Not able to form EoIP tunnel with anchor WLC

[tomyip]

Hi all,

I have a WLC at a remote site that is supposed to form an EoIP tunnel with 2 anchor WLCs located at a data center. From the site WLC and the anchor WLCs, the mobility show UP on both ends. Also I can ping to the mobility peers from each end. However, when I look into the client details on the remote site WLC, there is no Mobility Anchor IP address, which tells me that the EoIP tunnel between the site and anchor controller is not forming for some reason. Any idea what I could be missing?

(WOHW-WC01) >show client detail 0c:3e:9f:ab:db:ed

Client MAC Address............................... 0c:3e:9f:ab:db:ed

Client Username ................................. N/A

AP MAC Address................................... 0c:68:03:b9:44:70

AP Name.......................................... WOHW-LAP016

Client State..................................... Associated

Client NAC OOB State............................. Access

Wireless LAN Id.................................. 66

Hotspot (802.11u)................................ Not Supported

BSSID............................................ 0c:68:03:b9:44:72

Connected For ................................... 1469 secs

Channel.......................................... 6

IP Address....................................... Unknown

Gateway Address.................................. Unknown

Netmask.......................................... Unknown

IPv6 Address..................................... fe80::1c1a:e07c:dd48:bc7e

Association Id................................... 3

Authentication Algorithm......................... Open System

Reason Code...................................... 1

Status Code...................................... 0

Session Timeout.................................. 0

Client CCX version............................... No CCX support

QoS Level........................................ Bronze

802.1P Priority Tag.............................. disabled

CTS Security Group Tag........................... Not Applicable

KTS CAC Capability............................... No

WMM Support...................................... Enabled

  APSD ACs.......................................  BK  BE  VI  VO

Power Save....................................... ON

Current Rate..................................... m7

Supported Rates.................................. 9.0,12.0,18.0,24.0,36.0,48.0,

    ............................................. 54.0

Mobility State................................... None

Mobility Move Count.............................. 0

Security Policy Completed........................ No

Policy Manager State............................. STATICIP_NOL3SEC

>>> No Mobility peer IP address <<<<

(WOHW-WC01) >show mobility anchor wlan 66

Mobility Anchor Export List

 WLAN ID     IP Address            Status
 -------     ---------------       ------
 66          137.183.242.149       Up                              
 66          137.183.242.150       Up                              

(WOHW-WC01) >show mobility sum           

Mobility Architecture ........................... Flat
Mobility Protocol Port........................... 16666
Default Mobility Domain.......................... WOHW_ENT1
Multicast Mode .................................. Disabled
Mobility Domain ID for 802.11r................... 0x9cbf
Mobility Keepalive Interval...................... 10
Mobility Keepalive Count......................... 3
Mobility Group Members Configured................ 3
Mobility Control Message DSCP Value.............. 0

Controllers configured in the Mobility Group
 MAC Address        IP Address       Group Name                        Multicast IP     Status
 bc:16:65:f9:18:60  137.183.242.150  CIN_GUEST1                        0.0.0.0          Up
 e0:2f:6d:7c:42:20  143.27.201.52    WOHW_ENT1                         0.0.0.0          Up
 f8:72:ea:ee:a0:00  137.183.242.149  CIN_GUEST1                        0.0.0.0          Up

[Stephen Rodriguez]

So slight correction, the EoIP tunnel is formed otherwise it wouldn't show UP.

what's going on here is the mobility handoff isn't happening.

Can you post the Show WLAN from all of the WLC, internal and the two in the DMZ?

If the WLAN doesn't match exactly, with the exception of the interface, the handoff will not happen. You can do a debug mobility handoff to see if this is happening or not. If this is the issue the debug states something like WLAN doesn't exist.

HTH,

Steve

[tomyip]

It works now. I changed the NAC state to "Radius-NAC". Now the mobility hand-off is occurring. 

(WOHW-WC01) >show wlan 66 

WLAN Identifier.................................. 66
Profile Name..................................... PGGuest
Network Name (SSID).............................. PGGuest
Status........................................... Enabled
MAC Filtering.................................... Enabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Enabled
Network Admission Control
  Client Profiling Status ....................... Disabled
   DHCP ......................................... Disabled
   HTTP ......................................... Disabled
  Radius-NAC State............................... Enabled