Wired guest access using Cisco 3850 based WLC

[hardik3946]

Hi Guys, 

We are building up a guest tunnelling mechanism with 3850 switch ( integrated WLC). My question is , if it is possible to tunnel the directly connected wired clients too via EOIP tunnel initiated from 3850 switch to Guest anchor along with wireless AP clients on same switch. ?  This has come up as we have 3850 switch where we expect both types of guests ( wired and wireless) . 

Can anybody please explain?

Dave

[Rasika Nayanajith]

Hi Dave,

Tunneling of wired Guest Access is not supported in 3850 (as of IOS-XE 3.6). It may  come in future releases, but never know.

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ibns/configuration/xe-3se/3850/ibns-xe-3se-3850-book/ibns-wired-guest-access.html

• Tunneling of wired clients is not supported when the client is attached to a port at the Cisco Next Generation Wiring Closet (NGWC) device that is configured for open mode.

•  Tunneling of wired clients is not supported after successful web authentication at the NGWC device because automated IP address reassignment is not supported after web-authentication.
• The NGWC device supports network access only via the tunnel based on the web authentication that occurs at the controller.
•  The Network Advertisement and Selection Protocol (NASP) is not supported for wired clients.
•  High availability is not supported for wireless sessions. If the wireless controller fails while providing tunneled guest access for a wired client, the state is not automatically recovered.
•  Inactivity aging is not enforced for a wired client that is provisioned to the wireless controller; for example, within a RADIUS Access-Accept request that is received after web authentication is performed at the controller.

HTH

Rasika

**** Pls rate all useful responses ****