Using different interface as management interface in c9800

[Leftz]

Hi C9800 wlc is setup. The interface Tw0/0/1 is configured as management interface. ssh and gui can access the wlc. but we reconfigured the WLC from scratch using Te0/1/0 as management interface, GUI cannot access wlc again. Is this because we are using different interface? Thank you

[Flavio Miranda]

Hi

 I dont think so.  Does this interface Te0/1/0 is Layer 3 interface or it is part of a Layer 3 port-channel or it is member of some vlan with Layer 3?

 You should be able to manange the WLC from some IP address. 

[Leftz]

Thank you very much for your reply. We are using two ports Te0/1/0 and Te/0/1/1 as trunk and channel. and using vlan as management interface. 

[Flavio Miranda]

Can you share the sh run ?

Or at least "show ip int br"

show run int port-channel X

show run int Te0/1/0 and Te/0/1/1

[balaji.bandi]

check this video nice one :

https://www.youtube.com/watch?v=UhZedbZ1pIA

I have installation guide in my archive post later (not in hand)

[Leftz]

Please see below:

WLC#sh ip int bri
Interface IP-Address OK? Method Status Protocol
Tw0/0/0 unassigned YES unset down down
Tw0/0/1 unassigned YES unset down down
Tw0/0/2 unassigned YES unset down down
Tw0/0/3 unassigned YES unset down down
Te0/1/0 unassigned YES unset up up
Te0/1/1 unassigned YES unset up up
GigabitEthernet0 unassigned YES NVRAM administratively down down
Port-channel10 unassigned YES unset up up
Vlan1 unassigned YES NVRAM administratively down down
Vlan10 10.10.10.89 YES NVRAM up up

WLC#sh run int port-channel 10
interface Port-channel10
switchport mode trunk

WLC#sh run int te0/1/0
interface TenGigabitEthernet0/1/0
switchport mode trunk
no negotiation auto
channel-group 10 mode active

WLC# sh run int te0/1/1
interface TenGigabitEthernet0/1/1
switchport mode trunk
negotiation auto
channel-group 10 mode active
end

[Flavio Miranda]

You should be able to manage the WLC using the IP 10.10.10.89. 

If you are not, you need to check the device where the WLC is connected.

[balaji.bandi]

I have used mamangent gig0/0 and it works as expected. can you post full config

here is my Cat 9800 config : (simple steps works and in production now)

https://www.balajibandi.com/?p=1595

[Leftz]

Yes its ssh, but not GUI

I checked and get to know many users have this issue. Please see the link. 

https://community.cisco.com/t5/wireless/cisco-wireless-lan-controller-9800-l-c-unable-to-login-to-gui/td-p/4025477

[Arshad Safrulla]

In all 9800 physical appliances you have a dedicated management port (service port). It is highly recommended that you configure this port for management access;

!

interface GigabitEthernet0
description :d= Management_Switch_GE1/0/10
vrf forwarding Mgmt-intf
ip address 10.0.0.101 255.255.255.0
negotiation auto
no cdp enable

!

ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 10.0.0.1

If you require in-band management to WLC then you can configure a SVI, For example

!

interface Vlan101
description AP-Management
ip address 10.1.0.2 255.255.255.0

!

ip route 0.0.0.0 0.0.0.0 10.1.0.1 (Default route is mandatory)

Also in order to have http/s access to the WLC you need to use below commands;

ip http server (you can disable this if required)

ip http secure-server
ip http authentication local

Configuring any new L3 ports in the WLC is perfectly possible, but must be avoided and not recommended due to complexities it brings. Cisco recommends using VLAN Interfaces (SVI's) in the WLC instead of configuring L3 interfaces. Also if you are not using mdns or dhcp relay only 1 SVI in WLC is more than sufficient. Always read the 9800 best practices guide if you need more info.

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html