Significance of Virtual Interface IP

[royce.varughese]

Trying to understand whats significance of the Virtual IP interface in WLC. The default ip set is 1.1.1.1 and we do have a public dns which points to that ip now. Does this mean redirections for login will fail because before login itself system will try to reach this portal and access fails?

I have instances where some systems it works fine but for android phones it fails and redirects to connectivitycheck.gstatic.com

Any clue why this behaviour. I am testing the newly implemented Web Auth for guest login.

[Haydn Andrews]

Hi Royce

The IP of 1.1.1.1 is now a registered public IP address as 1.0.0.0/8 have been assigned to the public space, This causes re-direct issues for Web Authentication WLANs.

Details around the Virtual IP using 1.1.1.1

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/213535-wlc-virtual-ip-address-1-1-1-1.html

From this you should configure the Virtual IP to a non-routable IP address for the virtual interface, ideally not overlapping with the network infrastructure addresses. 

WLC Best Practices and the Virtual Interface here:

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-6/b_Cisco_Wireless_LAN_Controller_Configuration_Best_Practices.html#concept_DF234EBAE04D4AE0AED9C18DD4ED0234

Further information on the virtual interface here:

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/ports_and_interfaces.html