AP On Different Vlan Than Controller

I have a 5508 controller at our headquarters and am installing some 3502 AP's at a remote branch. Unfortunatly, the remote branch has a different Vlan setup for some reason and the vlan that is used for the WLC (90) is designated for telephony at this branch. Can I put the AP's on a different VLAN (10) without having any issues? I will still use DHCP option 43 to point them back to the controller. Below are the configs for the WLC interfaces and what I am proposing for the AP interfaces:
WLC Config
interface GigabitEthernet1/1/38
description WLC01
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 90
switchport trunk allowed vlan 1,10,50,90,91,390,410-413,610-613,800,810,811
switchport mode trunk
channel-group 5 mode on
interface GigabitEthernet1/1/39
description WLC01
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 90
switchport trunk allowed vlan 1,10,50,90,91,390,410-413,610-613,800,810,811
switchport mode trunk
channel-group 5 mode on
interface Port-channel5
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 90
switchport trunk allowed vlan 1,10,50,90,91,390,410-413,610-613,800,810,811
switchport mode trunk
AP Interface Config
interface GigabitEthernet1/0/1
description *** Access Point AP001 ***
switchport access vlan 10
switchport mode access
spanning-tree portfast
Will this work?

Hi Pat,
When deciding to do LOCAL mode or CENTRAL SWITCH mode you need to consider a few items:
1) NAT -- If there is a NAT between both locations almost all customers would rather LOCAL mode. Reason being is the ability to access local resources without nat issues. Remember, central model has all traffic and IP addressing coming from the main office.
2) Internet / Main office connection - If the remote office is on a MPLS for exmaple. Using local switching is reartly used becuase if you lose the conenction with the main office you have bigger issues then having wireless access.
These are the 2 questions my customers always look at ...
I hope this helps...

Similar Messages

Nexus1000v: Mgmt Port on different VLAN than host

I am setting up a pair of Nexus 1000v switches. As per the Cisco
documentation, I have the management port in the system-uplink
port-profile. However, currently, this management port is in the same
production VLAN as most of our servers. I would rather have the
management in an separate VLAN for security and reliability reasons.
Also, as I cannot assign a VLAN to both the system-uplink and the
data-uplink port-group, this means all of the server traffic will be
using the system-uplink port-group. This does not sound logical.
My question is:
1. Does the management port have to be in the same VLAN as the VM Host
server?
2. If is does, what are the implications of putting the management port
on the data-uplink port-group?
3. OR, if (1) is YES, then what do you think about putting the VM Hosts
(ESXI) on a separate VLAN than the virtual servers?
Note: I have been playing with svs domain mode l3. But as I cannot even
ping the gateway, I haven't had much success.

I would say you should seperate it.
One VLAN Management (mabye in ESX Managemt or Switchmanagement VLAN)
One VLAN for Packet & Contrl.
Others for Data (server, user traffic)
Seperate Management ist just for security reasons
The others should be seperated, because the are very important to let the nexus Work, If packets are lost, the hole nexus will get trouble to work.
Additional you should think about QoS if you don't use a seperate NIC for that traffic. I would suggest to use a bundle of NIC's for evetyhing and work with QoS to be High Available.
Thats my point of view after discussion in a nexus training and with a cisco technician.
regards,
Sebastain

Same SSID, different vlans

I currently have a 4402 in place, with my main office building working fine.
We are looking at bringing in the wireless at 4 other sites, but we want to use the same SSID.
How would I go about assigning different vlans (networks) to the same SSID.

You can use the "AAA Override" feature on controller. You need to have different dynamic interfaces for different vlans configured on the controller. After sucessful authentication, radius server could pass the dynamic interface information to the controller and controller can put users to different vlans according to the feedback from radius server:
http://www.cisco.com/univercd/cc/td/doc/product/wireless/control/c44/ccfig40/c40sol.htm#wp1086421
Zhenning

