WLC NAT Feature problem for OEAP

[Sebastian Helmer]

Dear all,

The problem that i have when i enable NAT on my MGMT interface, the APs on the "inside" does not find the WLC.

If uncheck the NAT the APs will connect right away.

When I enable the NAT, the APs stay connected but some them and from time to time they leave the WLC and join the backup WLC and back to main and and...

I also use the feature config network ap-discovery nat-ip-only disable

Code 7.6.130.0

I know it is better to use a separate WLC for OEAP, but the option is there and I would like to use it because we have not much OEAPs. 

should I prevent the internal APs to be able to reach the external IP? I allowed only CAPWA to the NAT IP, is there anything we should change..?

best regards,
Sebastian

[Sebastian Helmer]

Ok, today we decided to block the ability for internal APs to join the public ip. I will see if that helps. I keep u in the loop. 

[Sebastian Helmer]

The idea to add the mac's doesn't help.. :(

It was just a lucky hit in the moment I checked the WLC.

the command is used, but without success....at the Moment I have just two APs..we will see if the count grows...