.5.0

Since location 1 is a flat network with only one subnet (internal) and one in the DMZ, you will configure WLC management/ap-manger port 1 on the 10.0.0.0/24 subnet. You can then map your SSID#1 to the management interface. Create a new dynaminc interface on the WLC and assign it an ip in the 192.168.0.0/24 subnet and place that on port 2. Connect port 2 to the DMZ. Now since you want everything to tunnel back to the WLC from location 2, you would leave the ap's in local mode. Devices in location 2 associating on SSID #1 will obtain an ip address in location 1 and tunnel back to the WLC and traffic will egress out of port 1. Devices that associate in location 1 or location 2 to SSID#2 (Guest) will tunnel back to the WLC in location 1 and traffic will egress out of port 2.

Since you want to tunnel traffic back to the WLC from location 2, you need to make sure your link has enough bandwidth or else the ap's will be bouncing.

If you setup the AP's in location 2 in h-reap mode, then you can place devices that associate to SSID #1 on the 10.0.50.0 subnet. Devices that associate to SSID #2 at location 2 will tunnel back to the WLC and egress out of port 2.

Re: Question about 2504 Wireless Controller

kennin.simmons — Wed, 04 Jan 2012 21:56:16 GMT

Ok, this is my issue. I am unable to configure two interfaces on the same subnet. I get a message stating ip confilct with another interface.

Re: Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 21:58:13 GMT

Correct... each interface must be on a different subnet.

Re: Question about 2504 Wireless Controller

kennin.simmons — Wed, 04 Jan 2012 22:00:25 GMT

The documentation has multiple interfaces on the same subnet and vlan tag.

Re: Question about 2504 Wireless Controller

kennin.simmons — Wed, 04 Jan 2012 22:01:29 GMT

Cisco 2500 Series Wireless Controller also support multiple AP-managers (for AP Load Balancing) where multiple AP-managers can be configured in addition to an AP-manager which is bounded with a management interface. In this case, it is recommended to have all AP-managers in the same subnet as a management interface.

 >show interface summary
Interface Name        Port Vlan Id  IP Address     Type    Ap Mgr Guest
--------------------- ---- -------- -------------- ------- ------ -----
apmgr2                2    10       10.10.10.12    Dynamic Yes    No
apmgr3                3    10       10.10.10.13    Dynamic Yes    No
apmgr4                4    10       10.10.10.14    Dynamic Yes    No
management            1    10       10.10.10.10    Static  Yes    No
virtual               N/A  N/A      1.1.1.1        Static  No     No

 >

In the above output, the management interface and AP-manager are bounded together to port 1. Three more AP-managers are created on other physical ports (2, 3, and 4) in the same subnet as management interfaces.

Re: Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 22:01:46 GMT

Correct.... but then you have to enable ap-manager on each interface.

Re: Question about 2504 Wireless Controller

kennin.simmons — Wed, 04 Jan 2012 22:04:05 GMT

Dynamic AP Manament? Or some other setting.

Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 22:05:01 GMT

How many ap's do you have? If you don't have a lot, there is no need to have multiple. You can if you want though.

Question about 2504 Wireless Controller

Scott Fella — Wed, 04 Jan 2012 22:06:34 GMT

Dynamic AP Management.

Re: Question about 2504 Wireless Controller

kennin.simmons — Thu, 05 Jan 2012 13:11:29 GMT

I only have 6 AP's. Is it possible to to implement a cisco wireless controller on 1 flat network? (1 subnet) If so, how?

Re: Question about 2504 Wireless Controller

Scott Fella — Thu, 05 Jan 2012 13:44:36 GMT

All you need to do is assign the SSID to the management interface for your internal SSID. Your guest SSID will use a different interface.

Thanks,

Scott Fella

Sent from my iPhone

Re: Question about 2504 Wireless Controller

kennin.simmons — Thu, 05 Jan 2012 13:53:21 GMT

That's my issue. The access points do not communicate with the controller unless dynamic ap management is enabled. Once I enable dynamic management on an interface, I am unable to assign an ssid to that interface.

Re: Question about 2504 Wireless Controller

Scott Fella — Thu, 05 Jan 2012 13:59:36 GMT

Create another interface on the wlc with an ip address on the same subnet as the management interface and then enable dynamic ap manager to the management interface and put the SSID on the other interface. You can have multiple interfaces on the same subnet if you have dynamic ap manager enabled.

Thanks,

Scott Fella

Sent from my iPhone

Re: Question about 2504 Wireless Controller

kennin.simmons — Thu, 05 Jan 2012 14:08:46 GMT

I'm getting "IP information conflicts with another interface" when trying to configure port 3 on the same subnet as port 1

I have dynamic ap management enabled on

Port 1

Vlan Tag 0 (untagged)

IP: 10.0.0.4

SM: 255.255.255.0

GW:10.0.0.5

Dynamic AP Management Enabled

Port 3

Vlan Tag 0 (untagged)

IP: 10.0.0.6

SM:255.255.255.0

GW: 10.0.0.5