topic Re: Data path down and Control path is up on wlc in Wireless

Data path down and Control path is up on wlc

networklearner1 — Wed, 10 Jan 2024 12:39:31 GMT

Hello All,

We have 2 WLC's.

5508- Anchor WLC (8.5.161.7)

3504- Foreign WLC (8.10.185.0)

I have created a mobility group and added the WLC's MAC respectively.

The FW ports 16666, 16667, 97 are all open.

The control path is UP but the Data path is DOWN. I tried removing the IP from group and adding again. Also tried rebooting the WLC's but it is still showing Down. Could someone please let me know how to fix this.

Re: Data path down and Control path is up on wlc

Mark Elsen — Wed, 10 Jan 2024 13:22:03 GMT

- Have a look at https://community.cisco.com/t5/wireless/static-mobility-group-status-control-and-data-path-down/m-p/4713192#M247666

Re: Data path down and Control path is up on wlc

networklearner1 — Wed, 10 Jan 2024 13:25:25 GMT

Thank you @Mark Elsen , I don't see any block or drop on our FW. Is there anything else that can be checked?

Re: Data path down and Control path is up on wlc

Mark Elsen — Wed, 10 Jan 2024 13:38:11 GMT

- Well, to verify correct firewall behavior , examine (full) logs and confirm allowed traffic for the involved ports ; (check that you can see the needed pass trough traffic). The response I pointed to in my initial reply also mentions :
https://mrncciew.com/2013/03/24/mobility-ping-tests/

Have a go with that too , if that does not work for instance, again iterate on the firewall and check what it does with the intended traffic.

Re: Data path down and Control path is up on wlc

MHM Cisco World — Wed, 10 Jan 2024 14:03:24 GMT

what is the FW you have?
MHM

Re: Data path down and Control path is up on wlc

networklearner1 — Wed, 10 Jan 2024 14:28:09 GMT

It’s Paloalto

Re: Data path down and Control path is up on wlc

MHM Cisco World — Wed, 10 Jan 2024 14:36:11 GMT

I was hope it Cisco but anyway
try open port UDP
5246/5247

MHM

Re: Data path down and Control path is up on wlc

networklearner1 — Fri, 12 Jan 2024 08:12:05 GMT

Hello All,
It seems the EtherIP traffic was getting denied in another firewall, we allowed it and then both the tunnels came up.