wlan error: ip added to exclusion list. Reason: VLAN not configured

[zzman55]

I'm configuring a new wireless network using 3850 as a controller and 2702I access point. When a client (iphone) attempts to connect to an SSID it fails and the following is logged on the 3850 console:

*Jan 13 21:09:25.790: *%APF-4-ADD_TO_BLACKLIST_REASON:Switch 1 R0/0: wcm: Client f25a.988a.1fc4 () was added to exclusion list. Reason: VLAN not configured

I saw other posts here that say the VLAN in wlan configuration must match my actual VLAN for wireless clients. But I can't figure out where these are configured on my 3850.  Can someone please post a sample relevant coniguration that shows both wlan and VLAN config?  What exactly needs to match?

[Haydn Andrews · Accepted solution]

There some really good examples of converged access deployments with the 3850 as the WLC over at Rasika's blog:
https://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/

And the converged access guide over here:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-1/converged_access_deployement_guide/m_conAccess_deploy_guide/converged_access_solution_overview.html 

Given that Cisco basically abandoned Converged access not long after it came out, you might be better deploying a 9800 controller to a VM to do the job.

[zzman55]

Thanks Haydn for the link to the WLC config blog, it was very helpful. I was missing 

client vlan default

in my wlan configuration.  All works fine now.

I'll investigate the possibility of deploying a separate 9800 controller. My current setup is 4x3850 48 port switches for the wired network and 22x 2702 access points for about 30,000 sq ft space.  The APs came with the space when we moved in, so I'm really glad I'm now able to get them working with these switches and don't have to buy anything else. I think my set up will work for now, at least for the next year as nobody is in the office anyway.

Any suggestions on what to use for my next wireless network setup? What should I expect to budget for wireless coverage for my space and about 200 wired ports? Any ideas on what switches/wireless controller/APs I should use?