topic Re: How to allow access from a wired client through the WLC to the Internet ??? in M and MSM Series

How to allow access from a wired client through the WLC to the Internet ???

ONVZ — Fri, 25 Jan 2013 10:36:23 GMT

Hi all,

I 've a wired client on the LAN-side of the WLC.

It does get a dhcp ip-address (reserved) from the WLC.

However I 'm not able to go to the Internet.

What do I have to do to accomplish that.?

Through a VSC a wireless client connects to the same subnet and is able to access the Internet.

Must be some authentication issue?

Appreciate your help :) !

Re: How to allow access from a wired client through the WLC to the Internet ???

Peter_Debruyne — Sat, 26 Jan 2013 11:39:42 GMT

Some questions:

1/ Can you provide the VSC configuration :

- dhcp configuration (vsc based or global, dhcp server or relay)

2/ Are you using teaming ?

Normally the default VSC (default named HP), handles the incoming untagged traffic on the LAN port.

The dhcp should set the dhcp clients DG/DNS to the LAN port of the controller with this setup.

At that point there is no real difference between a wired and wireless client.

You can use "controller - tools - system log - unfiltered" to get more debugging info on the controller side.

Best regards,Peter

Re: How to allow access from a wired client through the WLC to the Internet ???

ONVZ — Tue, 29 Jan 2013 09:49:21 GMT

Hi Peter,

In answer to your questions:

- DHCP is global > Network>Address Allocation> DHCP server

DG/DNS is set to the LAN-port of the WLC

- no teaming

The default VSC has been changed to a VSC for use by internal users to the internal network by my predecessor :(

Anymore thoughts?

Thanx Jaap

Re: How to allow access from a wired client through the WLC to the Internet ???

Peter_Debruyne — Wed, 30 Jan 2013 15:41:35 GMT

mmm, too bad for that default vsc.

Workaround:

deliver the wired traffic tagged on the LAN port. I will assume for this example that vlan 10 is the wired guest network.

1.1Wired network config (just example, use your own vlan config for your switch)

vlan 10

# assign wired guest ports to vlan

untag 1-10

# assign vlan as tagged on controller LAN port, assume port 11 is LAN port of controller

tag 11

1.2 Define network profile on controller

Controller - Network - Network profiles - add profile - vlan10 : vlan 10

1.3 Configure Guest VSC ingress network to this vlan

Controller - VSCs - GuestVSC - VSC Ingress mapping : vlan : vlan 10

Save and sync

This will effectively create an internal bridge on the controller, which bridges the tagged vlan 10 on the LAN port to the internal LAN port. Since it is a bridge, the internal dhcp will be able to service the wired clients.

Best regards,Peter