topic Re: cisco flexconnect in Wireless

cisco flexconnect

Anjana A — Fri, 16 Dec 2022 01:52:19 GMT

Hello Team,

we are using flex connect mode of access point, in which the data traffic switching locally and central authentication.

here i have doubt, whether the user authentication traffic (control traffic) how it will reach controller.

user>> cawaptunnel>> wlc>>> aaa

( or)

user>> ap>> switch>> coreswitch>> isp?? wlc.

whether the branch site isp have any impact on the control traffic.

in case if the branch has high bandwidth utilization users cant authenticate or any disconnection may happen?

Regards,

Anjana

Re: cisco flexconnect

Haydn Andrews — Fri, 16 Dec 2022 01:58:21 GMT

In flexconnect central auth local switching traffic flow is:

Based onf 802.1x Auth (remove RADIUS if just PSK):

Client>AP>WLC (Via what ever transport is between AP and WLC (LAN/WAN etc)>RADIUS server (via what ever transport is between WLC and RADIUS Server)>WLC>AP> Client

In event of high bandwidth WANs then recommend QOS to proritise CAPWAP control traffic.

Other option is Flexconnect Local Auth if you need everything to remain within the site

Re: cisco flexconnect

Anjana A — Fri, 16 Dec 2022 03:00:31 GMT

Hello Andrew..

pls confirm how to priotrise the capwap tunnel traffic, by priotrise the ap management vlan or qos on the router?

Regards,

Anjana

Re: cisco flexconnect

Haydn Andrews — Fri, 16 Dec 2022 03:17:39 GMT

On the AP management VLAN create a QOS policy to poritise CAPWAP Control UDP 5246 to the WLCs