Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Block PING to Controller Dynamic IP Address

Dear Sir/Madam,

I have a problem that the built-in ACL in the Controller 4136 does not work on dynamic interface. I can't apply a ACL to block PING to the dynamic IP address successfully. However, I can use the ACL to block other IP addresses which are in the same subnet on the network.

I need to block Ping to the dynamic interface because I will have public Internet user to use a broadcast SSID attached to this dynamic interface with true IP. Thanks.

2 REPLIES
Bronze

Re: Block PING to Controller Dynamic IP Address

Apply some ACL's on the controllers default gateway (next hop router) specifying only your allowed subnets.you cannot ping a dynamic interface mapped to an SSID

New Member

Re: Block PING to Controller Dynamic IP Address

Thank for information.

My case is a pure layer 2 VLAN which is no default gateway or router. The Cisco Controller release note mentioned not support PING to dynamic interface, however, I can continuously ping it from Radio side.

128
Views
0
Helpful
2
Replies
CreatePlease to create content