topic Re: Ipsec tunnel WLC 9800 in Wireless

Ipsec tunnel WLC 9800

David.Vicente — Thu, 10 Oct 2024 07:11:26 GMT

Hi!

Is it possible, or has anyone used, an IPsec tunnel on a Cisco 9800 controller to transport guest traffic to a manager like Prisma?

Thanks in advanced

David.

Re: Ipsec tunnel WLC 9800

MHM Cisco World — Thu, 10 Oct 2024 07:15:16 GMT

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-2/config-guide/b_wl_17_2_cg/b_wl_17_2_cg_chapter_010010110.html

Check this

MHM

Re: Ipsec tunnel WLC 9800

David.Vicente — Thu, 10 Oct 2024 07:19:54 GMT

Thanks for your response! I had already seen that document, so it's only for syslog then. 🙂

"Cisco Catalyst 9800 Series Wireless Controller supports IPsec configuration. The support for IPSec secures syslog traffic."

David

Re: Ipsec tunnel WLC 9800

Rich R — Sat, 12 Oct 2024 11:19:15 GMT

Yes it looks that way @David.Vicente

The wireless BU removed most of the IOS-XE base functionality from 9800.
Also remember 9800 is intended to be used for layer 2 client traffic - layer 3 is not recommended (although it is supported).
Also it was a bit short-sighted of them to base that syslog IPSEC on crypto maps because crypto maps are now deprecated:
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-xe-17/bulletin-c25-744830.html