FlexConnect client with default gateway

[kumar.krishna1]

Hello team,

We have a WLC placed in DC. And many remote sites connecting our DC via WAN links. All our remote site users are using one SSID. We planned to change that SSID/WLAN into FlexConnect local switching and all APs in remote sites to FlexConnect mode. Central DHCP. Default gateway for this wireless client vlan is configured in firewall that too in DC.

Is it possible to switch the traffic locally at remote sites with this single SSID after enabling all the releven FlexConnect settings at WLAN and AP end? 

[Alex Pfeil]

Yes, it is possible. The clients would get DHCP from the locally configure DHCP server. If that server is actually the central DHCP server, it would be fine. The wireless access points just have to be set to FlexConnect and the proper VLAN has to be set in the AP on the WLAN controller.

Please mark helpful posts.

[kumar.krishna1]

Thanks for the reply Alex. In FlexConect setup, kindly explain how the packets from a wifi client destined to same location switching happen locally when the default gateway for the client is in central? Can you explain packet level flow?

I am assuming if a packet reached FlexConnect AP, AP will tag the packet with VLAN id assigned for that SSID/WLAN, then AP instead of sending that packet into CAPWAP tunnel, it switch the packet locally. where the ip arp broadcast happens? wll it use its default gateway ip even if the destination is local? we enabled NAT/PAT for that WLAN.

[Alex Pfeil]

The default gateway cannot be central. The default gateway has to be the same as the VLAN that you are going to place them on.
The flow is:
Client —> AP —> switch —> Router

If you want the traffic to flow back to the WLAN controller, use local mode on the AP. The traffic then gets tunneled back to the WLAN controller and uses DHCP on the WLAN controller.
You are correct about AP switching locally.
What you have to do is use the same DHCP server you are using at each site location. The clients at each site will use the same DHCP server as wired clients at that site.

Please mark helpful posts.