Wireless LAN FlexConnect Configuration Example _ Getting Started With Wireless _ Cisco Technical Support Forum _ 5956 _ 98646

7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646

https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 1/22

Search

Language: English

English (Japanese)

Espaol (Spanish)

Portugus (Portuguese)

P (Russian)

(Chinese)Contact Us

Help

Follow Us

Facebook

Twitter

Google +

LinkedIn

YouTube

Newsletter

Instagram

Community DirectoryExpert Corner

Solutions

Community Corner

Community Resources

Cisco

Cisco Support Community

Community Directory



Expert Corner

Top ContributorsLeaderboardsKnowledge Sharing

Experts BureauCisco Live! Events

SolutionsCisco SMB MarketplaceCisco On Demand

OnDemand Solutions

NetworkInfrastructure

WAN, Routing and Switching

LAN, Switching and Routing

Network Management

Remote Access Optical Networking

Getting Started with LANs

IPv6 Integration and Transition

EEM Scripting

Other Subjects

Security

VPN

Security Management

Firewalling

Intrusion Prevention

Systems/IDS AAA, Identity and NAC

Physical Security

MARS

Email Security

Web Security Other Subjects

ServiceProviders

Metro

MPLS

Voice Over IP

XR OS andPlatforms

Video

Other SubjectsCollaboration,Voice andVideo

IP Telephony

Video Over IP

Jabber Clients Unified

CommunicationsApplications TelePresence

Digital MediaSystem

Contact Center Conferencing UC Migrations

Other Subjects

Wireless - Mobility

Security and Network

Management

Wireless IP Voice and Video

Getting Started with Wireless

WLCCA

Other Subjects

Services

Cisco ServiceGrid

Compliance Management and Configuration

Service

Connected Analytics Customer Premises Equipment (CPE) Support

Data Center and Virtualization Partner Support Service Smart Call Home

Smart Care Smart Net Total Care

Operations Exchange

MobileApplications

Cisco Proximity

Cisco Technical Support

Online ToolsandResources

Cisco BugDiscussions Technical

DocumentationIdeas

SupportCommunityHelp

Data Center

Application Networking

Intelligent Automation Server Networking Storage Networking

Unified Computing Wide Area Application Services

(WAAS) Other Subjects

SmallBusiness

Network

Storage Routers

Security Surveillance Switches

Voice andConferencing

Wireless

Solutions andArchitectures

Borderless Networks

Collaboration Cisco User Groups

Seattle Cisco User Group (SEACUG)

Silicon Valley Cisco User Group (SVCUG) Southern California Cisco User Group(SCCUG)

Cisco SMBMarketplace



Community Corner

Awards & RecognitionsBehind the ScenesCisco Cafe

Cisco.com Idea CenterCommunity Ideas

Feedback ForumMobile Community

Login | Register

Search

Home/Wireless - Mobility

Additional CommunitiesCommunity Corner

Data CenterMobile ApplicationsNetwork Infrastructure

Service ProvidersCollaboration, Voice and VideoSmall Business Support Community

SecuritySolutions and Architectures

ServicesTop ContributorsCisco User Groups

On DemandOnline Tools and Resources

Private/Getting Started with Wireless

WLCCASecurity and Network Management

Wireless IP Voice and VideoOther Wireless - Mobility Subjects

Language: EnglishEnglish

(Japanese)Espaol (Spanish)

Portugus (Portuguese)

P (Russian) (Chinese)

Contact Us

Help

Follow Us



Facebook

Twitter

Google +

LinkedIn

YouTube

Newsletter

Instagram

Wireless LAN FlexConnect Configuration Example

Document

Apr 27, 2012 12:33 AM

baramamu 2 years ago

Table of Contents [hide]

Introduction

Configuring the Wireless LAN Controller for FlexConnect (GUI)

Configuring an Access Point for FlexConnect (GUI)

Verifying the client connectivity

Introduction

FlexConnect is a wireless solution for branch office and remote office deployments. Prior to WLC Release 7.2,FlexConnect was referred as Hybrid REAP (HREAP). Now it is called FlexConnect.

FlexConnect feature enables customers to configure and control Access Points through a wide area network (WAN)link without deploying a controller in each branch office. The FlexConnect access points can switch client data traffic

and perform client authentication locally when their connection to the controller is lost. When they are connected to the

controller, they can also send traffic back to the controller. In the connected mode, the FlexConnect access point can



also perform local authentication.

FlexConnect is supported on the Cisco Aironet 1130AG, 1140, 1240, 1250, 1260, AP801, AP802, AP3550, and

Cisco Aironet 600 Series OfficeExtend Access Points on the Cisco WiSM, Cisco 5500, 4400, 2100, 2500, and Flex

7500 Series Controllers, the Catalyst 3750G Integrated Wireless LAN Controller Switch; the Controller NetworkModule for Integrated Services Routers.

