Can't access WLC

[hs08]

Hello,

Anyone know why i can't access to the WLC if i access the WLC from VLAN which the VLAN listed in controller interface?

On the pic we can see i have some VLAN and if i access from that VLAN , the WLC can't be accessed.

[hs08]

Hello,

i'm not asking about AP can't connect to the WLC, but i asking why i can't open WLC management address via workstation if the workstation configured using one of existing VLAN in the controller.

[marce1000]

 - As these are dynamic vlans mapped to WLANS you probably need to enable management via wireless as explained in : https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110000.pdf

 M.

[hs08]

Hello,

management via wireless already enabled, but still can't access and icmp (ping) is reply

[marce1000]

 - What error do you get in the browser (presuming browser access is attempted) ?

 M.

[hs08]

the error is "This site can't be reached"

[marce1000]

                                     >....the error is "This site can't be reached"
  - Make sure you don't have any firewall in between blocking the particular access 2) Check the controller logs when this is attempted 3) Try with google chrome , press F12 , check what you see in the development pane when trying , 

 M.

[Flavio Miranda]

Hi

You can, but you need to enable it. 

config network mgmt-via-dynamic-interface {enable | disable}

[hs08]

Hello,

Already enabled on Management - Mgmt Via Wireless - Enabled Controller Management to be accessible from Wireless Client (ticked)

[Flavio Miranda]

Sorry dont follow you. Interface vlan on cisco wlc is called dynamic interface. 

 I undertood  from your post that you are trying to http or ssh to the wlc on this interfaces and are not able to, correct?

 The commamd I shared allow you to do that. It is not management interface, it is dynamic interface  I am not saying management via wireless,  it is something else. 

 Did you run the commamd? Did you try access after that?

[hs08]

Hello,

i already enable mgmt-via-dynamic-interface but still can't access

[Flavio Miranda]

Then the problem is not on the WLC. 

 If you are trying to reach the WLC from a different network, make sure routing is ok. WLC is not a layer3 device but it is possible to add routes on it. 

 And devices along the way must be checked also. 

 You can provide the topology and device config for further support. 

[marce1000]

@Flavio Miranda >..Then the problem is not on the WLC. 
         Indeed another option to test port 443  (https) reachability is to use an nmap port scan as in : 
                                 % nmap -p443 --reason  WLChostname

 M.

[Rich R]

Can you access the WLC from any other interface?
Do you have a CPU access list applied?

[Dustin Anderson]

What is the DNS for the WLC, when you try to manage it via web, are you doing it by name, or IP. is HTTP to HTTPS redirect enabled, if not make sure the web is doing https as if you are trying IP it usually defaults to http.