Multicast Does not work between different VLANS

Hi,
I have problems with multicast. On the same VLAN i can see the SAP announcement in VLC and play, but on different VLAN i can see SAP but i cant play it. The play turn to pause and the video doesn´t appear.
I have 2 Cisco 6500 switch CORE with GLBP configured but not working. In the second switch i have all interfaces in shutdown. The first core switch have L3 routing enable.
The Global configurations:
ip multicast-routing.
I have the transmitter PC on vlan 51 i transmit to 230.0.0.50 group an im trying to recive on vlan 80. The vlans configurations are:
Vlan 51
ip address x.x.31.254 255.255.255.0
ip pim sparse-dense-mode
Vlan 80
ip address x.x.80.1 255.255.255.0
ip pim sparse-dense-mode
I have 2 Cisco 2960 (L2 only) for the access.
The principal commands outputs are:
CORE1#show ip mroute | inc 230.0.0.50
(*, 230.0.0.50), 01:50:50/00:02:21, RP 0.0.0.0, flags: DC
CORE1#
CORE 1
interface Vlan1
ip address x.x.1.1 255.255.0.0
ip access-group 101 out
no ip unreachables
ip pim sparse-dense-mode
mls rp ip
interface Vlan51
ip address x.x.31.254 255.255.255.0
ip access-group 151 out
ip helper-address x.x.x.x
ip helper-address x.x.x.x
no ip unreachables
ip pim sparse-dense-mode
mls rp ip
interface Vlan80
ip address x.x.80.1 255.255.255.0
ip access-group 150 out
no ip unreachables
ip pim sparse-dense-mode
glbp 80 ip x.x.80.254
glbp 80 timers 5 18
glbp 80 timers redirect 600 7200
glbp 80 priority 254
glbp 80 preempt delay minimum 60
glbp 80 authentication text glbpkey
glbp 80 forwarder preempt delay minimum 60
CORE2
interface Vlan1
ip address x.x.1.4 255.255.0.0
ip access-group 101 out
no ip unreachables
ip pim sparse-dense-mode
mls rp ip
interface Vlan51
ip address x.x.31.2 255.255.255.0
ip access-group 151 out
ip helper-address x.x.x.x
ip helper-address x.x.x.x
no ip unreachables
ip pim sparse-dense-mode
shutdown
mls rp ip
glbp 51 ip x.x.31.254
glbp 51 timers 5 18
glbp 51 timers redirect 600 7200
glbp 51 preempt delay minimum 60
glbp 51 authentication text glbpkey
glbp 51 forwarder preempt delay minimum 60
interface Vlan80
ip address x.x.80.2 255.255.255.0
ip access-group 150 out
no ip unreachables
ip pim sparse-dense-mode
shutdown
mls rp ip
glbp 80 ip x.x.80.254
glbp 80 timers 5 18
glbp 80 timers redirect 600 7200
glbp 80 preempt delay minimum 60
glbp 80 authentication text glbpkey
glbp 80 forwarder preempt delay minimum 60
end
Someone can help?
Thanks,
Alfredo

Hi johnd...
Im using VLC 1.1.2 (i can not update because i have a DVDT2 card to capture the digital terrestrial television and it only work in this version). I have all the firewalls down.
This is the output for the show ip igmp snooping groups on the 2960.
80 230.0.0.50 igmp v2 Gi1/0/21, Gi1/0/24
Port G1/0/21 is where the receiver is conected and the 24port is the trunk.
Jon, i revert and this is the output. I put the ip pim rp-address the same of the lookpback that i create previously.
(*, 230.0.0.50), 00:37:46/00:02:19, RP 192.168.230.230, flags: SJC
Incoming interface: Null, RPF nbr 0.0.0.0
Outgoing interface list:
Vlan80, Forward/Dense, 00:09:52/00:00:00
The strange thing is that I have more than 40 vlans and it only fail in some vlans like 80.

How to generate & publish webhelp html files in different folder than default folder

Hi All,
I am new to robo help. I have a requirement to generate & publish webhelp html files in a different folder than default folder.
Could anyone please tell me the steps to change the folder
Thanks
Rashmi

You change the generate folder and filename in the first field on the first page of the wizard. It must be a folder on your hard disk.
You change the publish folder in the last page of the wizard. Anywhere you like.
See www.grainge.org for RoboHelp and Authoring tips
@petergrainge

HT201361 Is it possible to save the screenshot files to a different folder than desktop. How can I change the folder?

Is it possible to save the screenshot files to a different folder than desktop (that is the default). How can I change the destination folder? Thank you, Sal

To change the screenshot capture location to a new place on your Mac, first think of a location that would serve you properly. We like to place ours in a "Screenshot" folder located inside of the User's "Pictures" folder. To change the location to this new location, open the Terminal and enter the following command:
defaults write com.apple.screencapture location /Users/[u]/Pictures/Screenshots/
Replace "[u]" with the name of the user on your system. Once you have entered this command, let's restart the screen capture utility by restarting the SystemUIServer by entering the following command:
killall SystemUIServer
You can optionally log out and back in instead of entering this second command, thus restarting the SystemUIServer. Once restarted, all screen captures taken from here on out will end up in your /Pictures/Screenshots/ folder in the User's home folder on your Mac.

