cant access WLC in the dmz

[Network Pro]

hi,

I have setup a wlc (mgmt add 172.22.15.254) in the dmz connected to the fierwall with a security level of 30. I can access the wlc mgmt addres from firewall (have a address on the firewall for the same range ex 172.22.15.253). i cant seem to access the wlc mgmt address (cant ping or webbrowse) from the inside network. i have allowed icmp on the firewall.

any help pls ?

[Network Pro]

for some reason i cant seem to https to the wlc even wehn connected locally to the wlc using rj45 . is there any settings on the wlc that need to be enabled to http?

Thanks

[Stephen Rodriguez]

Can you reach the WLC via HTTPS?  HTTPS/SSH are the protocols for access that are enabled by default.

Steve

[Network Pro]

i can ping from the firewall and even from local lan connected to firewall (inside) but not https or http or telnet to wlc.

when i connect the laptop to wlc locally and https then i can get an certificate error page and says to click to continue but cant see the login webpage (comes up with an error saying cert has expired)

[Network Pro]

does it have to do with any certificates? as i cant web browse to the device nor telnet...can only ping the wlc device (going from inside to dmz - higher to lower lelvel so there should be no problems how ever i have created acl on the inside interface also to allow https and icmp and ip - still no joy?) . i have NAT in place but have exempted NAT. only then i was able to ping but still cant web browse

[Stephen Rodriguez]

the cert shoudln't matter.  Does the firewall rule allow 443 to the WLC?

Steve

[Network Pro]

sorry my mistake gave the above address to the dynamic ap interface (disabled) and was trying to access this..changed this to the managment address and can access without any problems...thanks for your time

[fb_webuser]

in a telnet/ssh session issue "config network webmode enable" then save config and try to browse to the WLC

---

Posted by WebUser Taylor Welker