Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

WLC and Management vlan tagging

Hello,

in cisco documents I find that is'd be better not to use untagged vlans but in all cisco examples management vlan and ap manager vlan are always untagged.

What do you think is the best way use tagging?

Also shuld be possible to use to different vlans for AP manager and management? If it should, which would be best to tag the ap manager vlan or the management one?

Thanks

3 REPLIES

Re: WLC and Management vlan tagging

Which controller are you talking about?

If I look at the config on my 4402, they are tagged, but if I look at the wism configs, they are not.

New Member

Re: WLC and Management vlan tagging

I'm talking about 5500 WLCs.

Thanks

Silver

Re: WLC and Management vlan tagging

Security best-practice is to never use the untagged (native) VLAN.  The number of organizations that follow this best-practice is probably under .5%.  Since it's something that's rarely practiced, it's no surprise that Cisco has examples with the manager interfaces being untagged.

I have used untagged VLANs on the management interfaces for all of my installations.  There is nothing wrong with this deployment - it will work just fine.  Your other VLANs will require tagging.  I'd recommend keeping your Manager and AP Manager interfaces on the same VLAN, though this isn't required.

Does that help to answer your question?


Jeff

643
Views
0
Helpful
3
Replies