How to use different Vlans outside another gateway in sg-300 28?

dear all
how shall i use different vlans outside another gateway in sg-300 28?
Example:
vlan2 192.168.2.0/24 gateway 192.168.2.1 outside router gateway 192.168.2.254
vlan3 192.168.3.0/24 gateway 192.168.3.1 outside router gateway 192.168.3.254
should me doing in sg-300 28?
thanks.

Hi Amin,
Leave the switch in Layer 2 mode
Cable VLAN2 to the to the outside router gateway 192.168.2.254 interface
cable VLAN3 to the to the outside router gateway 192.168.3.254 interface
Excuse the rough diagram
Make the port going to the outside router gateway, untagged in the vlans they will be transporting. (I am assuming that the router gateway is not vlan aware.)
IP hosts will most likely get DHCP from the router gateway. The IP hosts will then automatically send IP traffic to the router gateway.
VLAN 1 in my switch, could then be the only interface within the switch that has a IP address associated with it, for management purposes.
I can see from you post, that English is not your first language, if you want to speak to someone, you can ask a question by going to;
www.cisco.com/go/sbsc
regards Dave

Computer has different name than Itunes for Ipod Touch

I have an Ipod Touch 4th Generation 32gb. I have had no problems with it or with Itunes. My Mom came last Saturday to visit and she needed to charge her Ipod Touch so I hooked it to my computer where I always have a cord and charged it for about 45 minutes or so. I have no problem with my Ipod or with Itunes BUT when I go look at the device now on my computer,when it is connected to USB cord, it show "Marys Ipod" now instead of "Steves Ipod". In Itunes, it is still "Steves Ipod" and I can sync and all but I really want to get rid of "Marys Ipod" off my computer even though when I open it up, it is my ipod, just mislabed. I know because it has my pictures and her's is only 8gb. My Ipad2, is fine when I hook it up to the USB cord, It says "Steves Ipad" but when I hook my USB cord to my ipod touch, it still reads "Marys Ipod". Is this something I should be concerned about or is it not worth the hassle of trying to restore, etc? I have tried to change the name, but Windows won't allow. I do have Windows 7. I have also got the new update on Itunes and the new software(5.0) version.
I am stumped. I have googled this and have searched for over 3 hours today on how to fix this. Ready to bang my head against the wall. I have did a reboot on Ipod, I have restarted the computer. I have not reinstalled anything including Itunes.
Does anyone have any suggestions on what I can do? I would sure appreciate the help. Thanks in advance.

shellymoe
Currently Being Moderated Re: Computer has different name than Itunes for Ipod Touch
Jul 22, 2012 12:23 PM (in response to Toploader21120)
I just found the answer to this after hours of searching online. Make sure your iPod is hooked up to your computer & turned on.
Click on "Start" and in the search box type "regedit". This will display a program called "Registry Editor". Open it.
Click on the "Edit" tab and select "Find...". Type "Mary" in the search box and click "Find Next". It will bring up a list of everything that has "Mary" in it. (You may have to click on "Find next" under the "Edit" tab in order to find the associated items that have something to do with both "iPod" and "Mary".) What you need to pay attention to is not the NAME, but the DATA column. For me, the wrong iPod name was listed in 2 places in the data column. The actual names of those 2 items were "FriendlyName" and "Label".
Once you find the associated items that have to do with both the iPod and "Mary", right click on one of them. Select "Modify...". A box will open giving a "Value Name" box and a "Value Data" box. The "Value Data" box should say "Mary's iPod". All you have to do is change it to "Steve's iPod" and click "OK". Repeat the "Modify..." and renaming of the "Value Data" steps for every item that says something about "Mary's iPod".
Close the Registry Editor. Open "my computer" and see that it changed the name of your iPod back to "Steve's iPod".
Best Answer So far.....it really works...Thanks a million

Install SAP IdM MSSQL on different drive than "C:"

We are in the process of building our IDM systems and want to install the MSSQL DB on a different drive than C:. Has anyone else done this and what changes to the _SqlAuth.vbs & SQL4SAP.vbs (which _SqlAuth.vbs called during installation) are required to facilitate this.
Thanks in advance.

I am not sure what the problem here is.
The MMC files can be installed whereever you want.
Where the DB files are located is controlled by SQL Server.
If you already have the DB on C:\
Just detach, move and attach again.
That should do the trick.

How can I make a link a different color than the other links according to the current page?

