Wireless Clients over WAN

Dears,
I have a specific requirement from a client as follows
The client has a branch office and HQ connected over an MPLS cloud. Internet access is provided through the HQ only.
They want to provide guest internet in the branch and want to terminate this subnet for the guest on the firewall in the HQ directly, so that they exit only into the internet.
Can anybody shed more light on how it can be done? or any other suggestions?
NB: They have only 1 controller, so putting a controller on the DMZ for guest is out of the question.
Regards,
Phil.

Dears,
Luckily everything worked as to plan.
The client already had an existing controller in the HQ, So i created a WLAN anchoring to the HQ WLC. and then to the firewall direct.
Cisco doesnt recommend using the anchor controller to manage APs, however, there are APs in the HQ that are registered to this controller.
Thanks for all the inputs, will be really useful to try out if i didnt have a controller in HQ.
Regards,
Philip.

Similar Messages

Multicast server/client over wan

Ok, first of I am kinda new in programming network stuff.
Then I am gonna try to be clear in the things that I am trying to accomplish.
The environement.
I have a machine A that has 2 interfaces :
eth0 Link encap:Ethernet HWaddr 00:0F:20:96:CE:96
inet addr:192.168.1.49 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2328871 errors:0 dropped:0 overruns:0 frame:0
TX packets:355492 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:178361234 (170.0 Mb) TX bytes:34186479 (32.6 Mb)
Interrupt:11
eth2 Link encap:Ethernet HWaddr 00:04:23:45:74:EC
inet addr:192.168.2.2 Bcast:192.168.2.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:813915 errors:0 dropped:0 overruns:0 frame:0
TX packets:7538202 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:53318289 (50.8 Mb) TX bytes:1092719670 (1042.0 Mb)
Interrupt:15 Base address:0x3000 Memory:f7ee0000-f7f00000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:56496 errors:0 dropped:0 overruns:0 frame:0
TX packets:56496 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:7952617 (7.5 Mb) TX bytes:7952617 (7.5 Mb)
This machine is connected thru a router
The routers connects to a WAN with MULTICAST enabled
then another router to which the second machine is connected
MACHINE B
eth0 Link encap:Ethernet HWaddr 00:0F:20:96:0F:94
inet addr:192.168.1.58 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2322957 errors:0 dropped:0 overruns:0 frame:0
TX packets:363116 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:177550404 (169.3 Mb) TX bytes:33507499 (31.9 Mb)
Interrupt:30
eth2 Link encap:Ethernet HWaddr 00:04:23:45:78:90
inet addr:192.168.3.2 Bcast:192.168.3.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:160838 errors:0 dropped:0 overruns:0 frame:0
TX packets:6781 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:11450177 (10.9 Mb) TX bytes:746369 (728.8 Kb)
Interrupt:28 Base address:0x3000 Memory:f7ee0000-f7f00000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:158 errors:0 dropped:0 overruns:0 frame:0
TX packets:158 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:23916 (23.3 Kb) TX bytes:23916 (23.3 Kb)
The two machine are on different networks.
My goal is to have Machine A send multicast data thru eth2 to be sent in the wan and to be received by Machine B on eth2 too.
Obviously the two machine are on separated networks.
