Clarification regarding WLC 's interfaces

Hi Netpros,
I am about to deploy WLC and LWAPP solution. I have only done Autonomous set up in the past and so would appreciated some clarification regardig the below points:
1.- switch port connected to LWAPP access points must be an access port (not trunk) correct ?
2.- switch port connected to WLC 44+ must be a trunk (assuming I need to map SSID to different vlans) correct ?
3.- WLC 44+ port can only be connected to a gigabit port .. so I can't change its speed in order to connect it to a fastethernet port .. correct ?
4.- What exactly is Management interface, service port, AP manager ..etc so many names I am getting confused.
5.- What is layer 2 and layer 3 mode .. I am also confused here.
6.- If I want all my LWAPP access points on vlan 10 (for argument sake) .. which WLC's interface do I need to place on vlan 10 in order for the access points to register ? I want to have LWAPP and WLC on the same vlan but with so many inteface names I don't know which one I have to use (AP manager ? perhaps )
7.- If I want SSID 1 (vlan 11), SSID 2 (VLAN 22). How do I configure the WLC interfaces (which one do I need to use .. create ..?) so that clients using SSID 1 can communicate on its respective VLAN 11
8.- Microsoft IAS and PEAP .. do I need to set up every access point as radius client ? or do I only need to configure the WLC as radius client .. and if so which WLC interface's IP address do I need to use on the radius server (IAS)
I apologize for so many questions and really appreciate your feedback which - as always - I am sure will make things clear.
Cheers,

1.- switch port connected to LWAPP access points must be an access port (not trunk) correct ?
(A) Correct, Cisco recommends no more then 70 or so APs per VLAN. You can do more then 70 and in fact put all of your APs in the same VLAN. But if the controller ever goes dark it could take a bit longer for the APs to join.
2.- switch port connected to WLC 44+ must be a trunk (assuming I need to map SSID to different vlans) correct ?
(A) Yup yup. You can truck the switch or Echannel it and use LAG on the controller.
3.- WLC 44+ port can only be connected to a gigabit port .. so I can't change its speed in order to connect it to a fastethernet port .. correct ?
(A) Yup yup. again. GIG only. Wont connect otherwise.
4.- What exactly is Management interface, service port, AP manager ..etc so many names I am getting confused.
(A)
Manager is the IP address you will use to manage the controller. Its the way the controller see's the world.
AP Manger is used for the APs to phone home to. This interface is not pingable. Nothing special with this interface.
Service Port ... think about out of service management for the WLC. Suppose you lose network connection to the WLC manager interface. You can jack right into the service port. I have also put this on the network before so you can still access the WLC remotely.
5.- What is layer 2 and layer 3 mode .. I am also confused here.
(A)
Layer 2 --- Think about deploying your entire WLAN on one subet. So your APs and WLC are all in the same subnet.
Layer 3 -- This is used when you have your APs on other subnets ect..
You can actually console into the LWAPP ap during the join process. you will see the AP send a 255.255.255.255. This is a join attempt by the AP to find a controller on its subnet.
6.- If I want all my LWAPP access points on vlan 10 (for argument sake) .. which WLC's interface do I need to place on vlan 10 in order for the access points to register ? I want to have LWAPP and WLC on the same vlan but with so many inteface names I don't know which one I have to use (AP manager ? perhaps )
(A) The beauty of the WLC is you dont have to have the APs on the same VLAN as the controller, unless u are layer 2. The access layer teh APs are on just need to be routable to the AP interface.
7.- If I want SSID 1 (vlan 11), SSID 2 (VLAN 22). How do I configure the WLC interfaces (which one do I need to use .. create ..?) so that clients using SSID 1 can communicate on its respective VLAN 11
(A)
You map the SSID to VLAN under the WLANs tab. You Create the wired side info (VLANS) under the controller tab
8.- Microsoft IAS and PEAP .. do I need to set up every access point as radius client ? or do I only need to configure the WLC as radius client .. and if so which WLC interface's IP address do I need to use on the radius server (IAS)
(A) Advantage of the WLC, you use the WLC as the client to a Raduis server. The management address..
I apologize for so many questions and really appreciate your feedback which - as always - I am sure will make things clear.
Cheers,

Similar Messages

Clarification regarding Shadow Table

Hi All,
Clarification regarding Shadow Table. FKK_GPSHAD is a shadow table that belongs to Business Partner. The doubts that i have is
What is Shadow Table?
What is the purpose of Shadow table?
Is it correct way to update Shadow table Manually(Not using any BAPi etc....)?
Is any BAPI available to update The above mentioned Shadow table.
Thanks in Advance..

