FlexConnect (H-REAP) and Auto-Anchor functionality - WLC 5508
We have an H-REAP (FlexConnect) requirement for branch offices and also there is the requirement for guest access at the same time. Is it true that those features (FlexConnect and Auto-Anchor) should work together. Please refer to the following Network Diagram:-
There is a FlexConnect AP at one branch office. The traffic from internal users (SSID "Internal") should be switches locally at the LAP (Lightweight Access Point). At the same time the guest SSID (SSID "Guest") should be tunneled back via CAPWAP to the controller to which the LAP is associated ("Central Controller"). The guest traffic should not emerge (switched) at the "Central Controller", instead it should be tunneled to an anchor controller in a DMZ via an "Ethernet Over IP tunnel" (Auto-Anchor functionality).
Does this work (FlexConnect in conjunction with Auto-Anchor functionality)?
If this works, where's the web portal for guest authentication hosted (if using the internal web auth on WLC)? On the "central controller" or the Anchor controller? (I guess at the Anchor Controller in the DMZ, right?)
Is it possible to leave the guest SSID "open" with no webauth and still using the Anchor Controller? This would be needed if I have an external web authentication service, which would be hosted by a provider.
The above statement is in fact correct.
Your guest traffic will be sent back to the flexconnect wlc or wlc and then you would anchor that SSID to the dmz SSID. The anchor wlc in the dmz will host the webauth, passthrough splash page. This would be the same if you just wanted open auth. Anchoring works either way. Make sure these ports are open between the anchor and remote wireless LAN controller: UDP 16666 or IP 97
The anchor controller can be licensed with the smallest AP count, right? So a 5508 with 12 AP support should do the job. There are no APs associated at the anchor controller
HiI am trying to migrate from Cisco 5508 to new cisco 9800 WLC and new 9120 APs. The goal is to gradually migrate to new APs network. Both old and new controller will be up for few days . After full deployment old WLc will be decommissioned. &n...
Hello,We have wlc c9800 and ap c9130 setup. Both devices look working well, but we notice the signal from the APs are weak compared with other APs(controlled from other classic wlc). The APs have about -70 to -65dBm even if trying very close distance or d...
Hello,i have the following problem: on a 5520 WLC i can execute the following command from the CLIshow netuser summary is there a way to save the output (say output.txt) of this command to a file on the 5520 filesystem and thenuse transfer uploa...
Hello, I have basic knowledge of FlexConnect and when it's used - branch offices and remote sites. Recently I've been told by some auditors that we should configure FlexConnect in our local network to increase wireless speed and quality. I've ne...
We are excited to announce the first refresh of 8.10 MR6 EFT Program for PRODUCTION deployments.
This release is the first qualified EFT/Beta Image and it is BU supported.
After a successful 8.10MR5 CCO, this program is focus...