Cisco WLC blocking SNMP packets sent from WLAN client to directed broadcast and full broadcast addresses.

[Sam Brynes]

I have an IPv4 ACL applied to a WLAN and put a permit statement from any IP to any IP for UDP packets, but it looks like the WLC is blocking SNMP packets sent to the directed broadcast (LAN broadcast) address (e.g. 192.168.0.255 for 192.168.0.0/24), as well as to the the full broadcast address (255.255.255.255) from WLAN clients.

Does anyone know if this is a bug, or if it is by design? Running 8.5.140 on a 2504.

[Rasika Nayanajith]

This is the default behavior. (Under Controller -> General -> Broadcast Forwarding -> disabled)

If you enable this all these broadcast forwading will consume available air time & your wireless performance will be seriously degraded. So enable it with care

HTH

Rasika

*** Pls rate all useful responses ***

[Sam Brynes]

Nice, looks like that did the job nicely.

When broadcast forwarding is turned off, does the AP answer ARP requests using its own database and spoof the ARP reply to make it look like it is coming from the machine that would have answered the ARP request?

Or does the AP actually send ARP broadcast frames over the air?