What VLAN should the management interface be in on a 4400 controller?

Hi,
Some documentations put the management interface on a 4400 controller into a regular tagged VLAN. But some documentations put it in an untagged Native VLAN, the tag=0. What is the difference? Which configuration is optimal?
Thanks,
Justin

The answer is "it depends" :-)
I would not say any particular config is optimal though. If you have an established VLAN for management interfaces, I would use that. However if you put the management interface in the same VLAN as your AP's, AP's find your controllers easier. Otherwise you can use DHCP to point AP's to controllers.
I prefer to tag the frame as to which VLAN it belongs to, even if that is the same as the native VLAN.

Similar Messages

  • What vlan should the WLC management be in

    We are using wireless controller 5508 and 1142n ap
    We have all the wireless configured on vlan 36
    the dhcp server is in vlan 1
    At present we have the management port on subnet 32 vlan1
    And it seems to be working it see all the access points and we are using the wireless with Leo problem.
    But is the proper way in setting the management interface port on the controller or should have an IP address and vlan identifier of 36.

    Honeslty, that is up to you.  I have customers that start off WLC and AP all in the same subnet, but it is not necessary.  I also have customers that put the WLC mgmt in the 'server' VLAN, and the AP in their own.
    IMHO, I like the WLC to be in 'server' or 'secured' VLAN, then I put the AP in their own VLAN that is locked down to only getting DHCP and talking to the WLC.  that way if someone unplugs an AP and connects something they can't get anywhere.
    HTH,
    Steve
    Please remember to rate useful posts, and mark questions as answered

  • 2950 - Changing the Management interface.

    Hi Guys
    I know the SI 2950's can't support more than 1 active SVI at any one time and i've seen from the release notes of the 2950 code that the "management" command is no longer available for changing the management interface VLAN.
    Considering this what would be the best way to change teh management VLAN remotely on a large number of 2950's without losing connectivity? I'd lab this up myself by I don't have a 2950 around to see what happens when I "Un Shut" the new VLAN.
    Any help would be muchly apprciated.
    Thanks

    Please disregard this message.
    I found a 2950 and discovered that when the new interface is "un shut" the old interface is automatically shut down.

  • ACL blocking traffic towards the management interface on WLC 5508

    Hello All,
    I need to apply an ACL in WLC 5508 such that it would allow https traffic on management interface only from selected clients. 
    For same, I have created an ACL permitting only the intended users while blocking the rest. Have applied the same on the management interface. 
    However still the access from all devices to management interface is not blocked. The ACL hit count too is not incremented. 
    I am on WLC code 8.0.110.0. 
    Has anyone else faced similar issue while applying ACL against management interface. 
    Highly appreciate the inputs. 
    Thanks and Regards,
    Adnan

    Hi Adnan,
    you have to apply this ACL as a CPU ACL. Then it will work.
    For your reference:
    http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109669-secure-wlc.html#t4
    Hope that helps...
    Kind regards
    Philip
    --> Pls rate useful responses <--

  • What size should the original image be for 100% width so it is responsive?

    What size should the original image be for 100% width so it is responsive?

    Please check these documents for details :
    https://helpx.adobe.com/muse/how-to/muse-optimize-graphics-assets.html
    https://helpx.adobe.com/muse/how-to/muse-size-resolution-graphics.html
    Thanks,
    Sanjit

  • My sound has disappeared-what position should the toggle switch be in?  Also my e-mails sticks a lot of the time.

    My sound has disappeared - what position should the toggle switch be in?  Also, my e-mail sticks a lot of the time, same old problem, no solutions.

    Try this  - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.)
    Check your settings. The iPads have a small switch on the right edge. It can be used as a rotation lock to keep the screen from automatically reorienting itself as you move around, but you need to have the tablet’s settings configured properly. That same switch, right above the volume buttons, can also be set to function instead as a mute button to silence certain types of audio.
    If the switch is set to work as a mute button, you can change its purpose to “screen-rotation lock” by tapping the Settings icon on the home screen. On the Settings screen, tap General on the left side, and on the right side of the screen flick down to “Use Side Switch to.” Tap to select Lock Rotation or Mute to set the button’s function. Even if you set the side switch for your preferred use, you can still mute the Mini or lock the screen. Just double-click the Home button, and when the panel of apps appears along the bottom edge of the screen, flick the row from left to right with your finger. Tap the icon on the far left side of the row to either lock the iPad’s screen or mute the iPad’s alerts, notifications and sound effects. Music, podcasts and video are not muted unless you turn the volume all the way down.
    iPhone: Can't hear through the receiver or speakers
    http://support.apple.com/kb/ts1630
    http://www.atreks.com/app-no-sound-on-ipad-4-%E2%80%93-what-to-do/
     Cheers, Tom

