FlexConnect or Local

[Joy3]

Hallo,

I have an idea here but not sure how feasible it is. Perhaps someone can shed some light.

I have the option of using an autonomous AP to connect to WIFI for some locations. However, I would like to use a LWAP controlled by WLC such that the APs can be plugged-and-played from wherever (even at home), outside the LAN network and they get the SSIDs of the LWAP that are connected to LAN. Could this be possible? I had the idea to use NAT for connection to the WLC through our ISP. Is this a a good idea? I would appreciate your help. Thanks.

[IP_Cartel]

Hi -

This bring me back during a time when I was interconnecting a campus network.  I had to use FlexConnect on networks that were not on the same subnet of the HA Wireless Controllers.

FlexConnect the traffic does not go back to the controllers.  Cisco FC is used to switch the traffic locally.  You will use a Local mode when the AP is inside the same subnetwork as the WLC.  Routed network to the WLC you will need FlexConnect.

For example:

WLC 10.10.99.10/24

APs: 10.10.99.50-253/24 <--- Local Mode

AP's 10.20.99.1-253/24 FlexConnect

Routable networks

Under the 10.20.0.0/16 Network you will probably have a DHCP OPT 43 pointing to the wireless controller that resides on 10.10.0.0/16. 

here is further information: https://askanydifference.com/difference-between-cisco-flexconnect-and-local-with-table/ 

[Rasika Nayanajith · Accepted solution]

This is the use case of OEAP (Office Extended Access Points). Refer below

https://www.cisco.com/c/dam/en/us/td/docs/wireless/controller/9800/17-3/deployment-guide/remote-workforce-solution-wireless.pdf 

HTH
Rasika
*** Pls rate all useful responses ***

[Joy3]

@IP_Cartel Thanks so much for the explanation (sorry I edited my question immediately after but you answered my question)

@Rasika Nayanajith OEAP is exactly what I was looking for. Thanks so much for the suggestion

[Joy3]

@Rasika Nayanajith is there a similar document for WLC 5520? I can't seem to find any

[Rich R]

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/215928-flexconnect-oeap-with-split-tunneling-co.html
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/configuring_officeextend_access_points.html

Note OEAP is specifically for the secure homeworker scenario but you don't need to use OEAP just to provide a remote service.  So for an open SSID public WiFi service you can literally just do it over the internet.