9800 WLC - Clients can’t be reached from inside (internal ) network

[pgill.uwo@gmail.com]

My wireless clients can reach internet but can’t be reached from internal network. Routing is in place as wlc SVI in same subnet can be reached but clients can’t be reached internally even though they are getting valid DHCP ip address/gateway/mask. It’s confusing, looking for help, suggestions. 

setup:

client —> wlc ( foreign ) —-> wlc (anchor ) —->Core switch. 

[MrButton]

draw us a topology and describe the subnets.  Do you have any ACLs in the WLC?  some people place ACLs blocking traffic from certain subnets. 

[ammahend]

Might be an expected behavior, Is your anchor in DMZ ?