9800-40 WLC map VLAN interface to WLAN SSID

[ChevyMannie06922]

We just got a new 9800-40 in and I can't figure out where to go to map an interface to an SSID like we do on the previous controllers. I was trying to follow this document, but the commands don't work.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/wlans.html client vlan isn't a valid command under wlan configuration for me. I tried deleting the wlan and recreating it and got the same thing.

[Scott Fella]

IOS-XE controllers are different from AireOS. You need to go the the policy and tags and in order to build your controller. Go to wireless and the advanced and go through the workflow.

[Scott Fella]

Go to Configuration > Tags & Profiles > WLANs or Advanced Wireless Setup (top-right corner)

[Arshad Safrulla]

Unlike AireOS controllers, in 9800 it is not compulsory that you need an interface mapped to a WLAN. You can simply create a L2 VLAn like you do in a switch and tag it to the SSID using policy tag. As Scott suggested go through the workflow it will make your life wasy. If you going to do it in CLI you may follow below.

vlan X
name XXX

!

wireless profile policy YYY
vlan X
no shutdown

!

wlan XXX 1 XXX
band-select
load-balance
security wpa psk set-key ascii 0 XXX@1234
no shutdown

!

wireless tag policy ZZZ

wlan XXX policy YYY

!

Remember once these configured assign the correct tags to the AP's

[Rasika Nayanajith]

In IOS-XE, you do not want to define dynamic interface (or SVI) on your controller. In simple terms, it only has one SVI which is controller management interface IP. For all other SSID mapped interfaces,  you simply has just L2 vlan define on the controller and trunk them to switchport which connect to switch.

Below video series from Cisco should help you to understand 9800 config better

1. Cisco Catalyst 9800 - 101 Series Getting Started Episode-1

2. Cisco Catalyst 9800 -101 Series Basic WLAN Setup Episode-2

HTH

Rasika

*** Pls rate all useful responses ***

[awatson20]

In AireOS configuration, for Wlans that were anchored to an anchor controller we would create a bogus vlan/IP address on the AireOS controller and that would get anchored to the foreign controller where clients would receive their IP address.  On the IOS-XE controllers, do you still need to specify a vlan for wlans that are anchored like this?  Or do you just use the management vlan for the controller?

[JPavonM]

On IOS-XE you define a Policy Profile and map that to a VLAN name or VLAN Group name, and then you assign that Policy Profile to a WLAN profile under an Policy Tag. Then you create a Flex Profile with the VLAN Name to ID mapping and assign that to a Site Tag. Finally you assign those Tags to the corresponding APs.

wireless profile policy CORP
central association
central dhcp
central switching
vlan corpnetvlan01
!
wireless tag policy CORP-local
wlan CORP_wpa2 policy CORP
!
wireless profile flex OFFICE-FLEX
native-vlan-id 300
vlan-name corpnetvlan01
vlan-id 100
!
wireless tag site OFFICE-SITE
flex-profile OFFICE-FLEX
local-site
!
ap aaaa.bbbb.1234
policy-tag CORP-local
site-tag OFFICE-SITE