topic Re: Native VLAN in flex profile in Wireless

Native VLAN in flex profile

Wes Schochet — Fri, 19 Nov 2021 15:57:45 GMT

Hi All-

I am developing configs for an upgrade from 5520s to 9800s. I made some errors in specifying the native VLAN for my test site in the Flax profile. After some additional testing it appears that everything works fine no matter what native VLAN is specified in the flex profile. This makes me think that perhaps I don't understand what that value is used for or what the interaction is? Is the AP supposed to mark it's management traffic? Does anyone have any experience with this? All of my APs are on switch ports that are set up as trunks with a native VLAN specified on the port config.

Thanks,

Wes

Re: Native VLAN in flex profile

Mark Elsen — Fri, 19 Nov 2021 16:13:53 GMT

- This is not a direct answer but could be useful : on 9800 you can always have a quick configuration check with the cli exec command : wireless config validate. For in in-depth check of the 9800-configuration , use show tech wireless command and feed that output into : https://cway.cisco.com/tools/WirelessAnalyzer/ . These tools always come in handy for whatever issues could be encountered and will already provide an advisory role for the configurations that you are working on (9800-platform).

Re: Native VLAN in flex profile

Wes Schochet — Fri, 19 Nov 2021 18:39:46 GMT

Thanks - this of course brings up a totally different issue:

WirelessAnalyzer flags me for no ARP-proxy. I see no way to set that via the GUI? That seems odd.

Re: Native VLAN in flex profile

Mark Elsen — Fri, 19 Nov 2021 19:31:15 GMT

- Can you show this advisory message as reported by WirelessAnalyzer (or provide screenshot - e.g.)

Re: Native VLAN in flex profile

Arshad Safrulla — Sat, 20 Nov 2021 10:12:51 GMT

As per the 9800 best practices guide “When connecting with a native VLAN on the AP, the native VLAN configuration on the Layer 2 must match the configuration on the AP.”

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html

This means you have to match the native VLAN configured on the switch port with the one configured under Flex profile.

arp proxy is useful only if you are centrally switching the traffic. You need to enable this by CLI.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_arp_proxy.html

make sure that you run latest Cisco TAC recommended codes in WLC always.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214749-tac-recommended-ios-xe-builds-for-wirele.html