topic Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup in Wireless

9800 WLC-Same Vlans on multiple sites in SD-WAN setup

GeorgeC71 — Mon, 22 Apr 2024 22:08:16 GMT

I have a 9800-CL in an SD-WAN setup. I have multiple sites that have the same Vlans at each site to make it easier to manage and remember.
Ex:
NorthSite: data-4, voice-5, wifi-6
SouthSite: data-4, voice-5, wifi-6
etc...

My current WLC configuration has one SSID for all sites. Any change in the WLAN/SSID, affects all sites.

How can I configure the WLC WLANs so that I have different SSIDs with the same VLAN?
Ex:
SSID @ NorthSite : NorthSite_data-6
SSID @ SouthSite : SouthSite_data-6

When I try to create a WLAN, it says one already exists with the same VLAN.
I want to use differently named SSIDs that have the same VLAN number for WiFi at all the sites. SSIDs specific for each site.

Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup

Mark Elsen — Tue, 23 Apr 2024 05:35:41 GMT

- Ref : https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html

>...If you have multiple branches and you want to use a different VLAN ID (number) in every branch with the same VLAN name, you can do this by configuring the mapping to the desired VLAN ID in a custom Flex profile assigned to each branch.
Note: A maximum of 16 locally switched VLANs can be mapped to a Flex profile.
Note: The VLAN name to VLAN ID mapping needs to be configured under the Flex profile also to use AAA VLAN override, when a locally switched VLAN is returned via the AAA server.

Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup

GeorgeC71 — Tue, 23 Apr 2024 13:16:20 GMT

Thank you, but it is actually the opposite. Different VLAN names with same VLAN numbers. I am new to configuring WLCs, but I think, doing some light research and watching a few videos on YT, I think I need to build Site tags/profiles for each location. Then I can use the same WLAN tags on each profile. Is that correct?

Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup

Mark Elsen — Tue, 23 Apr 2024 14:43:03 GMT

>...I need to build Site tags/profiles for each location. Then I can use the same WLAN tags on each profile. Is that correct?
- I think it is , but for verifying have a checkup of the 9800 WLC (staging) configuration with the CLI command show tech wireless and feed the output to : Wireless Config Analyzer
It will also point errors related to this ,

Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup

Rich R — Tue, 23 Apr 2024 21:00:13 GMT

@Mark Elsen first answer still applies - you can use the same VLANs at every site while using different names in each flex profile. The point is the mapping for each site is defined in the flex profile. Then in the site tag, tag profile and policy profile for each site you reference those flex profiles for each site (in the site tag). You can re-use the WLAN for each one if you want to because the WLAN itself doesn't have any VLAN linkage - it's the tag policy which joins the WLAN with the policy profile. Take a look at https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/newconfigmodel/b_catalyst-9800-configuration-model/m_elements-of-the-configuration-model.html and https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213911-understand-catalyst-9800-wireless-contro.html and https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213945-understand-flexconnect-on-9800-wireless.html to gain a better understanding of how the components work together along with the best practices documents which @Mark Elsen already mentioned (and linked below)

Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup

GeorgeC71 — Wed, 24 Apr 2024 13:10:10 GMT

Thank you for the input. I will have to read up on what you provided and try to configure the WLC to get it to work correctly. I will post once I get at least one config correct.

Re: 9800 WLC-Same Vlans on multiple sites in SD-WAN setup

Mark Elsen — Wed, 24 Apr 2024 13:45:29 GMT

- Remember to use the WirelessAnalyzer procedure too as I described , to get echo verification of the controller configuring attempts ,