I have tried everything I could but I cannot get machine B to pickup the messages sent by A. It worked fine when on the same LAN but not over WAN.
The multicast address that I use it 239.55.55.80 and the port 4445.
I think I have a problem to link the interface to my app ( I used setInterface and setNetworkinterface but nithing.) Also I cannot firgure out if the things that I am doing wrong are on the server or the client.
Here is the code for the sever and client.
SERVER
package com.cme.multicastijector.server;
* Title: 
* Description: 
* Copyright: Copyright (c) 2004
* Company: 
* @author not attributable
* @version 1.0
import java.net.*;
import java.util.*;
public class MulticastOutputSocket {
private int m_multicastPort = 0;
private MulticastSocket m_multicastSocket = null;
private InetAddress m_interfaceAddress = null;
private InetAddress m_multicastAddress = null;
private InetSocketAddress m_inetSocketAddress = null;
private int m_bufferSize = 0;
private byte[] m_outputBuffer = null;
private DatagramPacket m_packet = null;
public MulticastOutputSocket(int portNumber,String interfaceAddress,String multicastAddress,int bufferSize) throws Exception{
System.out.println("\nStarting multicast output socket");
m_multicastPort = portNumber;
m_interfaceAddress = InetAddress.getByName(interfaceAddress);
m_multicastAddress = InetAddress.getByName(multicastAddress);
m_bufferSize = bufferSize;
m_inetSocketAddress = new InetSocketAddress(m_multicastAddress,m_multicastPort);
m_multicastSocket = new MulticastSocket (m_multicastPort);
// m_multicastSocket.joinGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
m_multicastSocket.setNetworkInterface(NetworkInterface.getByInetAddress(m_interfaceAddress));
// m_multicastSocket.setLoopbackMode(false);
// m_multicastSocket.setTimeToLive(32);
Enumeration e = NetworkInterface.getNetworkInterfaces();
while (e.hasMoreElements()){
System.out.println(e.nextElement().toString());
System.out.println("Interface Address = " + m_interfaceAddress);
System.out.println("Multicast Address = " + m_multicastAddress);
System.out.println("Port = " + m_multicastPort);
System.out.println("BufferSize = " + m_bufferSize);
System.out.println("MulticastSockect initialized.\n");
public void sendData(String data) throws Exception{
m_outputBuffer = new byte[m_bufferSize];
m_outputBuffer = data.getBytes();
//m_packet = new DatagramPacket(m_outputBuffer, m_outputBuffer.length);
m_packet = new DatagramPacket(m_outputBuffer, m_outputBuffer.length, m_inetSocketAddress);
m_multicastSocket.send(m_packet);
public void closeSocket() throws Exception {
//m_multicastSocket.leaveGroup(m_multicastAddress);
//m_multicastSocket.leaveGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
m_multicastSocket.close();
CLIENT
package com.cme.multicastijector.client;
* Title: 
* Description: 
* Copyright: Copyright (c) 2004
* Company: 
* @author not attributable
* @version 1.0
import java.io.*;
import java.net.*;
import java.util.*;
public class MulticastClient {
private Properties m_prop = null;
private MulticastSocket m_multicastSocket = null;
private InetAddress m_interfaceAddress = null;
private InetAddress m_multicastAddress = null;
private InetSocketAddress m_inetSocketAddress = null;
private int m_multicastPort = 0;
private int m_bufferSize = 0;
private int m_previousSeq = 0;
private boolean m_isFirst = true;
private int m_actualseq = 0;
private int m_msgLost = 0;
private int m_messagesReceived = 0;
private Object m_seqLock = new Object();