Hello. I have created a navigation bar. And I would like to style the links to have the current page link a different color than the other links. For example, if all of the links have a black background, I would like to have the current page link to have a white background. The reason that I would like to style them this way is so that the visitor knows what page is being visitied.
I tried different ways but all of them did not show to make any change to the links. This is what I have so far. The links work, but all of them have the same color and background. When on the home page, I would like to have the home page link to have a white background with black letters. I would appreciate your advice.
<head>
ul {
    list-style-type: none;
    text-align: right;
    padding-top: 10px;
    padding-bottom: 6px;
    padding-right: 10px;
li {
    display: inline;
a:link {
    color: #FFF;
    background-color: #000;
    text-align: center;
    padding-top: 8px;
    padding-right: 8px;
    padding-bottom: 8px;
    padding-left: 7px;
    text-decoration: none;
a:visited {
    color: #FFF;
    background-color: #000;
    text-decoration: none;
a:hover {
    color: #000;
    background-color: #FFF;
    text-decoration: none;
a:active {
    color: #FFF;
    background-color: #000;
    text-decoration: none;
a.menu:link {
     color: #000
     background-color: #FFF;
     text-decoration: none;
</head>
<body>
<div class="navigation">
    <ul>
        <li class="menu"><a href="index.html" target="_self">HOME</a></li>
</body>
Thank you very much.

http://www.itworld.com/development/351097/setting-active-menu-item-based-current-url-jquer y

I have an itunes account. However, I need to copy music onto a different iPod than my own. How do I do that? Do I need to create a separate iTunes account for that iPod?

I have an itunes account. However, I need to copy music onto a different iPod than my own. How do I do that? Do I need to create a separate iTunes account for that iPod?

An account means an iTunes Store account which is an online service. Do you mean that, or do you mean a library on a computer?
iOS devices can only be synced to one iTunes library at a time. You can sync that iPod to your account but it will wipe everything currently on it.
iTunes: Syncing media content to iOS devices and iPod - http://support.apple.com/en-us/HT201253 - detailed example: https://discussions.apple.com/message/18860187#18860187
If you use manual syncing, you can sync items from more than one iTunes library to your iPod. (You can sync iPod touch, iPhone, and iPad with only one iTunes library.) When manually managing content, you can add content from multiple libraries to your iPod or iPad. Even when manually managing music, some content may be available from only one library at time. This includes all content on iPhone and video content on iPod and iPad. http://support.apple.com/kb/PH12113 and http://support.apple.com/kb/HT1202
I could post another 2 pages of stuff trying to cover every possible scenario. It would help if you let us know exactly what you want to do. Are you trying to sync just a few songs (like giving them to a friend which is something iTunes is deliberately set up not to do)?

Can i lock an app on my iPhone with a different password than the one i use to lock my phone?

can i lock an app on my iPhone with a different password than the one i use to lock my phone?

This should work; one of my e-mail accounts is my own domain through Gmail. Make sure your username is set to your full e-mail address (like [email protected]) rather than just your username.
Did you set it up on your iPhone as an IMAP account, or as a Gmail account? It should work perfectly using the Gmail setting. It can work as IMAP, but you need to jump through a few hoops to get there.

When Pages has to update it asks me for a different email than the one I use, What do I do?

When Pages has to update it asks me for a different email than the one I use, What do I do?

Update it from that Apple ID, or delete and redownload it.
(111534)

Exposure to the right results in different TRC than normal exposure

Exposure to the right is advocated by most experts to improve tonality and dynamic range. On the Luminous Landscape a photographer noted that ETTR all the way to the right followed by negative exposure correction in ACR produces a different image than is produced by normal exposure, and that he preferred the latter image.
Luminous Landscape Thread
Most responders to this post postulated that, since ACR is operating on linear data, underexposure by 1 EV followed by a 1 EV boost in ACR would produce the same results.
I had some exposures of a Stouffer step wedge. The first was exposed so that step 1 has a pixel value of 250 when converted with ACR at default settings into aRGB. This is exposed to the right as far as possible. A second exposure placed the same step at 221, and this step was brought back to 250 in ACR, which required an exposure compensation of +1.05 EV.
If you compare the resultant images in Photoshop using the difference blending mode, the differences too dark to make out on the screen, but can be detected with the eye dropper. In this image, normal exposure to the right is on top, and the difference between normal exposure and underexposure followed by a boost of 1 EV in ACR is shown on the bottom.
The different resulting tone response curves are better shown by Imatest plots of the two images. As is evident the TRCs are different, contrary to my expectation. Comments are invited.

