Guest Access issue

[mrshabbs]

I am trying to configure Guest Access. I have a 5508 wlc inside the LAN (wlc01) and a dedicated 5508 guest access wlc (wlc02) behind the firewall in the dmz. My Mobility group status is showing as control path down data down. I have therefore performed some tests to confirm IP connectivity between controllers. IP connectivity fails in one direction. It is here where I am seeing strange results.. Below is the ipconfig of the controllers and the results:-

wlc01 ip 10.106.1.90

mgmt interface 10.106.1.90, 255.255.255.0, gateway 10.106.1.5

wlc02 ip 192.168.1.250,

mgmt interface 192,168.1.250, 255.255.255.0, gateway 192.168.1.254

firewall 10.106.4.10

1)     I can ping wlc02 to wlc01 (dmz to lan)

2)     I can ping wlc01 to firewall (lan to fw)

3)     I cannot ping wlc01 to wlc02 (lan to dmz), however see (4) below

4)     I have configured a client with IP 10.106.1.94, 255.255.255.0, gateway 10.106.1.5. I can ping wlc02 from this client. (lan to dmz).

So in a nutshell I cannot ping the dmz controller from the LAN controller, but I can ping the DMZ controller from a client on the same subnet as the LAN controller.

Before I can confirm the protocol 97 and udp 16666, 16667 are flowing between controllers I wanted to confirm basic IP connectivity.

Any sugestions welcome!!!!

[mrshabbs]

Hi fella5 Please can you confirm what interfaces and ip's are required on the lan & guest controllers based on the below? mgmt - do the ip settings have to be unique to each controller?a guest interface - do the ip settings have to be unique to each controller lan controller - 10.106.1.90, 255.255.255.0, 10.106.1.5, vlan101mgmt interface- ??guest interface - ?? guest controller - 192.168.1.5, 255.255.255.0, 192.168.1.254, vlan666mgmt interface - ??guest interface - ??

Get your widget or badge - JustGiving

Date: Sat, 3 Dec 2011 12:12:39 -0700

From: supportforums-donotreply@jivesoftware.com

To: shaneorrell@hotmail.com

Subject: - Re: Guest Access issue

Home

Re: Guest Access issue

created by Scott Fella in Other Wireless - Mobility Subjects - View the full discussion

It can be a device. What about your dhcp pool, you excluded the wlc ip? If you look at your switch log, you would see duplicate address errors. Sent from my iPhone

Reply to this message by going to Home

Start a new discussion in Other Wireless - Mobility Subjects at Home

[Scott Fella]

All ip address has to unique between each wlc. Only the Virtual IP Address can be the same.

Sent from my iPhone

[mrshabbs]

thanks for all your help

Get your widget or badge - JustGiving

Date: Mon, 5 Dec 2011 12:40:20 -0700

From: supportforums-donotreply@jivesoftware.com

To: shaneorrell@hotmail.com

Subject: - Re: Guest Access issue

Home

Re: Guest Access issue

created by Scott Fella in Other Wireless - Mobility Subjects - View the full discussion

All ip address has to unique between each wlc. Only the Virtual IP Address can be the same. Sent from my iPhone

Reply to this message by going to Home

Start a new discussion in Other Wireless - Mobility Subjects at Home

[mrshabbs]

found a duplicate ip in the routing table. have removed and now have ip connectivity

protocol 97, ports 16666,16667 open. identical wlans. mobility group created on each controller anchor created on guest controller, foriegn controller points to anchor, guest controller points to itself for anchor, epings & mpings fail, control & data path showing as down. any ideas?

Date: Sat, 3 Dec 2011 12:12:39 -0700

From: supportforums-donotreply@jivesoftware.com

To: shaneorrell@hotmail.com

Subject: - Re: Guest Access issue

Home

Re: Guest Access issue created by Scott Fella in Other Wireless - Mobility Subjects - View the full discussion

It can be a device. What about your dhcp pool, you excluded the wlc ip? If you look at your switch log, you would see duplicate address errors.

Sent from my iPhone

Reply to this message by going to Home

Start a new discussion in Other Wireless - Mobility Subjects at Home