private Object m_msgLock = new Object();
public MulticastClient(Properties properties) throws Exception{
m_prop = properties;
init();
new TpsCalculator();
receiveData();
private void init() throws Exception{
m_multicastPort = Integer.parseInt(m_prop.getProperty("MULTICAST_PORT"));
m_multicastAddress = InetAddress.getByName(m_prop.getProperty("MULTICAST_ADDRESS"));
m_interfaceAddress = InetAddress.getByName(m_prop.getProperty("INTERFACE_ADDRESS"));
m_bufferSize = Integer.parseInt(m_prop.getProperty("BUFFER_SIZE"));
m_inetSocketAddress = new InetSocketAddress(m_multicastAddress,m_multicastPort);
m_multicastSocket = new MulticastSocket (m_multicastPort);
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getInterface() );
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getNetworkInterface() );
// m_multicastSocket.setInterface(m_interfaceAddress);
// m_multicastSocket.setNetworkInterface(NetworkInterface.getByInetAddress(m_interfaceAddress));
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getInterface() );
// System.out.println("DEFAULT INTERFACE : " + m_multicastSocket.getNetworkInterface() );
m_multicastSocket.joinGroup(m_inetSocketAddress,NetworkInterface.getByInetAddress(m_interfaceAddress));
// m_multicastSocket.joinGroup(m_multicastAddress);
System.out.println("Interface Address = " + m_interfaceAddress);
System.out.println("Multicast Address = " + m_multicastAddress);
System.out.println("Port = " + m_multicastPort);
System.out.println("BufferSize = " + m_bufferSize);
private void receiveData() throws Exception{
try {
String received = null;
byte[] inputBuffer = null;
DatagramPacket packet = null;
while(true){
inputBuffer = new byte[m_bufferSize];
packet = new DatagramPacket(inputBuffer, inputBuffer.length, m_inetSocketAddress);
m_multicastSocket.receive(packet);
received = new String(packet.getData());
m_messagesReceived++;
synchronized(m_seqLock){
m_actualseq = getSequence(received);
checkSequence(m_actualseq);
catch (Exception ex) {
ex.printStackTrace();
m_multicastSocket.close();
private int getSequence(String data){
return Integer.parseInt(data.substring(0,15));
private void checkSequence(int actual){
if(m_isFirst){
m_isFirst = false;
m_previousSeq = actual;
else{
if ( (m_previousSeq + 1) != actual) {
synchronized(m_msgLock){
m_msgLost += (actual - m_previousSeq)-1;
m_previousSeq = actual;
private class TpsCalculator extends TimerTask{
private Timer aTimer;
private int previousSeq = 0;
private int tpsSeq = 0;
private int tpsRec = 0;
private boolean first = true;
private int msglost = 0;
private int previousMsgRec = 0;
private int actualMsgRec = 0;
public TpsCalculator(){
aTimer = new Timer();
aTimer.scheduleAtFixedRate(this,new Date(),1000);
System.out.println("#####################################################");
System.out.println("time,tps from sequences, actual tps,total msg received,msglost");
public void run(){
actualMsgRec = m_messagesReceived;
tpsRec = actualMsgRec - previousMsgRec;
previousMsgRec = actualMsgRec;
if(first){
synchronized(m_seqLock){
previousSeq = m_actualseq;
first = false;
else{
synchronized(m_msgLock){
msglost = m_msgLost;
m_msgLost = 0;
synchronized(m_seqLock){
tpsSeq = m_actualseq - previousSeq;
previousSeq = m_actualseq;
System.out.println(new Date()+","+tpsSeq + "," + tpsRec + "," + m_messagesReceived + "," + msglost);
Thanks for your help.
This is really important for the project I am working on.
Thanks again