  • Changing the IP address of the management interface

    Hi all,
    I need to make a change to a pair of Production wireless controllers. Basically the IP range that was assigned for the wireless LAN is no longer sufficient. The gateway for the controllers is a pair of Cisco 4500's that are running HSRP.
    I need to extend the LAN from a /23 to a /22. Unfortunately the range of addresses is completely different. To make matters worse I have to do this remotely, some distance away!
    The layer 3 interface on the switches uses .2 and .3 of the new address range with .1 as the gateway (standby ip).
    The controllers are setup as a Primary and Secondary device. With all the APs currently associated with the Primary.
    My plan was to change the IP address of the management and ap-manager (both are on the same subnet) on the Secondary controller, I'd then lose visibility of the Secondary controller, then change the IP addresses of the physical interfaces on the 4500's. Confirm reachabilty to the new IP addresses defined on the Secondary controller. Assuming this works, reconfigure the physical interfaces on the two interfaces to ensure the Primary is reachable again, make the IP changes to the Primary WLC, update the physical interfaces on the 4500's to use the new IP addresses and then both WLC's should be reachable. The AP's will hopefully have rebooted and obtained a new IP address from the new range defined for them.
    I'm really not sure of another way of doing this, other than adding a secondary IP address to the interfaces?
    I also wonder if there is a way to apply the initial configuration to the secondary controller, and if my changes don't work, reload the controller so it goes back to using the saved configuration and not the running configuration. Do the controllers support something similar to the 'reload in x' command like on Cisco switches? I've looked up the reset command but am not sure it achieves the same outcome?
    Any ideas?

    Hi Scott,
    Would you do the Primary or Secondary controller first? All the AP's are currently associated with the Primary controller.
    We don't have access to the console port on the controller remotely. We don't have a KVM/IP KVM there.
    What would be the safest method in your opinion?
    - Make the IP changes through the GUI on the Secondary controller.
    - Make the changes on the L3 switches.
    - Confirm reachability to the new ap-manager IP address and management IP address.
    - Adjust the configuration on the L3 switch so the Primary is reachable again.
    - Make the IP change through the GUI on the Primary controller.
    - Confirm reachability to the Primary and Secondary.
    Do the controllers support the 'reload in x' command or something similar? And is the 'Apply' command in the GUI like committing the change to the running-configuration but not the start-up configuration or if there is a major problem I can get somebody on-site to pull the power?
    Thanks

  • What Roles should the gwconnector user have in CRM

    Hi Guys,
    I have setup GWConnector etc and have assigned GWConnector user with full admin rights on the CRM system.
    I cannot find any document that tells me what roles this user must have etc?
    Could one of you guys either tell me what they should be - or point me to the right documentation as itu2019s not in the groupware setup guide only the AD stuff?
    Thanks

    Honeslty, that is up to you.  I have customers that start off WLC and AP all in the same subnet, but it is not necessary.  I also have customers that put the WLC mgmt in the 'server' VLAN, and the AP in their own.
    IMHO, I like the WLC to be in 'server' or 'secured' VLAN, then I put the AP in their own VLAN that is locked down to only getting DHCP and talking to the WLC.  that way if someone unplugs an AP and connects something they can't get anywhere.
    HTH,
    Steve
    Please remember to rate useful posts, and mark questions as answered

  • What size should the back-up drive be?

