WLC 2504: https access to dynamic interface over L3

[Jaaazman777]

Hello!

I have a problem with acccessing WLC 2504 dynamic interface with GUI https connection, when I am trying to acccess it from another L3 network.

physic and logic shemes are attached.

the command config network mgmt-via-dynamic-interface enable was already executed at the WLC.

Assume that WLC dynamic interface has ip 192.168.1.10/24 with gw 192.168.1.1 (SW1)

https, ICMP and ssh connection from PC2 (192.168.1.2) to 192.168.1.10 is ok , but from PC1 (192.168.2.2) to 192.168.1.10 only ICMP works and no https and ssh connection.

As far as ICMP works, routing is ok, there is also no firewall between WLC and 192.168.2.0/24 network.

The SW1 has no ACL on its SVI interfaces.

What can cause such kind of problem?

Thank you in advance!

[Christos Stefaneskou]

Hi,

Any ACLs on WLC?

[Jaaazman777]

Hello!

no ACL on the WLC

here is the config of mgmt2 interface

show interface detailed mgmt2

Interface Name................................... mgmt2
MAC Address...................................... b8:38:61:XX:XX:XX
IP Address....................................... 192.168.1.10
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 192.168.1.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. untagged  
Quarantine-vlan.................................. 0
NAS-Identifier................................... wlc1
Active Physical Port............................. 3         
Primary Physical Port............................ 3         
Backup Physical Port............................. Unconfigured
DHCP Proxy Mode.................................. Global
Primary DHCP Server.............................. 192.168.1.1
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
IPv4 ACL......................................... Unconfigured
mDNS Profile Name................................ Unconfigured
AP Manager....................................... No
Guest Interface.................................. No
L2 Multicast..................................... Enabled

[George Stefanick]

What code ? Did you reboot by chance ? Shouldnt be required to but you know how it goes ..

[Jaaazman777]

Hello!

Code is 7.6.100.0

The reboot didn't help

[Vinod Arya]

If you are trying to open WLC from a client who is connected to an AP managed by same WLC's, you may have to enable the Mgmt Via Wireless option to open the Management Via Wireless page from client.

You can enable it via CLI from the following command :

config network mgmt-via-wireless enable

OR do it from GUI from :

Step 1 Choose Management > Mgmt Via Wireless to open the Management Via Wireless page.

Step 2 Select the Enable Controller Management to be accessible from Wireless Clients check box to enable management over wireless for the WLAN or unselect it to disable this feature. The default value is unselected.

Step 3 Click Apply to commit your changes.

Step 4 Click Save Configuration to save your changes.

-Thanks

Vinod

**Encourage Contributors. RATE Them.**

[Jaaazman777]

Hello!

I'm trying to access WLC from the wired network.