Native VLAN in flex profile

[Wes Schochet]

Hi All-

I am developing configs for an upgrade from 5520s to 9800s.  I made some errors in specifying the native VLAN for my test site in the Flax profile.  After some additional testing it appears that everything works fine no matter what native VLAN is specified in the flex profile.  This makes me think that perhaps I don't understand what that value is used for or what the interaction is?  Is the AP supposed to mark it's management traffic?  Does anyone have any experience with this?  All of my APs are on switch ports that are set up as trunks with a native VLAN specified on the port config.

Thanks,

Wes

[marce1000]

 - This is not a direct answer but could be useful : on 9800 you can always have a quick configuration check with the cli exec command : wireless config validate. For in in-depth check of the 9800-configuration , use show tech wireless  command and feed that output into : https://cway.cisco.com/tools/WirelessAnalyzer/  . These tools always come in handy for whatever issues could be encountered and will already  provide an advisory role for the configurations that you are working on (9800-platform).

 M.

[Wes Schochet]

Thanks - this of course brings up a totally different issue:

WirelessAnalyzer flags me for no ARP-proxy.  I see no way to set that via the GUI?  That seems odd.

[marce1000]

 - Can you show this advisory message as reported by WirelessAnalyzer (or provide screenshot - e.g.)

 M.

[Arshad Safrulla]

As per the 9800 best practices guide “When connecting with a native VLAN on the AP, the native VLAN configuration on the Layer 2 must match the configuration on the AP.”

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html

This means you have to match the native VLAN configured on the switch port with the one configured under Flex profile.

arp proxy is useful only if you are centrally switching the traffic. You need to enable this by CLI.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-3/config-guide/b_wl_17_3_cg/m_arp_proxy.html

make sure that you run latest Cisco TAC recommended codes in WLC always.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214749-tac-recommended-ios-xe-builds-for-wirele.html