    I'm using a lacie 1TB External firewire drive to back-up my 250gig iMac, I mostly use the mac for email, photos, home use etc. (The drive is almost full, using 230 gig). (Yes I know that's too full and I plan to put in a 500 gig drive). I upgraded to leopard about a month ago and set up time machine recently. There are 17 backups- "lines" in the time machine "star wars" screen- on the external drive totaling 700 gig of data!!
    I have not added any pictures or large files since beginning to use Time machine. Should the time machine backups use that much space? I thought after the initial back-up time machine only keeps record of the changes.? Using CCC I could have cloned the hard drive three times and still have room left!
    Does the large amount of HD space used to back-up sound ok for only a 250 hard drive?
    Joe

    Many users here recommend that your TM volume be about two and a half times the size of the data on your main hard drive. So, if you have 400GB of data to back up, you should give TM a 1GB volume for backing up.
    But in my experience, how much space you need really depends on your computer usage patterns. My weekly backups go all the way back to January 2008, when I first started. My main hard drive has 115 GB used of 148 GB total. My TM backups of that disk total 168 GB on a 212 GB partition. So I have never needed to have nearly as much backup space as the 2.5 multiplier recommendation.
    I try to manage my computer use so that Time Machine is not backing up files I do not want backed up, and is not backing up stuff twice if I move files to a different location. I rarely work with large files (no photoshop, no Final Cut Pro, etc). When I do have large files, they usually start in my Downloads folder. If I want to keep something I download, I eventually move it to a different location. To prevent TM from backing it up twice and unnecessarily using up space on the TM drive, I exclude my Downloads folder from being backed up. I'll let TM back it up after the download is in its new permanent location.
    I don't really consider it a big deal to not have backups of the contents of my downloads folder. I figure that if my hard drive breaks and I lose all of my downloads, I can just download them again.

  • What is with the user interface?

    Hi all,
    Just downloaded PSE8 to see if I want to upgrade from PSE6. Not really sure yet. For openers you cannot dump the 'Welcome Screen' and the choices are, you are going to get it whether you like it or not. Now for the 'user interface adjustment' under the Preferences>General tab. Great you can make it 'light'. I do like that, it's not as light as my old PSE5. I could never figure out why Adobe went to a black user interface?   However, when you do make the user interface 'light', all the necessary buttons ie. file, edit, enhance, layer, etc. are so black you can't find them, let alone read them.   It's sort of like hit or miss. I think the buttons should display white lettering when you change the user interface to light. You know, just so you can find them, either that or make the buttons in braille.   Well that's my rant and question on PSE8. Why can't the programmers think of this stuff?
    John

    For openers you cannot dump the 'Welcome Screen' and the choices are, you are going to get it whether you like it or not.
    You can make shortcuts on your Start menu or desktop to the Organizer and the Editor, bypassing the Welcome Screen entirely:
    http://www.johnrellis.com/psedbtool/photoshopelements-6-7-faq.htm#_PSE_7_Welcome
    The paths are slightly different in PSE 8, but you should be able to find them.

  • What I should use an Interface or a Procedure

    Hi all,
    Can you please suggest which ODI object can be used to execute this following query.
    Procedure or number of interfaces ?
    Insert Into travelTop100
    Select travel01, CountOD, rank(CountOD, travel01) As Top100
    From
    (Select travel01, Sum(CountOD) AS CountOD
    From
    (Select travel02, travel01, count(*) As CountOD
    From b
    Group By 1,2) tab1
    Group By 1) As T1
    QUALIFY Top100 <= 100;
    currectly we are using Procedure , can it be done through Interfaces ?
    and also I would like to know which one is the best approach or kind of best practice
    regards,
    Palash Chatterjee

    Sutirtha,
    Thanks for ur reply,
    1) Procedure is a kind of option where we can not get the actual cause of error if anything goes wrong.
    So for a better proggramming practice we use to have Interfaces instead of procedure, only toughest
    one are being done through procedures.
    2) DB object is again a mentanance issue because it's going out of scope from ODI. movement of
    Code from DEV to QA to PROD is needed an extra effort
    Please let me know is this a correct way of doing things in ODI ?
    If this is possible using interfaces then how I should proceed ?
    regards,
    Palash Chatterjee

  • I have created a form saved it then attached it to an email and sent it out. The form arrived and can be opened but how is it returned to me once it is filled in. What steps should the person getting the form follow?

    I need help in learning the steps to follow after the fillable form has been filled in and I want to return it to the sender. It arrived as an attachment to an email.

    There are various was to return a filled-in PDF form but many require some detailed information about what product the person filling in the form will be using.
    As noted above the form can be filled out and faxed or snail mailed to you.
    Since Acrobat 3 the form could be submitted to a scripted web page and have the web server perform the tasks necessary to return the data to you.
    Since Acrobat 6 the creator could add special "Extended Form Rights" to the form so users with Reader version 5 or better could save the form and email the form.
    For mobile devices the app the user will be using will determine how or if the form can be returned.
    Do not allow users to use Apple's Preview application on the Macintosh. It will corrupt the form in many ways.

