We setup the mgmt interface of the WLC2504 on the subnet (10.1.1.0/24) with Cisco ASA 5505 to the internet. Can we create 2 WLANs on 2 different IP subnets (10.1.10.0/24) for internal users and (192.168.100.0/24) for guest without layer 3 routing?
The WLC will not do any type of routing. So without L3 routing, the WLC will place the traffic to the ports you specify on the WLC. For example, if your managment is on port 1 and that has internet, then if you assign an ssid to map to the managment interface, thoses device will have internet access. If you specify port 2 for internal user and port 3 for guest, they will be isolated subnets since you don't have L3.
Your best bet is to use a L3 switch, create your vlans/subnets for your wireless and wired. Then you can create an acl preventing the guest subnet to access your internal subnet. You can use the wlc to provide dhcp for the guest wireless. And use an internal dhcp for your internal users.
The guest subnet will route thru the internal to get to the internet because the inside interface of the ASA is on the internal network where WLC management interface resides. Maybe the acl can be setup to allow the guest to the ASA interface only.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...