Ipsec tunnel WLC 9800

[David.Vicente]

Hi!

Is it possible, or has anyone used, an IPsec tunnel on a Cisco 9800 controller to transport guest traffic to a manager like Prisma?

Thanks in advanced

David.

[MHM Cisco World · Accepted solution]

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-2/config-guide/b_wl_17_2_cg/b_wl_17_2_cg_chapter_010010110.html

Check this 

MHM

[David.Vicente]

Thanks for your response! I had already seen that document, so it's only for syslog then.

"Cisco Catalyst 9800 Series Wireless Controller supports IPsec configuration. The support for IPSec secures syslog traffic."

David

[Rich R]

Yes it looks that way @David.Vicente 

The wireless BU removed most of the IOS-XE base functionality from 9800.
Also remember 9800 is intended to be used for layer 2 client traffic - layer 3 is not recommended (although it is supported).
Also it was a bit short-sighted of them to base that syslog IPSEC on crypto maps because crypto maps are now deprecated:
https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-xe-17/bulletin-c25-744830.html