Reclustering InfoCubes:
With reclustering, the InfoCube fact tables are always completely converted. The system createsshadow tables with a new clustering schema and copies all of the data from the original tables into the shadow tables. As soon as the data is copied, the system creates indexes and the original table replaces the shadow table. After the reclustering request has been successfully completed, both fact tables exist in their original state (name of shadow table) as well as in their modified state with the new clustering schema (name of original table).
You can only use reclustering for InfoCubes. Reclustering deactivates the active aggregates of the InfoCubes; they are reactivated after the conversion.
Reclustering DataStore Objects
Reclustering completely converts the active table of the DataStore object. The system creates a shadow table with a new clustering schema and copies all of the data from the original table into the shadow table. As soon as the data is copied, the system creates indexes and the original table replaces the shadow table. After the reclustering request has been successfully completed, both active tables exist in their original state (name of shadow table) as well as in their modified state with the new clustering schema (name of original table).
You can only use reclustering for standard DataStore objects and DataStore objects for direct update. You cannot use reclustering for write-optimized DataStore objects. User-defined multidimensional clustering is not available for write-optimized DataStore objects.
Pls chk this thread:
Shadow Table?
http://help.sap.com/saphelp_nw2004s/helpdata/en/47/5cf74153b6ca17e10000000a155106/content.htm
Hope this helps,
Reward points...

ISE and WLC dynamic interface group assignment ?

I have a somewhat large deployment coming up with several WLC dynamic interfaces assigned to an interface group, replicated across for multiple sites. I understand that ISE can return the VLAN ID to the WLC to place the client in, but if I'm using interface groups, this seems to negate the usefulness of the interface group to load clients across multiple VLANs. Not only that, but with the number of dynamic interfaces (VLAN ID's), multiplied by the number of sites, would seem to be overwhelming on the ISE side policy configuration.
Is it possible for ISE to return an Interface name/group to the WLC instead of just a VLAN ID ?
TIA

I understand that WLC 7.2 code can now accept the interface group name as a AAA override, which is great, but it doesn't specify the AAA source (ISE vs. ACS).
This is the example I'm questioning: (they use the VLAN ID only, instead of an interface name)
http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bba10d.shtml#topic17
Edit:
Found the correct Attribute Under "Adv. Attribute Settings" in the Airspace Authorization Profiles (Airespace:Airespace-Interface-Name).

I am facing problem regarding graphical user interface. I am using text box for editing files. I want to show the line numbers and graphical breakpoints along with text box. Can anybody help me in this? Thanks.

I am facing problem regarding graphical user interface. I am using text box for editing files. I want to show the line numbers and graphical breakpoints along with text box. Can anybody help me in this? Thanks.

Thanks for you reply.
But actually I don't want to show the \ (backslashes) to the user in my text box.
Ok let me elaborate this problem little more.
I want to show my text box as it is in normal editors e.g. In Matlab editor. There is a text box and on left side the gray bar shows the line numbers corresponding to the text. Further more i want that the user should be able to click on any line number to mark specific line as breakpoint (red circle or any graphical indication for mark).
Regards,
Waqas Ahmad

Needs Clarification Regarding Listener.ora file

I want a clarification regarding listener.ora file I've Listener.ora file and its content look like as:
# listener.ora Network Configuration File: C:\oracle\product\10.2.0\db_1\NETWORK\ADMIN\listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = C:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc)
(SID_DESC =
(GLOBAL_DBNAME = Oracle8)
(SID_NAME = ORCL)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 10.10.10.10)(PORT = 1521))
I can understand every entry in this file accept the following
*(SID_DESC =*
*(SID_NAME = PLSExtProc)*
*(ORACLE_HOME = C:\oracle\product\10.2.0\db_1)*
*(PROGRAM = extproc)*
*(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))*
Although rest of entries refer to network services(Database name) and host address and protocol etc.
what these above refere to.
Please clarify me in this.
Regards,
D.Abbasi

(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = C:\oracle\product\10.2.0\db_1)
(PROGRAM = extproc)
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
that about External Procedure, If you don't use "External Procedure" you can remove it, by the way you should avoid default configure.
http://download.oracle.com/docs/cd/B19306_01/network.102/b14212/advcfg.htm#sthref1331
http://download.oracle.com/docs/cd/B19306_01/network.102/b14212/advcfg.htm#NETAG0132
http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14251/adfns_extern_proc.htm#sthref1658
Sample create External Procedure:
http://surachartopun.com/2008/07/create-and-run-sample-external.html

