Cant access WLC Dynamic interface over Layer 3 wired

[ittechk4u1]

Hello Experts,

I have a WLC which is configured as

Mgmt Interface: 10.99.80.1/24 , GW: 10.99.80.254(firewall)

Dynamic interface: 10.99.21.0/24 , gw:10.99.92.254(switch)

layout:

WLC------Trunk(vlan80,92)-----SW-----trunk------FW

switch has layer 3 interface:

vlan 21: 10.99.21.254/24

vlan 92: 10.99.92.254/24

I wanted to access the WLC from vlan 21(LAN) to dynamic interface (10.99.92.1) over https but its not working.

any thoughts?

Thanks in advance.

[RichardAtkin]

Have you enabled management via dynamic interfaces?

config network mgmt-via-dynamic-interface {enable | disable}

[ittechk4u1]

yes i did.

I enabled both "mgmt over wireless" and "mgmt over dynamic interface "

Thanks

[RichardAtkin]

Ok. So we need to establish if this is a WLC problem or a network one. I'm tempted to say network related as this is a well establishd feature, but let's not jump the gun...

If you physicaly plug a Client directly in to the Dynamic Interface's VLAN on the switch immediately adjacent to the WLC, can it access the WLC's dynamic interface in that same VLAN? (ie, pure L2, no FWs and as few switches as possible in the way)

[ittechk4u1]

yes in same VLAN (same as dynamic interface) I can access to WLC.

Thanks

[RichardAtkin]

Ok, so assuming you have set the Default Gateway correctly on that Dynamic Interface on the WLC, then it’s a network / ACL / FW problem.

Look at the Routing and security devices you have in place at every physical/logical hop that takes you further from the switch you successfully tested from until you find out where the issue is.