29 December 2012
Wired Guest on WLC, Ingress/Egress?
Was going through my studies for the CCIE Wireless, in particular Wired Guest on the WLC. I have heard of this feature, read about it a lot of times but never had to configure this feature before. I thought I lab it out so I can get my head around it. I followed the Cisco configuration guide from http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70users.html#wp1066125
Most of it was straightforward but the one thing I find very confusing is the Ingress and Egress interface.
The figure below shows the Ingress and Egress configuration.
So what is the difference? What is required to be configured? Well it depends if you are configured the guest wired on a single WLC or you are configuring it on two WLC with foreign and anchor WLCs.
Single WLC
Ingress Interface: The L2 VLAN that the wired guest user computer is connected to. This VLAN is configured on the Ingress Interface and the switch port.
Egress Interface: The L3 Dynamic Interface VLAN where the guest user gets put into after L3 authentication (usually web auth). The guest user will be in this subnet and get a DHCP address from.
Two WLC
Foreign WLC
Ingress Interface: Similar to Single WLC Ingress Interface above. This is where the guest user starts and comes in.
Egress Interface: Technically, this does not need to be configured. As the foreign WLC will create an EOIP tunnel to the anchor WLC, this interface should never be used. To test it out, I configured it on the management interface, it works. I then try configuring this to an interface that goes no where, wired guest still works.
Anchor WLC
Ingress Interface: This is not required and cannot be configured. On the Anchor WLC, you do not need to create the Guest LAN interface, so nothing should appear hear and should default to none. This is because the Anchor receives the guest VLAN from the Foreign WLC through the EOIP tunnel.
Egress Interface: Similar to Single WLC Egress Interface. This is where the guest user ends up after successful L3 authentication.
The following are some screenshots of configuration with two WLC.
Creating the Guest LAN interface on the foreign WLC.
Configuring the wired guest "WLAN" on the foreign WLC. Ingress interface to "99", the interface create above and Egress interface to management which doesn't really matter what is configured as EOIP will be used.
The figure below shows the wired guest client on the anchor WLC. Notice the mobility role of "Export Anchor".
Most of it was straightforward but the one thing I find very confusing is the Ingress and Egress interface.
The figure below shows the Ingress and Egress configuration.
So what is the difference? What is required to be configured? Well it depends if you are configured the guest wired on a single WLC or you are configuring it on two WLC with foreign and anchor WLCs.
Single WLC
Ingress Interface: The L2 VLAN that the wired guest user computer is connected to. This VLAN is configured on the Ingress Interface and the switch port.
Egress Interface: The L3 Dynamic Interface VLAN where the guest user gets put into after L3 authentication (usually web auth). The guest user will be in this subnet and get a DHCP address from.
Two WLC
Foreign WLC
Ingress Interface: Similar to Single WLC Ingress Interface above. This is where the guest user starts and comes in.
Egress Interface: Technically, this does not need to be configured. As the foreign WLC will create an EOIP tunnel to the anchor WLC, this interface should never be used. To test it out, I configured it on the management interface, it works. I then try configuring this to an interface that goes no where, wired guest still works.
Anchor WLC
Ingress Interface: This is not required and cannot be configured. On the Anchor WLC, you do not need to create the Guest LAN interface, so nothing should appear hear and should default to none. This is because the Anchor receives the guest VLAN from the Foreign WLC through the EOIP tunnel.
Egress Interface: Similar to Single WLC Egress Interface. This is where the guest user ends up after successful L3 authentication.
The following are some screenshots of configuration with two WLC.
Creating the Guest LAN interface on the foreign WLC.
Configuring the wired guest "WLAN" on the foreign WLC. Ingress interface to "99", the interface create above and Egress interface to management which doesn't really matter what is configured as EOIP will be used.
Configuring the wired guest "WLAN" on the anchor WLC. Ingress interface as mentioned above can't be configured and left to none as EOIP will be used. Egress interface configured to VLAN where guest user will be placed after successful L3 authentication.
The figure below shows the wired guest client on the foreign WLC. Notice the mobility role of "Export Foreign".
Labels: Anchor WLC, Egress Interface, Foreign WLC, Guest, Ingress Interface, Wired Guest, WLC
Comments:
Your blog is awesome..You have clearly explained ...Its very useful for me to know about new things.
Seo training in Chennai
I read this content really awesome.You provided another one great article.I hope this information may change my business carrier.I can remember these things whenever taking the decision.
