FlexProfile_For_More_Than_16_Vlans

[mouadmerfouk2021]

Hello community,

I have an issue with cisco WLC 9800, for wireless users I have 50 vlans, the issue is that when I want to create a Flexprofile it's only support 16 Vlans, there's any solution for this issue.

• Wireless LAN Controller

[JPavonM]

Why don't you use VLAN Groups? (https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/vlan-groups.html)

[marce1000]

 - Ref : https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_vewlc_flex_connect.html?bookSearch=true

 >....

  Guidelines and Restrictions for FlexConnect

• FlexConnect mode can support only 16 VLANs per AP.

  Currently this must be considered as a design limit (not really an issue)

 M.

[mouadmerfouk2021]

We have one SSID with 8021x authentication via ISE, and this one is responsible for Vlan attribution to users based on AD groups, for this reason I want to know if all users VLAN's should be created on the flexprofile ??

[Scott Fella]

Yes you need to add the vlan ID to the FlexConnect group. This is the only way and AP will know of what vlans to use.

[mouadmerfouk2021]

I have checked with a friend that have a design similar to our design, when I checked the flexprofile I only find 10 Vlans created on this flexprofile, but there's a lot some clients connected to a different vlans that are not created on this flex profile, and he tell me that the Cisco ISE is the responsible for VLANs attribution to users.

[Scott Fella]

ISE can send the vlan id, but if the ap doesn't know of that vlan id, then the traffic will be placed on the native vlan.  You need to define your ssid to vlan mapping and also identify all the vlan id's in the acl section.  

[Scott Fella]

You really need to assess if the design you currently have is valid moving forward.  Having 50 vlans for wireless users is not normal unless you are talking about multiple sites that don't use the same vlan id.  I think you need to provide more information and details so that we can understand what you currently have and what you are trying to accomplish in detail.