never Mind I found the issue
The default value for TTL is 1.
I was going thru multiple routers so I incremented the value and it worked
thanks

Guest Wireless access over WAN

Hello Everyone,
We have around 45 remote location , all are connected with GRE Tunnels.
44 location have there own WLC which are managed by NCS and ISE in HQ , All 44 location have Wireless access for Guest and INternal Staff.
Now my Question is :
One location(45th) have only 10 users and I dont want to put a WLC there.
How can I provide the Guest wireless access on this location over WAN from HQ.
We can buy APs.
Please give me some ideas to solve this problem.
Here I am attaching my default plan :
Thanks

You just configure the access point in FlexConnect mode and then on the guest SSID you would central switch the WLAN. Central switching tunnels back traffic to the WLC and local switching drops traffic off at the local site. Here are some guides to look at.
https://supportforums.cisco.com/docs/DOC-24082
http://www.cisco.com/en/US/products/ps11635/products_tech_note09186a0080b7f141.shtml
Sent from Cisco Technical Support iPhone App

Bonjour & disk sharing over WAN -Expert/Genius help required

*Goal: Learn how to connect to my USB hard disk over WAN, share drive with specific people.*
I'm trying to figure out how to remotely access my data on the external drive via connected via USB to my AEBN.
I've spent several hours dinking around with my router, trying to see if I can access the drive over the WAN. I haven't found any manuals, discussions, or K-Base articles that spell it out for me. Below is a list of things I've done. Please indicate whether they are relevant, and if possible what the procedure is. Thanks:
Conditions: I have a static IP address and through the DHCP tab I have assigned all attached machines a static LAN IP address.
*1. Airport>Base Station: Allow configuration over Ethernet WAN port.* I've checked this box and can remotely admin my AEBN from my PC laptop (XP) via the Airport Utility.
*2. Airport>Access Control: MAC Address Access Control.* I didn't know if this would help or hurt anything so I added the MAC address for all ethernet and wireless ports connected to my network and given unlimited or untimed access. +No noticeable difference.+
*3. Internet>DHCP: DHCP Reservations.* As mentioned above in conditions, I've assigned an internal IP address for each device's ethernet and wireless ports, based on the MAC address. +Seems like this and Access Control are redundant except for the time settings.+
*4. Disks>File Sharing:* Enable file sharing is checked, with accounts (configured), "Share disks over ethernet WAN port" is also checked, as is "Advertise disks globally using Bonjour". Not sure what to put in the bottom two fields (Workgroup and WINS Server) so they're blank.
*5. Advanced>Port Mapping:* I've assigned ports to my iMac for gaming and SSH access but I don't think these would effect the USB disk would they?
*6. Advanced>Bonjour:* "Use a wide-area hostname" is checked. My LAN network name is in the Hostname field, for Domain I just typed my WAN IP address, and I put something in for Name and Password.
I'd love any assistance to figure this out.
Lastly, how does Bonjour help over the WAN? Is there some sort of Bonjour application I open log-in, like FTP client software?

Since this discussion has now been resurrected...
The advice provided by chrisfenix will allow you to access the Airport drive from a PC on your private LAN.
The preceding discussion, however, was on the topic of accessing the Airport drive remotely over the internet. To do that, you could still use the advice provided by chrisfenix but substitute the public IP address of the Base Station. To find that out (and answer a question posed earlier in this discussion as well) just go to http://whatismyip.com/ from any computer on your own network.
To answer a question posed by the originator of this discussion - Bonjour is not at all necessary for remote access of the Airport drive. Those people who know how to use this feature will know what it is for and how to implement it - the rest of us can just pretend this feature doesn't exist.

Share printers over WAN

Hello,
I'm in the process of testing the print sharing over WAN capabilities of my TC 1GB. I believe everything is setup properly, and using 'back to my mac' I can indeed see the TC while tethered to my iPhone... though I'm not sure if 'back to my mac' has anything to do with sharing printers over WAN.
Overview:
TC > Printers > Shared Name (printer is showing up nicely and can print via LAN without issue)
TC > Printers > Share printers over WAN (checked)
TC > Printers > Share printers over internet using Bonjour (checked) (this prompted me to create a dynamic global host name)
TC > AirPort > Time Capsule > edit... > "Use dynamic global host name" (checked) (and all related info)
*Network Setup:*
Cable Modem > TC > wired and wireless clients
When I use my iPhone tethered to my mac book pro, I do see the TC, but when I open the system preferences > printer & fax > I don't see any bonjour printers (should I be able to see it here?)
Any help would be greatly appreciated.

No one has any idea?

Unable to set up base station as wireless client

I have a network with one Airport Extreme (UFO-shape) and three Airport Express base stations. Now I had to do a hard reset of all the base stations, and want to use Airport utility to set up the network again.
I have no problems setting up the Airport extreme as the main base station, and the first Airport express as a remote base station (extending the network). I want to set up the other two Airport Express stations as wireless clients (I only use them for iTunes via Airtunes).
My problem is that when I reach the point where I can choose between setting them up to either extend the network or as a wireless client, I am not able to proceed if I choose the latter (nothing happens when I press "continue"). I can only go through the setup process if I choose the Airport Express to be an extension of the network (a remote base station).
For one of the Airport express, I then later manually changed the setup from "be a part of a WDS network" to "connect to a wireless network". But when I try this for the last Airport Express, I am no longer able to contact the base station if I try to do the same. I have chosen channel 11 for the network, and I think in some way or another, after I manually change the settings for the last Airport express, it switches to another channel. After this I can no longer read the base station configuration or connect to it via airtunes.
When I do a hard reset again, and go through the process once more, everything is OK as long as I keep it as a remote base station. But I really would like it to be connected as a wireless client
Any ideas?

