topic wlc 5508 layer2 security in Wireless

wlc 5508 layer2 security

Mohamed ElHoussini — Mon, 05 Jul 2021 08:28:36 GMT

Hi,

How can we enable layer 2 security (DAI,DHCP SNOOPING ...etc) on our wireless network?

Our wlc is 5508

You need to implement those

Rasika Nayanajith — Tue, 02 Sep 2014 19:53:20 GMT

You need to implement those feature in your switch network for wireless vlans if you really required these features.

This will give you an basic understanding of how DHCP snooping works

http://mrncciew.com/2012/12/27/understanding-dhcp-snooping/

I would suggest you to read "configuration guide" of the switch platform you are using to see more details of these two feature.

HTH

Rasika

**** Pls rate all useful responses ****

Hi Manannalage,thanks for

Mohamed ElHoussini — Wed, 03 Sep 2014 07:39:29 GMT

Hi Manannalage,

thanks for your reply.

but the problem is that the connection between WLC and the switch is TRUNK and allowed all wireless vlans ( almost 30 vlans) so any DHCP offer and REQUEST will be allowed as it's the trust interface !

P.s the SW acts like DHCP server.

Just a point.Allo only

Sandeep Choudhary — Wed, 03 Sep 2014 09:37:46 GMT

Just a point.

Check this doc, it may hlep you:http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/emob73dg/emob73/ch4_Secu.html

Allo only required VLANs on WLC connected port on Switch.

Example:

interface FastEthernet0/41
***description Cisco WLC ***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 5,8-10
switchport mode trunk
no shutdown

Regards

Dont forget to rate helpful posts