Some clarifications regarding Aironet settings

Hi,
i need some clarifications regarding configuring Aironet stand-alone AP (in this case AIR-LAP1131AG).
Under Security->SSID Manager:
what is the purpose of Network ID?
Under Guest Mode/Infrastructure SSID Settings - what is the purpose of Set Infrastructure SSID?
and Force Infrastructure Devices to associate only to this SSID?
Cheers,

Assign a Service Set Identifier (SSID) to each VLAN configured on the AP. SSIDs enable endpoints to select the wireless VLAN they will use for sending and receiving traffic. These wireless VLANs and SSIDs map to wired VLANs. For voice endpoints, this mapping ensures priority queuing treatment and access to the voice VLAN on the wired network
For further information click this link,
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/4x/42nstrct.html#wp1098806

Needs Clarification Regarding Segments and Datafiles

Hi,
I want clarification regarding Segments, Datafiles and extents.
As we know that A segment is made of one or more extents and extents are composed of one or more datablocks in the HD.
Since all data are store in Datafiles which are composed of extents and datablocks. I want to know weather a table(Segment) can span to multiple datafiles or in a sigle datafile.
Regards,
D.Abbasi

And an easy way to check it by yourself :
SQL> create tablespace abbasi_tbs
2 datafile 'E:\ORADATA\DEMO111P\abbasi_01.dbf' size 1m autoextend off,
3           'E:\ORADATA\DEMO111P\abbasi_02.dbf' size 1m autoextend off;
Tablespace created.
SQL> create table abbasi_tbl (id number)
2 tablespace abbasi_tbs;
Table created.
SQL> insert into abbasi_tbl
2 select rownum as rn
3 from   dual
4 connect by level <=10000;
10000 rows created.
SQL> commit;
Commit complete.
SQL> select distinct file_id
2 from   dba_extents
3 where segment_name ='ABBASI_TBL';
   FILE_ID
         6
         7
or...
SQL> select distinct DBMS_ROWID.ROWID_RELATIVE_FNO(rowid)
2 from   abbasi_tbl;
DBMS_ROWID.ROWID_RELATIVE_FNO(ROWID)
                                   6
                                   7
SQL> select file_name from dba_data_files where file_id in (6,7);
FILE_NAME
E:\ORADATA\DEMO111P\ABBASI_01.DBF
E:\ORADATA\DEMO111P\ABBASI_02.DBF
SQL>Nicolas.
added the ROWID function usage
Edited by: N. Gasparotto on Jun 21, 2009 11:02 AM

WLC CT2504: Interface IP can not be used as internal DHCP server IP

Hello all,
I've got a new CT2504 controller with software version 7.0.220.0
Regarding to
http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080af5d13.shtml
I've tried to configure the internal DHCP on a dynamic-interface, but this is not possible:
(Cisco Controller) >config interface dhcp dynamic-interface vlan401 primary 172.16.x.3
vlan401 Interface IP can not be used as internal DHCP server IP
It works, if I use another IP (aka DHCP server) in the same subnet or in another subnet. It works also for the management interface.
(Cisco Controller) >show interface detailed management
Interface Name................................... management
MAC Address...................................... d0:c2:82:xx:xx:xx
IP Address....................................... 10.2.x.135
IP Netmask....................................... 255.255.255.240
IP Gateway....................................... 10.2.x.129
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 400
Quarantine-vlan.................................. 0
Active Physical Port............................. 1
Primary Physical Port............................ 1
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. 10.2.x.135
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No
L2 Multicast..................................... Disabled
Scopes are defined and Proxy is enabled.
(Cisco Controller) >show dhcp summary
Scope Name                   Enabled          Address Range
ap                               Yes      10.2.x.137 -> 10.2.x.140
intern                            Yes      172.16.x.20 -> 172.16.x.30
(Cisco Controller) >show dhcp proxy
DHCP Proxy Behaviour: enabled
Has somebody an explanation for this issue?
Thanks in advance,
Regard,
Robert

You can use the internal dhcp, but you need to set the primary dhcp as the management ip. So in your dynamic interface, your primary dhcp is configure with the wlc management ip address. Dhcp proxy also needs to be enabled and is enabled by default.
Thanks,
Scott Fella
Sent from my iPhone

