topic Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem in Wireless

C9115AXI-B / C9800-40 WLC FlexConnect Problem

MasonK — Fri, 03 Jun 2022 14:53:56 GMT

I'm in the process of creating a wireless management VLAN for our APs, and so am re-IP'ing the access points. Currently they're in VLAN 1 alongside the clients of one of the WLAN's, so I'm putting them into VLAN 109. However when I do so on a test AP, all of the clients suddenly are put into VLAN 109 as well. My configs are as follows:

FlexConfig Policy - VLAN 109 is the Native VLAN. VLAN 1 is configured.

WLAN's - WLAN1 uses VLAN 1 and Local Switching/Association. WLAN2 (Guests) uses Central Switching and works just fine.

Tags - New tags are applied to the AP to use the above policies.

Switchport - Trunk mode, Native VLAN 109, both 109 and 1 are allowed.

Any ideas why this might not be working? I followed the below guide to make sure everything's configured as it should be, and it all looks good. I am not able to ping any clients in WLAN1 though, and the MAC table on the switch shows all MACs on that port as being in VLAN 109.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213945-understand-flexconnect-on-9800-wireless.html

Operational Config Screenshot:

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

Flavio Miranda — Fri, 03 Jun 2022 15:31:43 GMT

It seems to me that the problem could be related to the Native in the vlan 109. Can you another vlan on the Policy profile and not configure it as native?

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

MasonK — Fri, 03 Jun 2022 15:44:10 GMT

Well in order for the AP to have its IP in a VLAN separate from the WLANs' it needs to be configured that way. In the document I linked that's how Cisco describes it should be done.

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

Flavio Miranda — Fri, 03 Jun 2022 15:51:13 GMT

Just a suggestion. AP use native vlan to get IP address, as this vlan is the only vlan it knows, it expected the client also get IP on this vlan.

I may lose it, the document seems to focus on ssid only.

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

Arshad Safrulla — Sat, 04 Jun 2022 03:24:23 GMT

For an AP in FlexConnect local switching mode:

● Specifying vlan-name = default, client is assigned to VLAN 1

● Using vlan-id 1, a client is assigned to the FlexConnect native VLAN

so go to the policy profile of the SSID in question and do the above mentioned change.

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

MasonK — Mon, 06 Jun 2022 13:44:48 GMT

Got it, thank you. I'll give that a shot and test once I'm back in the office on Wednesday. I'll let you know if it works or not.

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

MasonK — Wed, 08 Jun 2022 13:10:21 GMT

Good Morning - I configured that WLAN to use "default" instead of typing "1", however it did not make a difference.

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

Arshad Safrulla — Sun, 12 Jun 2022 14:32:19 GMT

Hi Mason,

Can you do the same changes in the flex profile as well. If not please post the flex and policy profiles attached to the AP.

Re: C9115AXI-B / C9800-40 WLC FlexConnect Problem

MasonK — Wed, 29 Jun 2022 16:31:05 GMT

I am not able to do so in the Flex profile. It only lets me type in a number there, and does not provide a drop-down box to pick options from.