topic Guest Access Certificates with Multiple Controllers in Wireless

Guest Access Certificates with Multiple Controllers

Kayle Miller — Sun, 04 Jul 2021 01:37:54 GMT

So I have an interesting scenario to run by the group, I haven't done this but was wondering if anyone else had tried it.

Scenario: is 5 WLC's running 6.0.188.0, One guest SSID, and One H-REAP guest SSID.

WLC#1: SNMP Name is WLC01, Virtual Interface DNS Name is GWLC.somewhere.com, Virtual Interface IP is 1.1.1.1

WLC#2: SNMP Name is WLC02, Virtual Interface DNS Name is GWLC.somewhere.com, Virtual Interface IP is 1.1.1.1

WLC#3: SNMP Name is WLC03, Virtual Interface DNS Name is GWLC.somewhere.com, Virtual Interface IP is 1.1.1.1

WLC#4: SNMP Name is WLC04, Virtual Interface DNS Name is GWLC.somewhere.com, Virtual Interface IP is 1.1.1.1

WLC#5: SNMP Name is WLCDMZ, Virtual Interface DNS Name is GWLC.somewhere.com, Virtual Interface IP is 1.1.1.1

So part 1 of my question is does the above configuration cause any issues with the controllers?

Part 2 of my question is can you request a single SSL certificate for the hostname GWLC.somewhere.com and install it on all the controllers?

The reason for having the certificate on all the controllers is because of the H-REAP Locally Switched SSID.

Anyone have experience with this, input, thoughts?

Thanks.

dancampb — Thu, 18 Mar 2010 15:48:32 GMT

Yes, when you setup the controllers like that you can use the same cert on every controller.

Kayle Miller — Thu, 18 Mar 2010 15:51:50 GMT

Dan,

Thanks for the response, have you done this configuration before? Just curious.

Thanks,

Kayle

dancampb — Thu, 18 Mar 2010 15:54:33 GMT

I have seen TAC cases come in on this exact setup.

weterry — Sun, 21 Mar 2010 04:57:22 GMT

I too have seen numerous cases on this.

Bottom line is that as long as your HREAP Guests can resolve GWLC.somewhere.com through DNS (as 1.1.1.1), then this should work.