Problem with FlexConnect & access-point/ switch & trunk interface

[COONEIT]

I have a setup with Cisco 9800 virtual WLC, Cisco 9300 switch & Cisco C9115AXI & Cisco C9105AXI:

It is that the switch interface behaves as access despite being configured as trunk. The access points are connected to interface G1/0/23-24. The access-points are added to a FlexConnect group. Does anyone have any experience with this? And do you guys have a solution for this?

Switch interface configuration:

!
interface GigabitEthernet1/0/23
switchport trunk native vlan 254
switchport trunk allowed vlan 150,200,254
switchport mode trunk
switchport nonegotiate
speed 1000
duplex full
!
interface GigabitEthernet1/0/24
switchport trunk native vlan 254
switchport trunk allowed vlan 150,200,254
switchport mode trunk
switchport nonegotiate
speed 1000
duplex full
!

do sh int g1/0/23 trunk

Port            Mode     Encapsulation       Status          Native vlan
Gi1 /0/23      off           802.1q         not-trunking      254

Port Vlans allowed on trunk
Gi1/0/23 1

Port Vlans allowed and active in management domain
Gi1/0/23 1

Port Vlans in spanning tree forwarding state and not pruned
Gi1/0/23 1

do sh int g1/0/24 trunk

Port               Mode    Encapsulation           Status             Native vlan
Gi1/0/24         off            802.1q             not-trunking          254

Port Vlans allowed on trunk
Gi1/0/24 1

Port Vlans allowed and active in management domain
Gi1/0/24 1

Port Vlans in spanning tree forwarding state and not pruned
Gi1/0/24 1

[Daniel Ordóñez Flores]

Hello @COONEIT 

What is exactly the problem? Wireless client don't get IP from VLAN 150 & 200?

[COONEIT]

Thank you for your response

1: The problem is that the switch interface behaves as access and not trunk.
2: The access point ends up in VLAN 1 and does not get an IP address from VLAN 254 as it is configured as natvie on interface g1/0/23-24
2: if I configure interface g1/0/23-23 as ' switchport access vlan 254', the access-points get IP addresses from vlan 254 and report to the controller in the FlexConnect group.
3: the SSIDs are broadcasted and the client does not get an IP address in vlan 200 or vlan 150. This is because the switch interface behaves as access instead of trunk.

[Daniel Ordóñez Flores]

What model of switch are u using?

[Flavio Miranda]

Hi @COONEIT 

 The configuration for switch port seems to be right. But, I believe your problem can be the WLC config.

In Configuration > Tags & Profiles > Policy

You need to configure like this print below

And, in Access Policy, you need to add the Vlan 200 or 150

[COONEIT]

Thanks for the feedback. The WLC settings match what you indicate, this does not appear to be the problem.

Switch Ports Model SW Version SW Image Mode
------ ----- ----- ---------- ---------- ----
* 1 41 C9300-24P 17.11.99SW CAT9K_IOSXE INSTALL