FLEXCONNECT wireless deployment

[l.buschi]

Hello I have the following scenario:

1 central site with WLC installed and 10 branch office.

I want to the deploy the following WLAN archiecture:

Central site: 

Many SSIDs/subnets for example

SSID1: CENTRAL-WPA    with wpa enterprise

SSID2: CENTRAL-GUEST with wen guest authentication

SSID3: WPA-PSK1

SSID4: WPA-PSK2

Branch office x:

SSID1: LOCAL-SWITCHED-x     wpa-psk

SSID: CENTRAL-WPA    centrally switched, centrally authenticated

SSID: CENTRAL-GUEST   centrally switched, centrally authenticated

On each of my branch office I have only 1 vlan and I want to see only his LOCAL-SWITCHED-x SSID (for example LOCAL-1 for branch #1), the CENTRAL-WPA and CENTRAL-GUEST

In my central LAN I only want to see all my central SSIDs and no LOCAL-SWITCHED-x SSIDs

How can I do this?

I already primed my access-point with wlc and i checked that my SSIDs are working correctly but I see local unwanted SSIDs on my central site and all SSIDs on my branch offices.

thanks Johnny

[M. Wisely · Accepted solution]

To get the SSIDs you want at each site you need to create an AP Group for each site. In each AP group you choose the SSIDs you want available and select the appropriate controller interface. Put the APs for each site in the appropriate group and you now have the correct SSIDs at the correct sites.

[l.buschi]

Tks Martin,

what if I have 2 ore more wlcs?

I have to configure the same groups on eanch and then do I have to prime all my access-points with all my wlcs in order to build the groups?

[M. Wisely · Accepted solution]

If you're like us you have a primary and secondary controller, you need to create the same groups on the second WLC as on the first otherwise if an AP appears on the secondary and the AP group doesn't exist it'll use the default group while it's on this controller and advertise all SSIDs.

You don't need all your APs to be joined to the controller to create the groups but you do need them joined to add them to the groups. Once they've been added to a group you can turn them off and they'll remember the group.

[l.buschi]

So I have the last question: on my network I'd like to have some APs (for example 802.11AC) switched locally and centrally authenticated while other APs centrally switched and a authenticated. Is it possibile to have roaming between local and flexconnect APs assuming that they have the same ssids and vlans?

And RRM?

Thanks for you very clear, professional and precious answers.

Johnny