WLC 5508 : Physical port devoted for a specific VLAN / function?

[holzhirt1]

Hello,

We have currently a WLC 5508 using 8 ports bundled into an etherchannel.

We would like to remove one physical from this etherchannel and use it for providing an access to Internet only,

Is it possible to create an virtual interface on the WLC that points only on this port?

If yes what could be the best option ? (we would like to have a physical separation for the Internet traffic only and encrypt the capwapp up to the WLC).

Thanks for your advices,

Regards

[George Stefanick]

Im afraid not. Once you LAG all the ports become (1). Only want is to break LAG and go PORTS.

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[Scott Fella]

It is not possible. It's either all in a LAG or now at all.

Sent from Cisco Technical Support iPhone App

[Scott Fella · Accepted solution]

The best way is to have an anchor WLC. This way you can tunnel traffic to a guest anchor WLC located in the DMZ.

http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html

Sent from Cisco Technical Support iPhone App

[holzhirt1]

Thanks for your answers,

That means we would lose the whole LAG even if we break one interface?

And if we agree to do that we can achieve this ? But load-balancing won't be effective on the 7 other ports correct?

Otherwise what would be suggested to ensure a good separation for such purpose ?(using a minimum devices in between)

[George Stefanick · Accepted solution]

When you break LAG then each port is its own, meaning that you would tie say your data vlan to port 1. The Swicth port going to port 1 could be a truck and the data vlan is configured on this switch port and tagging. You could then add port 2 as a back up shoud port 1 go down.

As far as load balance traffic. You would turn off etherchannel on the switch side, so no.

Normally if you have 3 WLANs you can tie 1 to each WLC port, 1 - data, 2 - voice, 3 - medical.

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[holzhirt1]

Ok but we can have port 1 into a trunk and pass several VLANs into it ?

[George Stefanick]

Yes of course. You could tie all your WLANs to port 1 if you like. Make sure you truck the switch port and dont signify a vlan ID on the port in the WLC.

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[George Stefanick]

If this answers your questions, please kindly mark the question as answered. Thanks

__________________________________________________________________________________________
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
__________________________________________________________________________________________
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

[Scott Fella]

+5 George for the correct answer:)

Sent from Cisco Technical Support iPhone App

[holzhirt1]

Thank you all for your support in that matter,

I have now a better view on what's technically possible,

Kind regards