I encounter the following issue regarding WLAN guest access.
I have WiSM in a VSS context. I configured a Guest WLAN mapped on a L2 vlan.
Even if this vlan is not routed, I can ping the management interface of the controller from the Guest SSID.
The "management via Wireless" checkbox is unchecked.
- The source MAC address of the ICMP reply is the WLC virtual interface MAC address.
- If I traceroute the WLC management interface, There is just one hop wich is directly the WLC management interface and not the guest vlan gateway.
Do anybody knows why guest users can ping the WLC management interface ?? and how to avoid this ?
Thanks for any help.