topic Re: Joining AP to Catalyst 9800-CL Wireless Controller in Wireless

Joining AP to Catalyst 9800-CL Wireless Controller

ermionline — Sat, 22 Oct 2022 09:06:04 GMT

Hi All,

I have recently acquired Catalyst 9800-CL Wireless Controller and i wanted to join my on-prem AP which are behid NAT to this cloud controller using public IP. Can you guys please help me

Re: Joining AP to Catalyst 9800-CL Wireless Controller

balaji.bandi — Sat, 22 Oct 2022 09:14:00 GMT

in most cases, Option 43 in the DHCP scope will tell AP how to join Controller.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcp-option-43-00.html

Also required are some FW ports open to establish capwap tunnel.

help guidelines :

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113344-cuwn-ppm.html#anc9

Re: Joining AP to Catalyst 9800-CL Wireless Controller

Mark Elsen — Sat, 22 Oct 2022 12:58:16 GMT

- Review the 9800-CL configuration with the CLI command : show tech wireless , have the output analyzed by https://cway.cisco.com/tools/WirelessAnalyzer/ , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer. Checkout all advisories!

Re: Joining AP to Catalyst 9800-CL Wireless Controller

Arshad Safrulla — Sun, 23 Oct 2022 12:43:51 GMT

Is the WLC hosted in Private or Public Cloud? Or are you looking for OEAP deployment. Depending on the cloud platform deployment method will change. I would suggest you include more info on the same.

To answer your question, if you need AP registering over the public IP you need to enable it under the AP join profile.

Configuration >>> AP Join Profile >>> Edit >>> Capwap >>> Advanced >>>Discovery >>> Select Public

And then you need to add the NAT IP for WMI

Configuration >>> Interface >>> Wireless >>> edit >>> NAT IPV4/V6 server address

Then you can advertise this WMI IP to AP via DHCP options or if you need to configure it manually on the AP

capwap ap primary-base <WLC Hostname> <Public IP for WMI>

Re: Joining AP to Catalyst 9800-CL Wireless Controller

ermionline — Mon, 24 Oct 2022 06:29:03 GMT

Hi Arshad,

Many Thanks: The WLC is hosted in public cloud, but my Aps are hosted behind NAT

Re: Joining AP to Catalyst 9800-CL Wireless Controller

Arshad Safrulla — Mon, 24 Oct 2022 12:30:44 GMT

OK great. Follow the deployment guide for the specific public cloud platform. But make sure that you do the configuration I have mentioned above.

Re: Joining AP to Catalyst 9800-CL Wireless Controller

Scott Fella — Mon, 24 Oct 2022 13:35:39 GMT

Did you setup the public ip on the 9800-CL in the public cloud and allowing the ports required? This is a requirement before any access points can join. Then like with any access points, you will need to figure out the "how to join the ap". With ap's that are joined to another controller, you can define the high availability on the ap to point to the 9800-CL as primary and then use your existing as a backup until the ap can join. If the ap is new, then its easier to actually stage the ap and set the public ip of the controller and have it join prior to shipping them onsite.

So are these ap's new? Are they like OfficeExtend AP's?

Re: Joining AP to Catalyst 9800-CL Wireless Controller

ermionline — Mon, 24 Oct 2022 13:36:45 GMT

OK Arshad, One more question
Do I need to have public IP for each AP or is it possible to have 1 public IP for the whole AP that I have.

Re: Joining AP to Catalyst 9800-CL Wireless Controller

ermionline — Mon, 24 Oct 2022 13:40:58 GMT

They are new APs.
So what i need to do is to open up the required ports in my Firewall and point the AP to the cloud controller?

Re: Joining AP to Catalyst 9800-CL Wireless Controller

Arshad Safrulla — Mon, 24 Oct 2022 13:57:35 GMT

You don't need any Public IP per AP. You can assign any private IP (RFC1918) and make sure that the upstream NAT is properly configured to have AP management IP to WMI of WLC reachability. For Firewall rules you may refer the below.

Cisco Unified Wireless Network Protocol and Port Matrix - Cisco

Also make sure that the Public Cloud side is configured to allow the traffic as per the documentation.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-7/deployment-guide/Azure_Deployment_Guide.html#:~:text=1.%C2%A0%C2%A0%C2%A0%20Add-,typical,-ports%20that%20are

Re: Joining AP to Catalyst 9800-CL Wireless Controller

Scott Fella — Mon, 24 Oct 2022 14:08:20 GMT

I'm assuming when you say public cloud, its in AWS or Azure?

Re: Joining AP to Catalyst 9800-CL Wireless Controller

ermionline — Tue, 25 Oct 2022 06:57:03 GMT

Azure