Hi! I have a Cisco C1111-8PW router, which has a built-in WLC and a built-in Wireless AP. Currently, they are configured for FlexConnect, but I am having some issues setting up some VLANs on the WLC and the APs and using the VLANs, so I figured it's time to try ditching the FlexConnect and using Local Mode. I cannot seem to get the built-in AP to switch modes though.
This is my current setup:
On the Router
-------------
!
interface GigabitEthernet0/0/1
description Gigabit Ethernet WAN port
mac-address <MAC ADDRESS SWITCHED FOR ONT>
ip address <STATIC PUBLIC IP> 255.255.255.128
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip nbar protocol-discovery
ip verify unicast source reachable-via rx allow-default
ip access-group NO_OUTFACING_SERVICES in
speed 1000
no negotiation auto
vlan-range dot1q 1 40
!
end
!
interface Wlan-GigabitEthernet0/1/8
switchport trunk native vlan 10
switchport trunk allowed vlan 10,20,40
switchport mode trunk
end
interface Vlan1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip access-group BLOCK_INTERVLAN_ROUTING in
shutdown
!
interface Vlan10
description VLAN interface (Layer 3) with 254 Usable Hosts (10.0.0.1 - 10.0.0.254), network address 10.0.0.0
ip address 10.0.0.1 255.255.255.0
ip broadcast-address 10.0.0.255
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
!
interface Vlan20
description VLAN interface (Layer 3) with 254 Usable Hosts (10.0.20.1 - 10.0.20.254), network address 10.0.20.0
ip address 10.0.20.1 255.255.255.0
ip broadcast-address 10.0.20.255
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
!
interface Vlan40
description Guest VLAN interface (Layer 3) with 254 Usable Hosts (10.0.40.1 - 10.0.40.254), network address 10.0.40.0
ip address 10.0.40.1 255.255.255.0
ip broadcast-address 10.0.40.255
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
!
ip access-list standard NAT_TRANSLATIONS
permit 10.0.0.0 0.0.0.255
permit 10.0.40.0 0.0.0.255
permit 10.0.20.0 0.0.0.255
!
ip access-list extended BLOCK_INTERVLAN_ROUTING
deny ip 10.0.0.0 0.0.0.255 10.0.40.0 0.0.0.255
deny icmp 10.0.0.0 0.0.0.255 10.0.40.0 0.0.0.255
permit ip any any
ip access-list extended NO_OUTFACING_SERVICES
deny tcp any any eq telnet
deny tcp any any eq 22
deny tcp any any eq www
deny tcp any any eq 443
deny tcp any any eq finger
deny tcp any any eq cmd
permit ip any any
WLC CONFIG:
-----------
Number of Interfaces.......................... 3
Interface Name Port Vlan Id IP Address Type Ap Mgr Guest
-------------------------------- ---- -------- --------------- ------- ------ -----
management 1 10 10.0.0.2 Static Yes No
virtual N/A N/A 192.0.2.1 Static No No
vlan_employees 1 20 10.0.20.2 Dynamic No No
WLC BOOTUP MSG:
---------------
[*01/31/2019 12:22:26.6799] ethernet_port wired0, ip 10.0.20.3, netmask 255.255.255.0, gw 10.0.20.1, mtu 1500, bcast 10.0.20.255, dns1 1.0.0.1, is_static true, vid 0, static_ip_failover false, dhcp_vlan_failover false
[*01/31/2019 12:22:26.6899]
[*01/31/2019 12:22:26.6899] Configured VLAN Tag 20, failover_enabled 0
<CUT>
[*01/31/2019 12:22:29.5099] Failed to load flex AP config from file. Default config will be used.
[*01/31/2019 12:22:29.5599] Socket Valid Element wcp/wcp_db Handler set_vlan_name_map Data Length 10
[*01/31/2019 12:22:30.7799] ethernet_port wired0, ip 10.0.20.56, netmask 255.255.255.0, gw 10.0.20.1, mtu 1500, bcast 10.0.20.255, dns1 1.1.1.1, dns2 1.0.0.1, vid 20, static_ip_failover true, dhcp_vlan_failover false
[*01/31/2019 12:22:39.6099] DOT11_CFG[0] Radio Mode is changed from FlexConnect to FlexConnect
[*01/31/2019 12:22:39.6199] DOT11_CFG[1] Radio Mode is changed from FlexConnect to FlexConnect
[*01/31/2019 12:22:39.7199] AP IPv4 Address updated from 0.0.0.0 to 10.0.20.3
[*01/31/2019 12:22:39.7299] send CAPWAP ctrl msg to the socket: Socket operation on non-socket
[*01/31/2019 12:22:39.7299] send_msg_to_capwap_sm: Capwap SM restart message send failed for message: 9
[*01/31/2019 12:22:44.9899] AP IPv4 Address updated from 10.0.20.3 to 10.0.20.56
[*01/31/2019 12:22:44.9999] send CAPWAP ctrl msg to the socket: Socket operation on non-socket
[*01/31/2019 12:22:44.9999] send_msg_to_capwap_sm: Capwap SM restart message send failed for message: 9
[*01/31/2019 12:25:36.9999] chatter: tohost_virtual :: ToHost: device 'virtual' went down
[*01/31/2019 12:25:37.0399] chatter: tohost_vlan0 :: ToHost: device 'vlan0' went down
[*01/31/2019 12:25:37.0999] chatter: tohost_vlan1 :: ToHost: device 'vlan1' went down
<CUT>
Starting the Switchdriver...
Originally, I wanted it so the corporation stuff was on the 10.0.0.0 / 24 network, the guests were on a different network, like 10.0.40.0 / 24. I couldn't get that working right though, so I tried putting the WLC on the 10.0.0.0 / 24 network, I was going to have the APs on the 10.0.20.0 / 24 network, and then a WLAN called MyBusiness Guest on 10.0.40.0 / 24 network.
To try and put the AP in Local mode, I typed this:
(WLC0) >show ap join stats summary all
Number of APs.............................................. 1
Base Mac AP EthernetMac AP Name IP Address Status
00:bf:77:e0:00:c0 00:a3:8e:95:ac:30 WAP0 10.0.20.56 Joined
(WLC0) >config macfilter add 00:a3:8e:95:ac:30 0 vlan_employees "Built-in WAP" 10.0.20.3
(WLC0)> config ap mode local submode none WAP0
I restarted, but as you can see from the WLC0's bootup messages that are displayed on the screen, the AP is still in the FlexConnect mode. Any ideas what I'm doing wrong in my attempt to stop using FlexConnect and switching everything over to Local mode? Any does anyone see anything wrong with the VLANs or know why from the WLC, I cannot reach the router or other various VLANs? I assigned the vlan_employees interface to the WLAN ID 1 (currently, the only wireless SSID). Thanks!
