Enterprise and Guest SSID on Foreign WLC

[ANKUSH_SINGLA]

Hi All,

Currently we are using 9800 as Foreign WLC for enterprise network and Anchor WLC (Guest WiFi) in DMZ behind Meraki firewall

we are trying to eliminate Anchor WLC and move all functionality to Foreign WLC with DHCP scope on Meraki firewall.

pls help to share any doc for references.

Regards

[Flavio Miranda]

@ANKUSH_SINGLA 

 I dont believe there will be a doc with step by step. Not even close.

 What I would do, however, is create a brand new SSID for Guest on the foreign WLC and leave the Anchor untouch until you can get the new Guest SSID working. 

  You need to consider, besides the DHCP server, the authentication. If the WLC use external web portal, you need to replicate this to the foreign WLC which means connectivity, perhaps firewall rules, routing, etc.

  When you get everything ready, you can schedule a MW and disconnect the Anchor, which is a pretty simple step, by the way. 

[Scott Fella · Accepted solution]

Just to add, where is your DMZ and how are you going to get traffic from the controller to that subnet where the Meraki MX is configured for DHCP?  If everything is local to a site, that seems like it would be easy, but if your DMZ is at another location, its not like you want to span that network where the foreign controller is.  If you are in the later position, you might need to build a GRE tunnel to push traffic to the DMZ so you can utilize that subnet.

[ANKUSH_SINGLA]

Hello , DMZ in local only and its Central switching setup solution. 

[Scott Fella]

If everything is local to a site, you can maybe just patch the DMZ vlan to the core switch.  By this, I mean you might have a DMZ vlan of 999 but that is not in any other switches, you can just setup a port with vlan 999 on a switch and just patch that over to the DMZ switch.  I have seen customer do that to get things done quick without having to do much work.  You would just need to ensure all your settings in the anchor controller is moved over to the foreign controller.  You can always do testing with a test guest SSID and just make sure things are working as expected so that you know what you need to change on the guest SSID to move that into production after the change.