topic Block PING to Controller Dynamic IP Address in Wireless

Block PING to Controller Dynamic IP Address

rzvbsq — Sun, 04 Jul 2021 19:22:41 GMT

Dear Sir/Madam,

I have a problem that the built-in ACL in the Controller 4136 does not work on dynamic interface. I can't apply a ACL to block PING to the dynamic IP address successfully. However, I can use the ACL to block other IP addresses which are in the same subnet on the network.

I need to block Ping to the dynamic interface because I will have public Internet user to use a broadcast SSID attached to this dynamic interface with true IP. Thanks.

Re: Block PING to Controller Dynamic IP Address

wdrootz — Fri, 23 Jun 2006 20:45:45 GMT

Apply some ACL's on the controllers default gateway (next hop router) specifying only your allowed subnets.you cannot ping a dynamic interface mapped to an SSID

Re: Block PING to Controller Dynamic IP Address

rzvbsq — Fri, 14 Jul 2006 05:00:34 GMT

Thank for information.

My case is a pure layer 2 VLAN which is no default gateway or router. The Cisco Controller release note mentioned not support PING to dynamic interface, however, I can continuously ping it from Radio side.