12-08-2020 12:01 AM - edited 07-05-2021 12:52 PM
New to questions here. I have a foreign WLC that has guest wifi with the anchor in the DMZ. If I am trying to add a second guest WLAN, is there something specific I need to do?
The original guest uses the mgmt interface (not recommended) and I created a new interface for the second. I assigned the same mobility anchor to each WLAN and local for both on the anchor. The mobility groups are UP and a user can connect, but not receive an IP from DHCP.
The DHCP is from a ASA that is the gateway for both (and many other) WLANs. The VLAN is added for the switches between the Anchor WLC and FW and all configuration in the ASA and switches are identical to all existing guest wireless deployments. All configurations for the WLANs in the foreign WLC are identical to other sites using guest wifi, but this is the first multiple guest scenario.
On the Anchor WLC, the IP for the second guest interface is .2, Gateway is the FW.1 and DHCP is the FW .1.
Under the advanced tab is set to use DHCP required check box.
sorry, new to questions here again.
let me know if a picture would help or something
12-08-2020 02:13 AM
12-08-2020 09:17 AM
My bad, so they’re two different guests not duplicate. One is visitor one is employee owned devices. They want a separate guest even though they share the same resources anyways.
both ssid are created on the foreign and anchor wlc
12-08-2020 09:47 AM
Well it should work as long as you have employee guest ssid and guest ssid configured on both the foreign and anchor.
12-08-2020 10:01 AM
Alright, I’ll keep looking. I just wanted to make sure there wasn’t anything on the WLC for multiple guest wlans cause I’m still not super at them yet.
12-08-2020 12:22 PM
There isn't... as long as your have mobility and the ssid's are anchored properly, then you should not have any issues. You can also tell if your clients are being anchored by looking at the client on the foreign and anchor. Have you validated that dhcp works in the dmz or are you using the same interface for both?
12-09-2020 08:10 AM
That’s a typical scenario when you have mismatch WLAN/SSID settings/config from the foreign and the anchor WLCs.
You need to make sure that all settings/config for the two WLANs/SSIDs in foreign and anchor WLCs are the same.
In general, these are accepted differences between the two WLANs:
WLAN id, interface, PSK, AAA and obviously WLAN Anchor settings.
Other than that, everything need to be the same. When you fix that, the client will get IP addresses.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide