WLC unable to ping DNAC virtual IP

[M Talha]

Hi Community Members,

I am facing an issue where I am unable to ping DNAC virtual IP from WLC. Whereas, I am able to ping enterprise IP of DNAC from WLC.

DNAC Version 2.3.5.5-70026

[estetson]

Is your Cisco DNA Center a 1 or 3-node cluster? If it’s 3, make sure you can ping the physical enterprise IP of each node (the VIP could be on any of the three nodes).

also, from the Cisco DNA Center CLI can you ping the WLC? (Each of the three nodes again, if it’s a 3-node cluster).

Try a trace route from the WLC to the Cisco DNA Center, one for the physical IP and one for the virtual IP, see if it’s dropped somewhere.

And from the Cisco DNA Center CLI you can do an “ip a | grep en” to confirm the VIP is up

[M Talha]

Thank you estetson for your response. I actually found out that firewall was blocking the ping other way around. Opening the ICMP resolves the issue.