Regarding Same VLAN 100 for Users and Same VLAN 100 for Access Point.

[jain.manish94]

Hello Team, 

How are you, 

I hope all are doing great. 

Here I want to know that I have VLan 100 (192.168.100.0/24). 

My Question here is , can we give IP to users and to Access Point, Wireless Lan Controller from same VLAN 100. 

If not what was the reason if yes this is secure. ?

Please help here. 

[balaji.bandi]

If you do not have any Manangment segment network, you can deploy same VLAN 100, i do not see any issue here.

Make sure you enable some ACL to access only respected device to access WLC manamgnet access (on switch or WLC to protect).

[jain.manish94]

ok so there are below

 192.168.1.5 --- WLC IP address. 

192.168.1.50 -- AP

192.168.1.51 -- AP 

192.168.1.52 --- AP

192.168.1.100 -- 192.168.1.150 ---- users. 

what ACL on switch or where i need to create so users can not access WLC and AP. 

[balaji.bandi]

Since this is RF1918 address, you have plenty available, suggest to have Wireless users IP address different than LAN address space.

[Leo Laohoo]

It is not just "secure" but for ease of management.  

Sometimes there are stuff that can be done, like DHCP options, when the APs are in their own little "corner".