WLC Virtual Interface config for a public SSL cert for Web Authentication

I'm trying to get a cert loaded on my 5508 WLC running 7.6.130.0 so when a Web-Auth users tries to authenticate they don't get the SSL cert error.
In the document "Generate CSR for Third−Party Certificates and
Download Chained Certificates to the WLC"
Document ID: 109597 it states the following
"Note: It is important that you provide the correct Common Name. Ensure that the host name that is
used to create the certificate (Common Name) matches the Domain Name System (DNS) host name
entry for the virtual interface IP on the WLC and that the name exists in the DNS as well. Also, after
you make the change to the VIP interface, you must reboot the system in order for this change to take
effect.
Here are my questions.
1. I have always had 1.1.1.1 as the address of the Virtual interface, should that change or can I leave it as 1.1.1.1?
2. In the "DNS Host Name" Field do I simply put the domain or the FQDN? Example. Company.com or hostname.company.com

Hi,
1) You can change that if you want. Normally it is non-Public and non-routable in your network.
2) Put the Host name for which you are going to give in your company DNS server where that Host name would be mapped to the Virtual ip address.
Regards
Dhiresh
** Please rate helpful posts**

Clarification on WLC "Best Practises"

Good morning guys,
I have been working on my organizations Wifi infrastructure and have had general success. However, there's always more than one way to skin a cat. The one right way and the half dozen half-assed ways! lol
My question is based on the following scenario:
I have my WLC and AP's all on a VLAN tied to my management interface.
I have clients associating with those AP's and the clients are being handed IP's in that same management VLAN.
I want to now create a guest WLAN that will send all the guest clients to the internet, bypassing the production network.
Based on this, is it better to have the WLC and Access Points which are on the management interface on a seperate vlan than what I have my clients connecting on?
Currently, everything's on vlan 130. The controller, the AP's and any clients. They're all on the same subnet/vlan 130.
So now, when I want to setup that new guest WLAN and have that on our "internet only" vlan, which is vlan 150 for example, how are they supposed to get an IP address issued when the AP's are connected to the POE switch and on access ports assigned to VLAN 130?
Everything's working great right now for the production WiFi.. but adding this new guest WLAN and having it use the same AP's is gonna be a challenge.
I don't think I'm going about this correctly. Can I get some direction please?
Thanks in advance.
Mike

Steve, you're easilly becoming my favorite member on this community!
Okay, so for medium sized org, I don't want the production WLAN linked to the management interface. That's an easy enough change. Thanks for the clarification.
As for the guest WLAN, I created an interface specially for the guest WLAN, assigned it to my "IE only" vlan and gave it an ip on that vlan. But the question remains, if the AP's are connected on switchports that are assigned to one vlan, can I expect that when a guest connects to a WLAN being advertised by that AP, that it will be able to reach the DHCP server for the "IE only" vlan?
Sorry if this sounds like a stupid question... sometimes the hamster falls off the little wheel.

WLC dynamic interface limit

Hi,
I have a WISM with sw version 4.0.179.11 wich I try to add more dynamic interfaces on. However I get the message " Can't create more than 64 entries".
I find in the deployment guide for WLC - quote: "Dynamic Interfaces are created by users and are designed to be analogous to VLANs for wireless LAN client device. The WLC will support up to 512 Dynamic Interface instances. "
Has anybody encountered this limitation before?
How can I add more than 64 interfaces ?
regards rolf

Hi.
I have a customer wth a WLC which has DHCP Proxy disabled and Primary & Secondary DHCP servers configured (external to the WLC).
The problem I've just started looking at is...if the Primary has run out of leasable IP addresses, the WLC doesn't appear to request one from the Secondary server.
It looks like (without any real investigation) the "I've run out of addresses" response from the Primary server is sufficient for the WLC to believe that the Primary is still on the network and it doesn't need to go to the Secondary.
I'll add more as and when I do more testing.

Unchained certificate for WLC management interface

Hi all ,
I want to know , how to generate unchained certificate for the managemetn interface of WLC ? . Whether Root CA will be giving this unchained certificate ?
Because WLC management wont support chained certificate..
Thanks,
Vijay.

