How to allow access from a wired client through the WLC to the Internet ???

[ONVZ]

Hi all,

I 've a wired client on the LAN-side of the WLC.

It does get a dhcp ip-address (reserved) from the WLC.

However I 'm not able to go to the Internet.

What do I have to do to accomplish that.?

Through a VSC a wireless client connects to the same subnet and is able to access the Internet.

Must be some authentication issue?

Appreciate your help :) !

[Peter_Debruyne]

Some questions:

1/ Can you provide the VSC configuration :

- dhcp configuration (vsc based or global, dhcp server or relay)

2/ Are you using teaming ?

Normally the default VSC (default named HP), handles the incoming untagged traffic on the LAN port.

The dhcp should set the dhcp clients DG/DNS to the LAN port of the controller with this setup.

At that point there is no real difference between a wired and wireless client.

You can use "controller - tools - system log - unfiltered" to get more debugging info on the controller side.

Best regards,Peter

[ONVZ]

Hi  Peter,

In answer to your questions:

- DHCP is global > Network>Address Allocation> DHCP server

   DG/DNS is set to the LAN-port of the WLC

- no teaming

The default VSC has been changed to a VSC for use by internal users to the internal network by my predecessor  :(

Anymore thoughts?

Thanx Jaap

[Peter_Debruyne]

mmm, too bad for that default vsc.

Workaround:

deliver the wired traffic tagged on the LAN port. I will assume for this example that vlan 10 is the wired guest network.

1.1Wired network config (just example, use your own vlan config for your switch)

vlan 10

 # assign wired guest ports to vlan

 untag 1-10

 # assign vlan as tagged on controller LAN port, assume port 11 is LAN port of controller

 tag 11

1.2 Define network profile on controller

Controller - Network - Network profiles - add profile - vlan10 : vlan 10

1.3 Configure Guest VSC ingress network to this vlan

Controller - VSCs - GuestVSC - VSC Ingress mapping : vlan : vlan 10

Save and sync

This will effectively create an internal bridge on the controller, which bridges the tagged vlan 10 on the LAN port to the internal LAN port. Since it is a bridge, the internal dhcp will be able to service the wired clients.

Best regards,Peter