Universal WGBs are designed for a single wired client to be provided wireless access so your AP picking up a second IP isn't supported by Cisco. For some reason the setup does allow that static access however.. Thanks, Ric ... View more

Enable igmp snooping and the WLC will forward multicast over L2 without any cross-subnet bonjour gateway services.   Alternatively, you can enable broadcast forwarding but that will forward everything between wired/wireless on L2 and will generally create more traffic / more overhead for your wireless network.   Cheers, Ric ... View more

Just get the 1570 which can do Flex+Bridge on code 8.5 and solves your problem :-). Also it looks like code 8.8 may support Flex+Bridge on 1560 but then you would need to upgrade both APs at the very least (and any other you have running) To answer your question - You won't be able to host a Flex/Local switch WLAN off the MAP and it won't then drop 'locally' off the RAP - I imagine it would just break completely but it would need testing. TAC certainly wouldn't support it in the event of an issue. Ric ... View more

1141 is pretty old..what IOS are you running? Can you attach/paste a copy of the following: - "show version" from the AP - Your AP config (show run) with any sensitive info removed - The switch configuration (show run) with any sensitive info removed - A screenshot (or simply confirmation) of your DHCP Server config for that VLAN Can you also check the client is being given a /24 subnet with the right gateway from the server? Finally, you said it was working previously... so absolutely nothing has changed since when it was working and now it is broken? Not even an AP restart/DHCP change? Cheers, Ric ... View more

Anything beginning "CON-" is a smartnet contract and I'm pretty sure that isn't compulsory for these scenarios... sounds like shenanigans to me :P ... View more

If you are deploying ME then all data will be switched locally at the AP, which is the recommended deployment for a vWLC or 9800-CL as well. Either way, 1.5 Gbps should be more than sufficient for 30 APs' worth of clients if you do deploy with central switching. Cheers, Ric ... View more

Hi Shabeeb, You can use centralized switching with Flex and 'bypass' the Flex limitation but it does mean all traffic goes through your vWLC which has a throughput limitation. In a branch this is generally fine but depends on traffic type / applications etc. Maximum ACLs supported/allowed on a WLC is 64 with 64 lines per ACL. Ric ... View more

Can you console/login to an AP to see what the debug says? If so, please attach here. On the CLI please issue a "show ap join stats summary all" and then a "show ap join stats detail <mac>" for one of the APs not joining as that has more detailed information. Check your licenses are applied under Management->Software Activation->Licenses Check NTP is synched or WLC has the correct time set Check your country code is correct under Wireless->Country Cheers, Ric ... View more

Can you consolidate the ACLs at all so two or more AD Groups ultimately use the same ACL or do they all have to be different?   1) As you said local mode will increase WAN traffic so I don't recommend that. 2) You can deploy a virtual WLC to achieve this without extra cost if you have a server at each branch. Managing them isn't so hard with something like Cisco Prime where you can create templates and push configurations on bulk.   To answer your ACL Q.. yes you have a couple of choices with CPI. You can create the ACLs on one WLC then use CPI to 'discover' that and push to other WLCs (with a config template) or alternatively just create   Personally I would create those ACLs on one WLC, then perform a grep include acl "show run-config commands" on the CLI to grab the CLI config for all those ACLs. With that I would create a CLI template in CPI and deploy/push to all my new local WLCs.   Thanks, Ric ... View more

That is pretty odd:   What height are the APs at?   Do you know what power level they are at right now? (Wireless->802.11a or 802.11b/g to get radio status of APs) - Power level is indicated on a scale of 1 - # (usually 1-8 but depends on AP). 1 is highest. If RRM is enabled all the 802.11b/g radios should generally be set to quite low (7 or 8) whereas 802.11a should see them as higher like 1-3 range unless the office is experiencing interference. You can change a single AP's power level on that page (blue arrow on right of screen) to test but I recommend configuring RRM globally if you want to change all radios for a band.   Is it affecting all clients or just particular types - e.g. can you stand in the same spot with your laptop and see full strength?   There's a few scenarios off the bat I can think of:   - Your AP(s) in those locations don't actually have their radios enabled so they are picking up signal from a neighbouring AP - Your AP(s) are running on a channel your affected clients don't support e.g. UNII-2 or UNII-2E on 5 GHz - Your clients are somehow in the dead spot of the 'donut' style RF shape from the omni APs - this is unlikely due to multipath - Your APs are mounted too high (recommendation is 3M)   Cheers, Ric   ... View more

Hi, The following is my opinion, I highly reocmmend asking your partner/var these same questions to get the right deal and purchase the right options. Why 1815 out of interest? If going through a refresh, the Catalyst 9k series APs might future proof more with the 802.11ax capabilities. 1) The 9800s require Smart Licensing so you'll probably need a DNA type license to use with them. The deployment guide specifies: Access points support the following AIR licensing levels: AIR Network Essential (AIR-NE) AIR Network Advantage (AIR-NA) AIR DNA Essential (AIR-DNA-E) AIR DNA Advantage (AIR-DNA-A) https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-11/config-guide/b_wl_16_11_cg/smart-licensing.html Cisco traditionally doesn't allow straight migration between WLC model/series types although depends how your legacy licenses are deployed. Either way, smart licensing is probably the way to go. 2) Unlike Meraki, the APs / WLCs etc will continue to operate once the licenses expire but in various limited capacities. For example, new APs may be unable to join the WLC as well as APs that have restarted; DNA features may not work if you are using it, and warnings will be presented regarding the expiration. Right now if Cisco Prime moves to an unlicensed state for example, there is a grace period before it becomes unusable. 3) The virtual 9800s support AP SSO when deployed in private cloud (your own infra). Therefore on that logic, you should be able to deploy two 9800s right now on the one license as the secondary will inherit the primary's licenses on failure. Should you find you need a license for that second 9800 virtual, you can always buy another one. Again - Just my interpretation! Cheers, Ric ... View more