Hello Vijay,
Just go through this short cisco doc regarding generating CSR for Third-Party Certificates and Download Unchained Certificates to the WLC:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml

Need clarification regarding select query

Hi,
I need a little clarification regrding a Select senario
I want to select data from table which have been minupulated between a certian date like between 1-DEC-10 to 31-DEC-10 and note that table does not have any time/date column. I've applied the following query to do this.
select * from TABLE_NAME where sysdate between to_date('01-DEC-10') AND to_date('31-DEC-10');
Would it work fine because I've tried it against a table and it returned me nothing however DML occur between time period.
Regards,
Abbasi

Abbasi wrote:
Hi,
I need a little clarification regrding a Select senario
I want to select data from table which have been minupulated between a certian date like between 1-DEC-10 to 31-DEC-10 and note that table does not have any time/date column. I've applied the following query to do this.
select * from TABLE_NAME where sysdate between to_date('01-DEC-10') AND to_date('31-DEC-10');
Would it work fine because I've tried it against a table and it returned me nothing however DML occur between time period.
Regards,
AbbasiAFAIK without log mining and auditing this is not possible.
http://download.oracle.com/docs/cd/B19306_01/server.102/b14215/logminer.htm

Clarifications regarding Logistics Invoice Verification

Hi SAP Gurus,
I just wanted to confirm with you something that I noticed regarding the behavior of SAP MM LIV:
1. It seems that for purchase orders with Account Assignment, you can change the Account Assignment Category in the LIV process. Say for example, I had a PO line item charged to a Cost Center; however, upon LIV, I can change the charging to say an Asset instead. I was just wondering why would SAP allow such transaction/s to happen? Wouldn't it compromise the integrity of the whole document trail (PO account assignment is different from the LIV)?
2. Is there a way to edit the Account Assignment for a Purchase Order line item even if that item has been fully received and invoiced? I checked with the standard test system that I have at the moment and I observed that you can still edit the other PO details (quantity, price) even though the PO line item has been fully GR'ed and LIV'ed. However, the Account Assignment field is set to Display only. I checked the field selection for purchase orders and found no connection (the Account Assignment field is set to optional for all relevant factors)
Hope to hear from you soon!
Best regards,
DeLo

Hi Delo,
Please find answers to your queries below in bold.
1. I was just wondering why would SAP allow such transaction/s to happen? Wouldn't it compromise the integrity of the whole document trail (PO account assignment is different from the LIV)? -
There could be some business scenarios in some organisations, where in Procurement team uses generic cost centre (header), which is specific to particular department or group, to procure. But at the time of Invoice Receipt, AP team knows exact cost centre or order, etc to post the amounts. To cover these kind of scenarios, SAP probably has provided the option to change acount assignment.
2. Is there a way to edit the Account Assignment for a Purchase Order line item even if that item has been fully received and invoiced? -
These field changes at various levels can be configured via t-code OME9.
a) IR Changeable - This field if selected will allow to change the account assignment of a purchase order item at the time of invoice receipt.
b) Acct. assg. changeable - This field is selected will allow to change account assignment for an item following goods receipt or invoice receipt.
Hope this clarifies your queries.
-Ravi

WLC Dynamic Interface

I wonder why we need Dynamic Interfaces. I have created two WLANs. One is WPA2-Enterprise obtaining vlan id's per user from Radius server and the other WEP wlan for guest users whose traffic should go to a specific guest vlan. I am using an external DHCP server and configured WLC not to proxy dhcp requests and to act as a bridge.
I had to create dynamic interfaces on WLC (we are using 5508 with software version 7) for all the VLANs which radius server returns. I could make it with only defining the dynamic interfaces and entering 0.0.0.0 for ip addresses.
For the other WLAN with WEP, I have to enter and IP for the dynamic interface to work. I am not sure if this is a requirement or my misconfiguration, but I do want a way not to set an IP address for the dynamic interface. I do not want to waste addresses and also do not want the clients to be able to access wlc through that IP address.
I appreciate any comment on why I need IP addresses for dynamic interfaces.

Vadood... The WLC does use that IP address as it needs to have layer 2 connection to any subnet it will place users on. Even is your doing AAA override, the radius tell the WLC that that device needs to be on vlan x and the WLC will put that device on vlan x, but if the WLC has no IP address on that subnet, well then the communication stops there. The user will never get an IP address if using dhcp or if the device has a static, the WLC has no way to communicate to that subnet.
By the way, users can't access the dynamic interface by default. You have to enable that. But then again, they can try to access the management interface also, unless you disable globally management over wireless.
Sent from Cisco Technical Support iPhone App

Clarification regarding WLC 's interfaces

Similar Messages

Maybe you are looking for