topic Re: Using different interface as management interface in c9800 in Wireless

Using different interface as management interface in c9800

Leftz — Wed, 01 Jun 2022 14:34:38 GMT

Hi C9800 wlc is setup. The interface Tw0/0/1 is configured as management interface. ssh and gui can access the wlc. but we reconfigured the WLC from scratch using Te0/1/0 as management interface, GUI cannot access wlc again. Is this because we are using different interface? Thank you

Re: Using different interface as management interface in c9800

Flavio Miranda — Wed, 01 Jun 2022 14:39:14 GMT

I dont think so. Does this interface Te0/1/0 is Layer 3 interface or it is part of a Layer 3 port-channel or it is member of some vlan with Layer 3?

You should be able to manange the WLC from some IP address.

Re: Using different interface as management interface in c9800

Leftz — Wed, 01 Jun 2022 15:02:56 GMT

Thank you very much for your reply. We are using two ports Te0/1/0 and Te/0/1/1 as trunk and channel. and using vlan as management interface.

Re: Using different interface as management interface in c9800

Flavio Miranda — Wed, 01 Jun 2022 15:09:49 GMT

Can you share the sh run ?

Or at least "show ip int br"

show run int port-channel X

show run int Te0/1/0 and Te/0/1/1

Re: Using different interface as management interface in c9800

balaji.bandi — Wed, 01 Jun 2022 15:15:00 GMT

check this video nice one :

https://www.youtube.com/watch?v=UhZedbZ1pIA

I have installation guide in my archive post later (not in hand)

Re: Using different interface as management interface in c9800

Leftz — Wed, 01 Jun 2022 15:20:30 GMT

Please see below:

WLC#sh ip int bri
Interface IP-Address OK? Method Status Protocol
Tw0/0/0 unassigned YES unset down down
Tw0/0/1 unassigned YES unset down down
Tw0/0/2 unassigned YES unset down down
Tw0/0/3 unassigned YES unset down down
Te0/1/0 unassigned YES unset up up
Te0/1/1 unassigned YES unset up up
GigabitEthernet0 unassigned YES NVRAM administratively down down
Port-channel10 unassigned YES unset up up
Vlan1 unassigned YES NVRAM administratively down down
Vlan10 10.10.10.89 YES NVRAM up up

WLC#sh run int port-channel 10
interface Port-channel10
switchport mode trunk

WLC#sh run int te0/1/0
interface TenGigabitEthernet0/1/0
switchport mode trunk
no negotiation auto
channel-group 10 mode active

WLC# sh run int te0/1/1
interface TenGigabitEthernet0/1/1
switchport mode trunk
negotiation auto
channel-group 10 mode active
end

Re: Using different interface as management interface in c9800

Flavio Miranda — Wed, 01 Jun 2022 15:29:27 GMT

You should be able to manage the WLC using the IP 10.10.10.89.

If you are not, you need to check the device where the WLC is connected.

Re: Using different interface as management interface in c9800

Leftz — Wed, 01 Jun 2022 15:50:18 GMT

Yes its ssh, but not GUI

I checked and get to know many users have this issue. Please see the link.

https://community.cisco.com/t5/wireless/cisco-wireless-lan-controller-9800-l-c-unable-to-login-to-gui/td-p/4025477

Re: Using different interface as management interface in c9800

balaji.bandi — Wed, 01 Jun 2022 16:35:44 GMT

I have used mamangent gig0/0 and it works as expected. can you post full config

here is my Cat 9800 config : (simple steps works and in production now)

https://www.balajibandi.com/?p=1595

Re: Using different interface as management interface in c9800

Arshad Safrulla — Thu, 02 Jun 2022 02:00:04 GMT

In all 9800 physical appliances you have a dedicated management port (service port). It is highly recommended that you configure this port for management access;

interface GigabitEthernet0
description :d= Management_Switch_GE1/0/10
vrf forwarding Mgmt-intf
ip address 10.0.0.101 255.255.255.0
negotiation auto
no cdp enable

ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.0.0.1

If you require in-band management to WLC then you can configure a SVI, For example

interface Vlan101
description AP-Management
ip address 10.1.0.2 255.255.255.0

ip route 0.0.0.0 0.0.0.0 10.1.0.1 (Default route is mandatory)

Also in order to have http/s access to the WLC you need to use below commands;

ip http server (you can disable this if required)

ip http secure-server
ip http authentication local

Configuring any new L3 ports in the WLC is perfectly possible, but must be avoided and not recommended due to complexities it brings. Cisco recommends using VLAN Interfaces (SVI's) in the WLC instead of configuring L3 interfaces. Also if you are not using mdns or dhcp relay only 1 SVI in WLC is more than sufficient. Always read the 9800 best practices guide if you need more info.

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html