Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

create 2nd mobility group on 5508

Hi all,

We are running all our APs in H-REAP mode connecting to WLC 5508 (7.2.xxx)

Each H-REAP AP has local switched SSID, as  well as a guest SSID (centrally switched), which is 'tunneled' to the WLC, with Internet only access through the DC.

All the AP's connecting to the WLC using the managment interface, which is also the local mobilty group.

To route traffic different for the guest WLAN, I'd like to create a new Interface on WLC and use this as local mobility group for the guest WLAN.

Is this possible, or is the managment interface always the local monility group?

Appreciate your feedback.

Thanks,

Stefan      

Everyone's tags (2)
3 REPLIES
VIP Purple

create 2nd mobility group on 5508

Whad do you mean by "local mobility group" ?  For the mobility configuration you have to use controller MAC address & management interface IP detail (not any dynamic interface IPs)

Yes, you can create a seperate dynamic interface for the guest WLAN, but do not understand why you do want to relate it to mobility group configuration ?

HTH

Rasika

New Member

create 2nd mobility group on 5508

Hi Rasika,

Each of our branch sites have 2 WAN connections. 1 MPLS (critical traffic), 1 IPsec (non critical).

While the managment interface of WLC is reachbale  through MPLS, I'd like to route traffic for Guest WLAN over IPsec.

Therefore I would need create a 2nd Interface on WLC (different IP range) and terminate centrally switched traffic on that interface.

As you've mentioned the local mobility group is always the controller MAC (management int), so not sure if there's another way to solve this?

H-REAP AP,s register to managmnet int      --> routed through MPLS

centrally switched traffic to different int          --> routed through IPsec

Thanks,

Stfean

VIP Purple

create 2nd mobility group on 5508

Hi Stefan,

Now it is clear what you are trying to achieve.

I doubted you can achieve this since AP to WLC traffic always destined to WLC management IP address (so it will go via MPLS). Even you create a seperate dynamic interface on your WLC to egress guest traffic , it won't help you to bring branch guest traffic to WLC via your IPSec.

HTH

Rasika

167
Views
0
Helpful
3
Replies