06-19-2006 06:14 AM - edited 07-04-2021 12:22 PM
Dear Sir/Madam,
I have a problem that the built-in ACL in the Controller 4136 does not work on dynamic interface. I can't apply a ACL to block PING to the dynamic IP address successfully. However, I can use the ACL to block other IP addresses which are in the same subnet on the network.
I need to block Ping to the dynamic interface because I will have public Internet user to use a broadcast SSID attached to this dynamic interface with true IP. Thanks.
06-23-2006 01:45 PM
Apply some ACL's on the controllers default gateway (next hop router) specifying only your allowed subnets.you cannot ping a dynamic interface mapped to an SSID
07-13-2006 10:00 PM
Thank for information.
My case is a pure layer 2 VLAN which is no default gateway or router. The Cisco Controller release note mentioned not support PING to dynamic interface, however, I can continuously ping it from Radio side.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide