Block PING to Controller Dynamic IP Address

[rzvbsq]

Dear Sir/Madam,

I have a problem that the built-in ACL in the Controller 4136 does not work on dynamic interface. I can't apply a ACL to block PING to the dynamic IP address successfully. However, I can use the ACL to block other IP addresses which are in the same subnet on the network.

I need to block Ping to the dynamic interface because I will have public Internet user to use a broadcast SSID attached to this dynamic interface with true IP. Thanks.

[wdrootz]

Apply some ACL's on the controllers default gateway (next hop router) specifying only your allowed subnets.you cannot ping a dynamic interface mapped to an SSID

[rzvbsq]

Thank for information.

My case is a pure layer 2 VLAN which is no default gateway or router. The Cisco Controller release note mentioned not support PING to dynamic interface, however, I can continuously ping it from Radio side.