Cant Access WLC 5520 GUI with HTTPS from specific networks

[Enabler]

Hi all,

there is a problem that we try to solve since some days.

On an WLC 5520 with a management IP-address say 10.0.0.1 I can access the GUI from network A (172.16.0.0/24) but not from network B (10.3.0.0/24).

From both networks A and B I can ping the controller but only acces via HTTPS/HTTP from network A.

Anything between like firewalls are allowing the traffic and even without a firewall in between its not working. So I think the problem is the controller.

Im not that familiar with Cisco WLC but could someone give me an hint, what could be wrong?

There is no ACL configured. No CPU ACL enabled and no network routes.

Kind regards!

[Dustin Anderson]

Does the controller have an interface on the 10.3.0.0 network? Most controllers by default don't allow management via wireless network so will not respond to web connections on those interfaces. Only thing I can really see if ping works.

[Enabler]

Hi @Dustin Anderson ,

yes, there is an interface for network 10.3.0.0, but not for network A. Is there a difference if I access the controller from LAN or WLAN form network B? May I activate "allow management via wireless" without impact?

Kind regards!

[Enabler]

EDIT: "Enable Controller Management to be accessible from Wireless Clients" is enabled.

[Dustin Anderson]

may be hitting an asynchronous route where your device sends to the router to talk to the mgmt interface, but the WLC is trying to talk back through the wireless interface on the same vlan. Try to access mgmt via the IP on that wireless interface.