Android Training in chennai
Its a wonderful post and very helpful, thanks for all this information. You are including better information regarding this topic in an effective way.Thank you so much
Installment Loans Near Me
Title loans Near Me
Cash Advances Near Me
Post a Comment
<< Home
buy tramadol tramadol no prescription overnight - how to order tramadol online
# posted by 
: 12:42 AM
: 12:42 AM
buy cialis online in usa generic cialis safe - buy cialis with online prescription
# posted by : 1:30 PM
: 1:30 PM
20000 :) purchase effexor - effexor sale http://www.effexorfastorder.net/#effexor-sale , [url=http://www.effexorfastorder.net/#buy-effexor-no-prescription ]buy effexor no prescription [/url]
# posted by : 9:02 AM
: 9:02 AM
20000 :) Buy Neurontin - neurontin price http://www.neurontinonlinecheap.net/#Cheap-Gabapentin, [url=http://www.neurontinonlinecheap.net/#Neurontin-300mg]Buy Neurontin[/url]
# posted by : 11:51 AM
: 11:51 AM
20000 :) Order Zithromax - cheap azithromycin online http://www.zithromaxhowtobuy.net/#order-zithromax, [url=http://www.zithromaxhowtobuy.net/#generic-azithromycin]Azithromycin No Prescription[/url]
# posted by : 11:57 AM
: 11:57 AM
buy tramadol online without a prescription tramadol 50 mg good - buy tramadol with cod
# posted by : 4:37 AM
: 4:37 AM
aaa!!! Topamax Online - topamax price http://www.cheaptopamaxorder.net/#topamax-no-prescription, [url=http://www.cheaptopamaxorder.net/#topamax-no-prescription]Buy Topiramate[/url]
# posted by : 11:58 PM
: 11:58 PM
aaa!!! Buy Topamax - discount topamax http://www.topamaxbestonline.net/#buy-topamax, [url=http://www.topamaxbestonline.net/#buy-topamax]Buy Topamax[/url]
# posted by : 12:36 AM
: 12:36 AM
07 buy bupropion - cheap zyban http://www.wellbutrinforsaleonline.net/#cheap-wellbutrin, buy bupropion
# posted by : 4:47 PM
: 4:47 PM
03 cheap lorazepam 2mg - ativan online http://www.ativanonlinenorx.net/#ativan-online-pharmacy, generic lorazepam
# posted by : 9:08 PM
: 9:08 PM
03 zyban cost - zyban pills http://www.wellbutrinforsaleonline.net/, [url=http://www.wellbutrinforsaleonline.net/]zyban no prescription [/url]
# posted by : 9:48 PM
: 9:48 PM
4, order lasix - buy lasix without prescription http://www.lasixordernow.net/#lasix-no-prescription, lasix online
# posted by : 10:58 AM
: 10:58 AM
4, cheap terbinafine - cheap lamisil http://www.fastlamisilorder.net/index.html, Lamisil Sale
# posted by : 11:39 AM
: 11:39 AM
2, finasteride online - propecia pills http://www.propeciasaleonline.net/#propecia-sale, cheap propecia 5mg
# posted by : 12:32 AM
: 12:32 AM
http://landvoicelearning.com/#51438 tramadol online pharmacy no prescription needed - taking 4 50mg tramadol
# posted by : 6:41 AM
: 6:41 AM
all, isotretinoin price - generic accutane http://www.freeyogablog.com/#generic-accutane , [url=http://www.freeyogablog.com/#buy-accutane ]buy accutane [/url]
# posted by : 2:32 PM
: 2:32 PM
cheap christian louboutin shoes 346137 Chanel Bags 441301 Cheap Gucci Bags 397066 http://chaneloutletonline.cabanova.com/
# posted by : 5:09 PM
: 5:09 PM
cheap christian louboutin shoes 266043 christian louboutin outlet 515054 Gucci Bags online 629591 http://cheapburberrybagsonline.cabanova.com/
# posted by : 5:09 PM
: 5:09 PM
oZzy moved away a few months ago, I miss his cock, that i'm always hungry for making love.
FUCK MY PUSSY!
My homepage :: hcg injections
my page - hcg injections
FUCK MY PUSSY!
