Client with same SSID on different AP cannot ping each other in FlexConnect mode

[UnyChiu60866]

I have two AP 1802 connect to the 3504 controller.

In FlexConnect mode, one client connect to AP1 and the other connect to AP2 , with the same SSID and VLAN.

Both client can get on the internet, but they cannot ping each other.

If clients are on the same AP, they can ping each other.

Is there any solution can solve this problem?

[marce1000]

 - Check if this thread can help you :

       https://community.cisco.com/t5/wireless-security-and-network/wlc-2500-allowing-clients-to-communicate-to-each-other/td-p/2519050

 M.

[UnyChiu60866]

I have checked that P2P blocking action is disabled ,
and clients firewall are also disabled

[UnyChiu60866]

If clients are on the same AP, they can ping each other

[Rich R]

If flexonnect local switching (it can also be central switching but you did not specify) then check whether you have private vlan configured on the switch ports or protected ports because that has the same effect as peer to peer blocking.

[UnyChiu60866]

Thanks for answering.
There is no private vlan configured on the switch.