Source IP of client

[ALIAOF_]

So need to validate something:

Client --> AP --> WLC --> Switch --> Firewall

10.10.10.10 --> 10.10.10.1 --> 172.10.10.10

Client has an IP 10.10.10.10

AP = 192.168.1.10

WLC = 172.10.10.10

Firewall will see the client IP as the source and NOT the interface IP of the VLAN?  WLC does not NAT it behind its interface. (example outgoing http or https traffic going out to the internet etc)

Thank you.

[Adrian Mendoza]

Mohammad,

Thanks for sharing your question, I think you need to clarify this a little more, however if I understand correclty you are asking if its possible to use the interface of the vlan on the WLC as the source IP when clients connecting to a SSID are sending traffic.

If that is the question then the answer will be no.

I do not understand if the statement "WLC does not NAT" is related to a questions, but you are right, L3 devices are the only capable of doing NAT,  WLC is a L2 device .

[ALIAOF_]

Sorry I think that NAT in there made it confusing yes this is a L2 device really so that does not apply.  I believe you have answered/validated my question but let me try to re phrase it in a simple way.

Basically the devices after the WLC will actually see the client IP as the source IP when client is accessing the traffic WLC won't use its own interface IP to change the source.

[Adrian Mendoza · Accepted solution]

That is correct, Controller does not work like that.

You can check the interface and port functions here:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_01100.html