My homepage :: hcg injections
my page - hcg injections
# posted by : 3:38 AM
: 3:38 AM
Gucci Handbags for cheap 903340 Hermes online 646068 Chanel Handbags 26300 http://guccioutletonline.cabanova.com/
# posted by : 10:56 PM
: 10:56 PM
christian louboutin outlet online 439524 cheap christian louboutin shoes 575568 Hermes online 261538 http://hermesbagsoutletsale.cabanova.com/
# posted by : 9:43 AM
: 9:43 AM
1, Terbinafine 250 mg - buy cheap lamisil http://www.lamisilfast24.net/, [url=http://www.lamisilfast24.net/] Price of Lamisil [/url]
# posted by : 7:25 AM
: 7:25 AM
12, Eszopiclone Price - order eszopiclone http://www.lunestasleepaid.net/, [url=http://www.lunestasleepaid.net/] Cheap Eszopiclone [/url]
# posted by : 8:20 AM
: 8:20 AM
4, [url=http://www.pickledwookiee.com/lunesta.html]Generic Eszopiclone[/url] - Cheap Lunesta - buy lunesta http://www.pickledwookiee.com/lunesta.html .
# posted by : 9:57 PM
: 9:57 PM
2 iPad Mini's to be won As an supernumerary limited handle to set out bet would Receive existence Thirty six events your own genuine bet. [url=http://www.tasty-onlinecasino.co.uk/]uk online casino[/url] online casino The key on the side of meat controls loudness and that led to 10 of the 27 formal charges. http://www.onlinecasinotaste.co.uk/
# posted by : 5:42 PM
: 5:42 PM
The write-up offеrs proven bеnefiсial to me.
It’ѕ ѵегу usеful and you're simply certainly very experienced of this type. You possess opened my own face for you to varying views on this subject matter using intriquing, notable and solid articles.
My web site ... clonazepam
It’ѕ ѵегу usеful and you're simply certainly very experienced of this type. You possess opened my own face for you to varying views on this subject matter using intriquing, notable and solid articles.
My web site ... clonazepam
# posted by : 7:39 PM
: 7:39 PM
The ωrite-up pгovides proven usеful
to me personаllу. It’ѕ quite helpful аnd уou are cleaгly extгemelу knоωleԁgeablе іn this region.
Υοu get exрosed our eyes to be able tο numeгouѕ opіnіon of this matteг together ωith іnteresting and sound artiсles.
Look into my wеbpage: prarticles.com
Also visit my weblog :: codeine
to me personаllу. It’ѕ quite helpful аnd уou are cleaгly extгemelу knоωleԁgeablе іn this region.
Υοu get exрosed our eyes to be able tο numeгouѕ opіnіon of this matteг together ωith іnteresting and sound artiсles.
Look into my wеbpage: prarticles.com
Also visit my weblog :: codeine
# posted by : 10:42 AM
: 10:42 AM
The artіcle features ѵeгifiеԁ helρful to me.
It’ѕ very educational and уou arе naturally quite knowledgeable іn this
region. Үοu have exposed my personal ѕight in oгder to
varying opinion of thiѕ pаrticular
subjеct matter along with interesting and ѕound content.
Stop by my ωebρаge viagra
It’ѕ very educational and уou arе naturally quite knowledgeable іn this
region. Үοu have exposed my personal ѕight in oгder to
varying opinion of thiѕ pаrticular
subjеct matter along with interesting and ѕound content.
Stop by my ωebρаge viagra
# posted by : 6:52 PM
: 6:52 PM
Wonderful blog! I found it while surfing around on Yahoo News.
Do you have any tips on how to get listed in Yahoo News?
I've been trying for a while but I never seem to get there! Many thanks
Also visit my web site ... pirater un Compte facebook
Do you have any tips on how to get listed in Yahoo News?
I've been trying for a while but I never seem to get there! Many thanks
Also visit my web site ... pirater un Compte facebook
# posted by : 7:16 AM
: 7:16 AM
It's an remarkable article in favor of all the web users; they will take advantage from it I am sure.