The basic wiring setup would include connecting an Ethernet cable from one of the available LAN <-> Ethernet ports to the WAN "O" port on the Time Capsule.
You can run an Ethernet cable up to 100 meters or 300+ feet so the trick will be locate the Time Capsule in the middle of the area where you need more wireless signal coverage.
To have the Time Capsule "extend" the wireless from the gateway, you would need to configure it to create a new wireless network using the same wireless network name, same wireless security setting and same password as the gateway's wireless network.
The final configuration step would be to make sure that the Time Capsule is setup to operate in Bridge Mode, so that it will function as a client for the gateway router.
The specifics of how to do this will depend on the version of AirPort Utility that you are using on your Mac. Post back if you need more details on this.

Bridge does not work for wireless clients - connecting to existing network.

Hi - I really hope somebody can help out here, after hours of trial & error, I have finally given up
I need to connect my Airport Extreme Base Station to my existing network. I have a linksys router (192.168.15.1) connected to my modem and this linksys router acts as DHCP server too.
I suppose I have to use "bridge mode" for that to work. But should the linksys be connected to the AEBS using the AEBS's WAN or LAN port?
If I use "bridge mode", then wired computers to the AEBS works fine - getting an IP from the linksys etc. BUT, the wireless clients will have a self-assigned IP and not get through to the internet. It's like the AEBS will not allow wireless clients to "get through" unless AEBS itself is handing out IP addresses.
Page 36 of this manual ( http://manuals.info.apple.com/en/DesigningAirPort_Networks10.5-Windows.pdf ) shows the setup I want. But in the picture, it says "Ethernet WAN port" but the text says: "The Apple wireless device (in this example, a Time Capsule) uses your Ethernet network to communicate with the Internet through the Ethernet LAN port ( <--> )." I don't know which one to use, WAN or LAN - they show WAN but say LAN?
When I set it up as "share an IP address", the AEBS status tells me "double nat" and to change from "shared IP" to "bridge mode". I do that, and everything seems fine - for the wired clients. Now the wireless clients cannot connect, Airport on the MacBook Pro just say "Connection failed" and the MacBook says "Invalid password" (translated from danish), even though I set the Airport Utlity to save the password in keyring, so it should be correct... If I disable wireless encryption, the wireless clients will connect but get a self-assigned IP, and therefor not work (cannot get online)...
It seems the only way I can get wireless to work, is if I set AEBS up as DHCP, but then it won't be on the "same network" as the linksys (192.168.15.1), but rather on 10.0.x.x as I select. If I select 192.168.x.x within AEBS, I'm also getting some error messages, conflict/subnet thing.
Anyway - I really hope somebody knows how to get wireless clients to get an IP address from existing ethernet when connected to the AEBS.
Thanks!!

I've given up and had to go back to running "Double NAT" which also reports as a "problem" within the AEBS, but I just "ignore" it so the light will always be green.
It still ***** though, as "Double NAT" is also a reason for "Back to my Mac" not working properly, but how the ** am I supposed to avoid Double NAT when the wireless will not work in bridged mode?!

Wireless clients unable to access internet on new WRT54G - Help!

I have multiple wireless clients that cannot access the internet. They all get valid IP addressing. I can ping the router. But I can't access anything on the internet. I just setup this router and I do this sort of stuff for a living and I give up. It shouldn't be this difficult. Two of the clients are Vista and the other is XP. Again, the connection to the router is perfect. I just can't access anything beyond the router. The single wired client works fine. Help!

