AireOS two AP management interfaces on two ports

[mareksumny]

Hello,

Is it possible to have on WLC 5520 (AireOS) 2 different AP management interfaces on 2 different ports? 

One port will be dedicated as an AP termination for DMZ APs first one AP management interface and the second interface assigned to the second port will be dedicated as an AP management interface for APs in LAN. for WLC management I can use interface on LAN interface.

Both of the interfaces should be routed so APs will be sitting on VLAN from a different subnet.

Thanks for the answer

regards,

Marek

[Rasika Nayanajith]

You should be able to do it. You create a dynamic interface and enable AP-management on that interface.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/ports_and_interfaces.html#reference_5969E9C66E064C7A98E6F2AD7F695E8B 

HTH

Rasika

[mareksumny]

Yes I did not find any restriction on deployment guide, but since AireOS does not support any routing and there is only one ip default gateway I think it will not work, because on WLC there are 2 ports connected to 2 different networks and WLC has no idea how to reach APs on DMZ, to reach APs on lan it will use default GW, but correct me if I am wrong .  And I am talking about APs sitting on different vlan not directly connected.

Thanks

Marek

[Scott Fella · Accepted solution]

This can be done like Rasika mentioned. What you need to know is that in order for this to work, LAG must be disabled. Then you have one or two ports connected to your internal and the other (up to two ports) directly connected to the dmz vlan. You can have up to two ports as not using lag allows you to define a primary and a secondary. On your wlc ports connected to the dmz, you can connect that to a switch, but define an isolated vlan and then have that pushed to the dmz. So as long as the wlc has access to that dmz vlan and the ports are open, the AP’s will be able to join.