Mobility Anchor DMZ

[craiglebutt]

Hi

Anchor WLC 5508 - 8.5.134.0

Foreign WLC 8500 - 8.0.152.0 

I'm not new to this, been creating Mobility Anchors for years, but I've not seen this issue before, specially when was working.

I've got 1 Anchor on DMZ behind a Palo Alto FW.

3 Foreign WLC on internal network.  

Static route to Anchor WLC in OSPF

All Foreign can Ping Anchor, also eping and mping.

But today 1 of them doesn't mping the anchor.

Route is still in ospf, traceroute from all distributions all go to same place, have set the rules on the firewall to all any connection between anchor and foreign.

Have removed and recreated Mobility on Anchor - Foreign WLC with issue on both WLC.

Captures on FW show UDP 16666 traffic both ways, but also getting a Malformed Packet.

Any ideas?

cheers

[Jurgens L]

If it worked before and it was only one of the three foreign WLC’s, you will have to consider rebooting the foreign wlc, since you already tried to remove and recreate the mobility tunnels to the WLC.