Thanks... I've tried that. All of these hosts were actually working just fine with my old DLink router, but that router died over the weekend, so I replaced it with the Linksys. For the life of me, I can't see any reason why these hosts can't route out to the internet.

The whole configure over WAN thing is confusing me I don't want anyone to be able to access my airport extreme over the WAN. How can I check to make sure that is the way I have it setup?

I just bought a new airport extreme and I want to make sure that is NOT set up for "configure over WAN". How do I check to make sure that is how I have it set up? I only want access to the base via WPA2 password

Open AirPort Utility, select the AirPort Extreme, and click Manual Setup
Click the Base Station tab located just below the row of icons
Remove any check mark that might be in the box next to Allow Setup over WAN
Click Update to save your settings and the AirPort Extreme will restart in 25-30 seconds
For what it is worth, if you leave the box checked, any computer that tries to access the settings on the Airport Extreme will be asked for the device password....not the wireless network password.

How to modify Time Capsule wireless clients?

I have a Time Capsule that I use as the router for the house. We've had a lot of computers connected to it over the years. What I am wanting to know if it is possible to remove wireless clients that are connected or previously connected. Under Finder there is an HP computer that is connected but to my knowledge there is no Windows based computer using the network. At one point there was an old HP laptop connected to it. But for the life of me I can not find anything or figure out how to remove this computer from showing up under the Finder. I am confident that the problem resides at the router because I can see that same device connected.
http://i.imgur.com/PXdR9XJ.png

Under Finder there is an HP computer that is connected but to my knowledge there is no Windows based computer using the network.
Maybe you have an HP printer that is connected either by wireless or Ethernet?
Does the HP device show up in the list of current wireless clients? If not, then the HP device is connected via Ethernet to your network.
What I am wanting to know if it is possible to remove wireless clients that are connected or previously connected.
If a wireless device is already connected to the network, the only way that you can remove it is to change the wireless network password, or set up Timed Access on that device..
Chaging the password will disconnect all connected devices, then you will have to log on again from each device that you want to connect.

Remote Control Wireless Client ?

We're running Cisco LEAP enabled wireless clients on NT. Our Helpdesk would like to remote control these machines. Problem is: The HelpDesk administrators need Administrator privileges. They need to log in as themselves...remotely.
When they do a "close all programs & log in as different user" , of course the remote control session is lost & can't be reestablished till the client is LEAP authenticated, which can't happen till the remote user is logged in.....Catch 22.
Any ideas for a solution would be greatly appreciated !
Thanks,
Jeff Roberts
Cox Health Systems
Springfield MO

Jeff - I've been working with a company that has created an app that gets around that problem - even through firewall connections - plus the Help Desk can use any client with a browser, which means that support OF and FROM mobile devices will finally work.
Of course the best way to see an app like that is an on-line demo so you can take over yourself.
Matthew Wheeler
Chief Wireless Architect
www.BlueModal.com

Bridge Mode and Wireless Clients

I have my network up and running fine, but I am now thinking I may need to tweak it a bit. I have an AEBS(n) and an Airport Express both set up with WDS. The Extreme is the base station and the Express is set in WDS Remote and in Bridge mode under the internet tab. The Express is hooked up via a wired ethernet connection to my PS3. Everything works.
I am wondering if in bridge mode, the express accepts wireless clients as well as providing net access to my PS3 over the ethernet cable. Both the extreme and express stations are close enough together that I am not sure which one I am connecting to when I use my laptop wifi.
Thanks in advance for your help.

I am wondering if in bridge mode, the express accepts wireless clients as well as providing net access to my PS3 over the ethernet cable.
Yes if you enable that option.

