Moving guest from local WLC to an Anchor for termination

[daswann]

When moving a guest network that is local to a single WLC to Foreign to Anchor what is the impact on currently associated guests in the run state? If any. Thanks You

[Rasika Nayanajith]

Client will disconnect while you do these config changes (guest anchoring on WLAN)

HTH

Rasika

[daswann]

Thank you Rasika, so I assume just until the tunnel endpoints move to the up state? What is the current best practice for number of wireless clients in a vlan for best performance (no authentication). I want to use interface groups with this and spread the load across multiple VLANs. Thanks 

[Scott Fella]

Don't get ahead of yourself.  You need to first test and validate that your tunneling to the anchor is working.  Best practice is to know your links and make a decision on current guest traffic flows and if your bandwidth on the anchor can handle that.  Once you get the initial tunnel up, then look at interface groups and if you really want to do that.  I personally would not for guest anchoring and never really tested it out to see if that works.

[daswann]

Thanks for your response Scott,

I have 10 tunnels up right now these were already in place prior to cleaning up this project and the intent to add more. There are about 3800 guests terminating at the anchor right now. The platform (Anchor) is a 5508 that will support 7000 according to Cisco documentation. We hope to move to 9800 redundant WLC's in the DMZ in the near future for obvious reasons. My reason for interface groups with guest is we have more guest traffic than regular production traffic at any given time (Healthcare). I'm curious why you would not use interface groups with guest anchor. I'm trying to lesson the broadcast traffic by distributing guest traffic across multiple VLANs. I have tested in my lab and it works on a small scale. 

Thanks in advance

[Scott Fella · Accepted solution]

Well there are large environments that have thousands of users that dump into one subnet and no issues.  Broadcast can be forwarded or not, so that is something you can define which is for both local and anchor.  If you have tested it and that works out for you, go for it and create an interface group.  There is no right and wrong, its more preference and what works for someone.

[daswann]

Very good Scott, 

Thank you!