"wlan disable all" command --> will it kill my remote access?

[Dean Romanelli]

Hi All,

I am having an issue with one of my WLC's in a remote part of the world. The issues started after I changed the management IP address. After the change, I can no longer access the GUI. I can get in via telnet, but I have to clear arp on my local PC's IP and immediately telnet to the WLC for it to work, and I only get about 45 seconds of access before it shuts me out. Very strange since my PC is 4,000+ miles away.

I want to roll back to the old management IP to try and reverse troubleshoot this, but since I don't have GUI access, I have to put the command in on the CLI.  When I enter the command to change it: config interface address management 192.168.159.5 255.255.255.0 192.168.159.1 it says "failed: wlans are using this IP, disable wlans first."  However, when I show the wlans, the staff one shows interface name is "management," which is the interface that has the IP I want to change.

(Cisco Controller) >show wlan summary

Number of WLANs.................................. 3

WLAN ID  WLAN Profile Name / SSID               Status    Interface Name
-------  -------------------------------------  --------  --------------------
1        Scrubbed - Staff / Scrubbed - Staff        Enabled    management
2        Scrubbed - Mobile / Scrubbed - Mobile  Enabled   fc_external
3        Scrubbed - Guest / Scrubbed - Guest  Enabled     fc_external

Can I do wlan disable all and remain connected to the WLC? My telnet access is coming from a VPN in the US and over MPLS to a router at the site in the remote country, so I'm not connected to it via wireless to my knowledge, but that "interface name: management" above has me second guessing this decision.

[Scott Fella]

Try this first:

config network mgmt-via-dynamic-interface enable

Then GUI using the ip of one of the dynamic interfaces.  Then look at what you changed or revert it back.

-Scott

[Dean Romanelli]

Hi Scott,

Does that make the mgmt interface pull down a DHCP address?  If so, how will I know what the IP is to GUI to?

[Scott Fella]

No... I'm assuming you have created other interfaces on the WLC?  If so, then if you issue a show interface summary, you can GUI to any of the dynamic interface IP address.

-Scott

[Dean Romanelli]

I'm not entirely sure to be honest, as I inherited this piece of equipment - it is someone else's work.  I have the following:

(Cisco Controller) >show interface summary

 Number of Interfaces.......................... 3

Interface Name                   Port Vlan Id  IP Address      Type    Ap Mgr Guest
-------------------------------- ---- -------- --------------- ------- ------ -----
fc_external                      2    untagged         192.168.1.3          Dynamic No     No
management                       1    untagged     192.168.158.100 Static  Yes    No
virtual                          N/A  N/A                        1.1.1.1              Static       No     No

My VPN tunnel originates in the US, where I am sitting to that 158 subnet at the site, and adding access to that 192.168.1.3 that is sitting on the dynamic interface isn't something I can do as that subnet (192.168.1.x) lives elsewhere as well from the data center's perspective. Hopefully that makes sense.  The setup is not ideal currently. I need to change it but for now I'm stuck.

[Scott Fella]

Well go ahead and issue the config wlan disable all.  That way you can change the ip back.

-Scott

[Dean Romanelli]

Will I stay connected via telnet though once the wlans are disabled? I mean, I don't see why I wouldn't, that Staff wlan saying "management" is just giving me reservations.

What if I do reset system in 10 no-swap save-config first?  That way if I shut myself out, it will reboot in 10 minutes?  That won't factory default it right? Just "reloads" it more or less?

[Scott Fella · Accepted solution]

The WLAN's has no affect on your telnet session unless your associated to an access point, which you are not. 

-Scott

[Dean Romanelli]

Thanks Scott. As it turns out, the WLC lost power that night and came back with the old IP.

[Abhishek Abhishek]

Yes, its correct as "wlan disable all" command will not kill any remote access like Telnet.