Cisco WLC in High Availability over WAN

Hi my name is Ivan i have a trouble perhaps could you help me...
I have two cisco wlc 5508. I wan to install them in two differents site. One WLC in the site A and the another WLC in the site B.
Site B is the WAN of the site A. The site A is the headquarter.
But i need to configure them in High Availability. For example if the Cisco WLC in site A goes down, the ap's have to registered in the WLC of the site B.
Then the traffic LWAPP have to pass over the WAN between site A to site B.
I have to configure two cisco wlc in HA over a WAN . Please could help me to do this?. Is ok configure the roamming L3 intercontroller?
Thanks for your answers
Regards
Ivan,
AP'S - WLC - SITE A ----WAN-----WLC - SITE B - AP'S
WLC SITE A DOWN = AP'S SITE A REGISTERED IN WLC SITE B

Hi Surendra thanks for yoru answer.
Surendra, if the ap in the site B (in the WAN) goes down then the traffic lwapp have to pass over the wan,
what will should i do to ensure access point can register on to the cisco wlc in the WAN, moreover to configure the mobility groups in both wireless lan controllers?
or i only have to configure in the wlc the mobility groups? Could you explain me what things have i to do to ensure this
SITE A - (ACCESS POINT M) - LWAPP -----PASS OVER WAN---- SITE B - CISCO WLC - (ACCESS POINT M)
STATUS: REGISTERED IN SITE B
Thanks for your answer
IVAN
Regards

There is no "Share disk over WAN" checkbox

Hello i do have no checkbox for "Share disk over WAN" on my airport settings for TC. What should i do? I just want to access my TC over internet.
this is back to my mac option from settings. It says 'set router' which is doubtful to me.
and here there is no checkox for it.
note: it is 7.6.1

What kind of broadband do you use?
BTMM should work fine with any router that uses upnp or nat-pmp. You do not require an apple router.
If you want to access the TC from internet.. that is possible manually.. in fact it works really well.
You need to set up a dynamic dns account.. almost all routers will have a client.. pick a service for which you have a client.. (unless you have static public IP which is even better).
Then simply port forward AFP protocol TCP port 548 to the TC.. which is in bridge.
Remotely you access by typing in connect to server... AFP://dynamicip or staticpublicIP.
Just google remote access to TC there are plenty of discussions and youtube video of how to do it.

Share disks over WAN setup AEBS 802.11ac

I am trying to share a usb HDD over my home network that I can access outside of my network. I have read some answers in these communities and followed their instructions, but no resolution. I was wanting something like afp://x.x.x.x:port# to get to it. it has been formatted on a MAC with HFS+. My home network sees the HDD but I cant reach it outside the network.
-Bart (Dropbox alternative)

iBartley wrote:
This is the main router. I have forwarded 548. I am trying to use the public Ip from ISP. I have am connecting from a windows machine. Can I still connect through icoud?
Ok, there are several things wrong here.
1. If the AE is the main router you do not port forward.. you simply tick that hard disk will have wan access.
In the airport utility you tick, share disk over WAN.
Now I don't have the new AC model but I expect it will be the same.
2. The public IP from the ISP is generally dynamic and keeps changing.. unless you pay for a static IP. It is hard to get dyndns working for the AE.. I used to think impossible but Tesserax has been able to do it.
3. Windows cannot access the AE using AFP protocol.. when you tick the share disk with wan.. only AFP protocol is exposed.. because it is reasonably secure.. SMB (windows) protocol is not shared with WAN ever.. it is only shared in LAN.. and most ISP block the ports due to the internet containing several zillion windows computers with sharing turned on and no security.. The entire internet would collapse if they allowed SMB.
AFAIK there is no suitable AFP file access software for windows.. although you might have a solution to that.
Port 548 mentioned is AFP.. not SMB.
Only the Mac can access the AE hard disk.. so using BTMM makes good sense.
4. The only way I would recommend you attempt remote access via windows is using a vpn router.. and put the AE into bridge mode and access directly via vpn to the whole network.. this is a professional solution and is the way any buisness would do it. It is secure and any computer or ipad or iphone with vpn client can access the network.

Wireless Clients over WAN

Similar Messages

Maybe you are looking for