  • What version should the GW 2012 SP2 C1 snapins show?

    I just updated from GW 2012 Sp1 to Sp2.
    All went OK, but I was thrown off by the version of the C1 snapins.
    After installing Sp2, I launched C1 and found that the snapins displayed "2012 SP1"
    I thought that something must have gone wrong with the admin install, so I installed that component again from GW's ./install but it still didn't help..
    I eventually broke C1, and every time I tried to run it with the GW snapins I received the dreaded java errors during snapin initialisation. The only way I could get C1 working again with GW snapins was to remove NOVLc1Linuxjre (rpm -e), NOVLc1 (c1-uninstall.sh), and novell-groupwise-admin-12.0.2-108211 (rpm -e), then reinstall them in this order:
    1. NOVLc1Linuxjre-1.5.0-11
    2. NOVLc1-1.3.6-1
    3. GW2012-ISO/admin/novell-groupwise-admin-12.0.2-108211.i586.rpm
    My issue most certainly was related to the jre version, which needs to the correct one before installing C1.
    But still C1 displays the GW 2012 snapins as "2012 SP1", and another 12.0.2 server shows the same; so is there no update to the snapins for version 12.0.2?
    - Gordon

    gordon mzano wrote:
    > I've since raised it as a bug, as I'm certain others will be caught by
    > this red herring during their post update/upgrade checks.
    This is a known issue.
    Your world is on the move. http://www.novell.com/mobility/
    We know what your world looks like. http://www.novell.com/yourworld/

  • At what point should the storage pool be connected to a replacement DPM server?

    I have backed up the DPMDB and  SQL DB from our "old" DPM server, removed it from the domain, and installed the same version, DPM 2007, SP1, on a new server with the same FQDN.  At what point do I connect the storage pool to the new server? 
    Before restoring the db, or after restoring the db but before doing a dpmsync?  Nowhere in the sea of documentation on migrating and upgrading have I found that little detail mentioned.  Please help!

    Mike, I'm doing another DPM rebuild and upgrade, and I connected the storage pool too soon.  Can I save the situation, or do I need to detach the disks, uninstall DPM, delete the db, reinstall, restore the db from the previous backup, and then attach
    the disks and sync?  Thank you! 

  • What size should the podcast picture sent itunes be?

    I sent a podcast out and the picture was either too big or too small.
    Please take a look and let me know what you think.
    Here is my url if you want to take a look.
    http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=21276337
    Any advise would be great!
    Thanks
    Pepe

    I tried to look at your podcast but iTunes said that it is not current available in the U.S. store.
    Anyway, if you are referring to your podcast series "artwork", in Apple's Technical Specification here:
    http://www.apple.com/itunes/store/podcaststechspecs.html
    ...it says:
    "iTunes prefers SQUARE .jpg images that are at least 300 x 300 pixels, which is different than what is specified for the standard RSS image tag."

Maybe you are looking for

  • Aperture wont open on 24" intel core 2 duo

    Have just recived my new imac and have successfully installed all my old software: CS1, Office etc. However when i installed my version 1 copy of aperture i managed to install it as always, yet when i come to open it up i get an error message saying

  • How do I get home page window to appear when opening FF?

    How do I get my homepage window to appear when I open FF? When I go to the dock and click on the FF icon, ''Firefox ''appears in the menu bar but there is no home page window showing. I have to go to ''File'' and select ''New Window'' to get to my ho

  • Regarding Target Node creation in Target message

    Hi, I am trying to dynamically control the appearence of a node(occurence 0..1) in the target structure using the graphical mapping. Source structure looks like. Source(occurence 1..1)     Node1(occurence 0..1)       Rec1(occurence 0..1)       Rec2(o

  • Rule-based transformations perfomance

    Hello. Oracle 9.2.0.8. We were tuned a replication on Oracle Streams. There are 1 capture process and more than one apply processes. We need to hide some columns in apply databases, for example, replace it with *. Now we use triggers on apply schemas

  • Why do I get an "untrusted connection" message when trying to access Google?

    This seems to happen a few times a week. Usually, I'm trying to do a search, and then no Google sites will work - mail, maps, whatever. I have a Mac, my time zone is correct, and I never add an exception because I don't understand why Google of all s