The ETTR Myth
ETTR is short for expose to the right. Some folks have promoted it as a replacement for traditional exposure metering. The premise is that you can validate camera metering by simply reading the histogram in the cameras preview window.
Unfortunately, it is based on some basic misunderstandings about digital photographic technology. The first misunderstanding is the premise that each bit level in a digitally encoded image represents an exposure stop. The second misunderstanding is the premise that all digital cameras capture light in a perfectly linear fashion. The third misunderstanding is the premise that the histogram represents the raw image data captured by the camera. I will briefly address each of these.
Any correlation between exposure stops and digital bit levels can only be accidental at best. The total exposure range in a scene or an image is correctly known as the dynamic range. The dynamic range of digital cameras is wider than most folks assumes and usually equal to or better than film or paper. It can be defined in terms of tone density, decibels, or exposure stops. It is a function of the optics and sensor electronics in the camera. The few cases where an accurate range is provided by the vendors, it varies from 8 to 12 f/stops.
The image data is converted from analog measurements by the analog/digital (A/D) circuits early in the capture. This can wind up as an 8-bit, 12-bit, 14-bit, or even 16-bit digital value depending on the camera and its user settings. It is simply a number that has been digitized. Any correlation between bits and exposure levels is pure speculation, end of subject.
Second, the digital capture of light is not strictly linear. It is true that the silicon sensor itself will capture light in a very linear fashion. But this ignores reciprocity at the toe and heel of the extremes, the quantum efficiency of the substrate, and most importantly it ignores the optical filters in front of the sensor. If the color filter array were linear it would be impossible to reconstruct colors. And these are not the only optical filters in your camera. Then, the A/D circuits have gain controls based on the current ISO setting. And some A/D circuits perform some pre-processing based on the illuminant color temperature (white balance) and limited noise reduction based on the ISO setting. The point is that there are many steps in the pipeline that can introduce non-linearity.
Finally, the image in the preview window has been color rendered and re-sampled down to a small size. This is the data shown in the histogram. The camera can capture all colors in the spectrum, but the rendered image is limited to the gamut of an RGB color space. So, in addition to exposure clipping the histogram will include gamut clipping. This is also true for the blinking highlight and shadow tools. This might imply an exposure problem when none exists. There is no practical way to map all the data in a raw image into a histogram that you could use effectively in the preview window.
If you capture an image of a gray scale chart that fits within the dynamic range of the camera, at the right exposure, you can create a linear graph of the raw data. But if you underexpose or overexpose this same image, the graph will not be linear and it is unlikely that software will be able to restore true linearity. End of subject.
If you typically shoot JPG format, the histogram will accurately represent the image data. But clipping can still be from either gamut or exposure limits. If you typically shoot RAW format, the cameras histogram is only an approximation of what the final rendered image might look like. There is a significant amount of latitude provided by the RAW image editor. This is probably why you are shooting RAW in the first place.
So, in closing, I am not saying that histograms are bad. They are part of a wonderful toolkit of digital image processing tools. I am saying ETTR is not a replacement for exposure metering. If you understand what the tone and color range of the scene is, you can evaluate the histogram much better. And if you master traditional photographic metering, you will capture it more accurately more often.
I hope this clears up my previous statements on this subject. And I hope it explains why I think ETTR and linear capture are based more on technical theology than on technical fact.
Cheers, Rags :-)

SQL SERVER 2014 - Project consistency check failed. The following inconsistencies were detected: package.dtsx. has a different ProtectionLevel than the project.

I am getting the following error when I right click on a package in solution explorer and execute using SQL Server 2014:
Project consistency check failed. The following inconsistencies were detected: package.dtsx. has a different ProtectionLevel than the project.
Luckily my solution only has 10 packages. I have verified and re-verified that everyone is set to dontsavesensitive.
I have verified and re-verified that the solution has the protection level to dontsavesensitive.
What on earth is going on here? I am using windows authentication and have no need for the package to save any sensitive information, nor should there be any.
Can someone please help me out here?
The Degenerate Dimension

Hi MMiligan,
Just as the error message said, the exactly issue is that the package package.dtsx has a different ProtectionLevel property value than the project.
So please double check the value of project ProtectionLevel property, like DontSaveSensitive, then make sure all packages in the project use the same ProtectionLevel value.
If there is still an error message indicated that some packages use a different value, please right-click the indicated package to select View Code, then make sure there is a line like below(the DontSaveSensitive
protection level corresponds to the value of 0):
DTS:ProtectionLevel="0"
The following similar thread is for your reference:
http://stackoverflow.com/questions/18705161/protection-level-changed-mid-project-now-project-wont-build
Thanks,
Katherine Xiong
If you have any feedback on our support, please click
here.
Katherine Xiong
TechNet Community Support

AP On Different Vlan Than Controller

Similar Messages

Maybe you are looking for