Here is my web blog :: Generateur de Code PSN
Here is my web blog :: Generateur de Code PSN
# posted by : 10:04 AM
: 10:04 AM
When a loan rogue has a inadequate credit rating its they offer you can opt for unsecured loans for the not working like Asking a person's kith and kin is unpleasant if you are a fix income plate so you are saved to the look out for outdoor fiscal assistance
# posted by : 2:25 AM
: 2:25 AM
[url=http://www.vip1michaelkorsoutlet.org]Michael Kors Outlet[/url] A dangerous disease, that has taken many lives, Breast Cancer awareness has become a very important issue for many, holding rallies, passing out promotional awareness products, and more
[url=http://www.mislouboutinsaleuk.co.uk]Christian Loubouboutin Discount[/url]Easily the vital accessory while dressing up, the right pair associated with shoes can soar up your look quotient by a great deal of indentations
[url=http://www.getfreerunaustralia.org]Nike Australia[/url]Shopping through sites like coupon code resource Coupon Mountain gives savvy online shoppers the opportunity to save money and time while browsing luxury products from their favorite retailers
[url=http://www.vipnikenewzealand.info]Cheap Nike Shoes[/url] 2
[url=http://www.upnikepascherfr.info]Nike Air Max[/url] )
[url=http://www.mislouboutinsaleuk.co.uk]Christian Loubouboutin Discount[/url]Easily the vital accessory while dressing up, the right pair associated with shoes can soar up your look quotient by a great deal of indentations
[url=http://www.getfreerunaustralia.org]Nike Australia[/url]Shopping through sites like coupon code resource Coupon Mountain gives savvy online shoppers the opportunity to save money and time while browsing luxury products from their favorite retailers
[url=http://www.vipnikenewzealand.info]Cheap Nike Shoes[/url] 2
[url=http://www.upnikepascherfr.info]Nike Air Max[/url] )
# posted by : 12:16 AM
: 12:16 AM
Great post but I was wondering if you could write a litte more on this topic?
I'd be very grateful if you could elaborate a little bit more. Cheers!
Look into my weblog Dragon City Cheat Engine
I'd be very grateful if you could elaborate a little bit more. Cheers!
Look into my weblog Dragon City Cheat Engine
# posted by : 2:42 AM
: 2:42 AM
Definitely believe that which you stated. Your favorite justification seemed to be on the net
the simplest thing to be aware of. I say to you, I definitely get annoyed
while people consider worries that they just do not
know about. You managed to hit the nail upon the top and defined out the whole thing without having side-effects , people could take a signal.
Will likely be back to get more. Thanks
My web blog :: psn code generator
the simplest thing to be aware of. I say to you, I definitely get annoyed
while people consider worries that they just do not
know about. You managed to hit the nail upon the top and defined out the whole thing without having side-effects , people could take a signal.
Will likely be back to get more. Thanks
My web blog :: psn code generator
# posted by : 11:38 AM
: 11:38 AM
Wonderful blog! I found it while browsing on Yahoo
News. Do you have any suggestions on how to get listed in Yahoo News?
I've been trying for a while but I never seem to get there! Thank you
my homepage - Psn Code Generator
News. Do you have any suggestions on how to get listed in Yahoo News?
I've been trying for a while but I never seem to get there! Thank you
my homepage - Psn Code Generator
# posted by : 12:07 PM
: 12:07 PM
pet insurance for dogs Company websites would have to disclose policies that limit coverage and consumers would have been able to track complaints on the Department of Insurance's website. You would also be held personally liable if your dog causes loss of or damage to property that does not belong to you.
# posted by : 11:59 PM
: 11:59 PM Your blog is awesome..You have clearly explained ...Its very useful for me to know about new things.
Seo training in Chennai
this is really to good article. once you get enter into our seo web service you will be able to top level siter at any web engine. thanks for sharing and keep update more info for us. eagarly waiting for you tech service.
Digital Marketing For Small Business in Chennai
Digital Marketing For Small Business in Chennai
It is really very excellent,I find all articles was amazing.Awesome way to get exert tips from everyone,not only i like that post all peoples like that post.Because of all given information was wonderful and it's very helpful for me
Android Training in chennai
Android Training in chennai
I read this content really awesome.You provided another one great article.I hope this information may change my business carrier.I can remember these things whenever taking the decision.
Android Training in chennai
Thank you for sharing such a nice and interesting blog with us. Hope it might be much useful for us. keep on updating...!!
seo company in chennai
digital marketing company in chennai
seo company in chennai
digital marketing company in chennai
I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I’ll be subscribing to your feed and I hope you post again soon.
Digital Marketing Company in India|SEO Company in India
Digital Marketing Company in India|SEO Company in India
I simply want to tell you that I’m all new to blogs and truly liked you’re blog site. Very likely I’m likely to bookmark your site .You surely come with remarkable articles. Cheers for sharing your website page.
Car Spa at Doorstep in Mumbai
Car Spa at Doorstep in Mumbai
Pretty section of content. I simply stumbled upon your site and in accession capital to say that I get actually loved to account your blog posts.
Manpower Agencies in Chennai
Manpower Agencies in Chennai
Its a wonderful post and very helpful, thanks for all this information. You are including better information regarding this topic in an effective way.Thank you so much
Installment Loans Near Me
Title loans Near Me
Cash Advances Near Me
<< Home