Configuring the Wireless LAN Controller for FlexConnect (GUI)

1. Choose WLANs from Controller web interface to open the WLANs page.

2. From the drop-down list, select Create New option and click on Go to open the WLANs > New page.

3. From Type drop-down list, choose WLANS.

4. In the Profile Name text box, enter a unique profile name for the WLAN. In this example Profile Name isFlexcon.

5. In the WLAN SSID Text box, enter a name for WLAN. In our example, SSID is FlexWIFI.

6. From the WLAN ID drop-down list, choose the ID number for this WLAN. Here WLAN ID is 4.7. Click on Apply to save your changes.



8. Once we apply the changes, Edit page appears. The controller can be configured for FlexConnect in both

centrally switched and locally switched WLANs. In this example, lets configure the controller for FlexConnect in

a locally switched WLAN.9. In the General tab, select the Status check box to enable the WLAN.

10. In the Security > Layer 2 tab, select WPA+WPA2 from the Layer 2 Security drop-down list and then setthe WPA+WPA2 parameters as required.

11. In the Advanced tab, select the FlexConnect Local Switching check box to enable local switching for the

WLAN. Click Apply to save your changes. Click Save Configuration to save your changes.



1. We can verify the configuration of the FlexConnect in WLANS tab

Configuring an Access Point for FlexConnect (GUI)

1. Select Wireless to open the All APs page. And click the name of the desired access point. In our example click

on AP_3500E. The All APs >

Details page appears.

1. Select FlexConnect from the AP Mode drop-down list to enable FlexConnect for AP_3500E access point.



2. Click Apply to save your changes and the AP will reboot.

3. After the reboot the AP will have Flexconnect Tab. Click on FlexConnect tab to open the All APs > Details for

(FlexConnect) page. Note: If the access point belongs to a FlexConnect group, the name of the group appears

in the FlexConnect Name text box.



Select the VLAN Support check box and enter the number of the native VLAN on the remote network (such as 100)

in the Native VLAN ID

text box.

1. Click Apply to save the changes. The access point temporarily loses its connection to the controller while its

Ethernet port is reset.

2. Click the name of the same access point and then select the FlexConnect tab.3. Click VLAN Mappings to open the All APs > Access Point Name > VLAN Mappings page.

Enter the number of the VLAN from which the clients will get an IP address when doing local switching (VLAN 61, in

this example) in the VLAN

ID text box



.

1. Click Apply to commit your changes.2. Click Save Configuration to save your changes

Verifying the client connectivity

Choose MONITOR > Clients or MONITOR > Summary to verify whether the clients are getting associated to the

Flexconnect AP.



Rating

Average Rating: 5 (1 ratings)

Log in or register to post comments

Share:

Comments

stephen.marshall 2 years ago

Hi there - just a point of confusion for my self that I would like clarified. Please can you confirm whether or not the

Aironet 1040 series APs support HREAP?

many thanks

Stephen Marshall

See More


dgohain 2 years ago (reply to stephen.marshall)



Yes stephen 1040 is supported

.

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080736123.shtml

See More


vinayaka.raman 2 years ago (reply to dgohain)

remote office ap registered to corporate off wlc in flex connect mode..

i wanted to ensure they recieve ip address from the local wlc not the wlc configured on controller

how can i acheive this ?

See More


dgohain 2 years ago (reply to vinayaka.raman)

are you talking about a single wlc in the corporate site and a ap on the local site and you want clients to get ip from thelocal DHCP server than follow this document:

http://www.cisco.com/en/US/products/ps11635/products_tech_note09186a0080b7f141.shtml

See More


mvoegtlin 2 years ago



Hi

I configured flexconnect as described. But my clients dont't have connectivity to the local network.

I used vlan 2334 vor Clients and vlan 186 as native vlan,

I'm running code

7.2.110.0 on 5500 controller and 1242bg Access Points

See More



I've got some additional information on my problem:

I checked the MAC addresse on the switch interface. There is no mac address entry on the client vlan.

The switch configuration ist correct. I don't use any authentication on the wirless LAN.

Has someone an idea why my setup is not working?

I also tried a vlan number 310 (standard vlan instead of extended vlans) for clients -> no difference

Thanks for your support.

See More


Scott Fella 2 years ago (reply to mvoegtlin)

Your switchport is a trunk port correct and it's allowing the native vlan of the ap and vlan 310? Can you post you ap

switchport config. Is spanning-tree forwarding vlan 310 on that port?

See More




mvoegtlin 2 years ago (reply to Scott Fella)

Hi Scott

Thanks for your help.

Here ist the switch config. The AP is working fine. I have access to the AP, but client traffic is obviousliy not bridged

to vlan 2335. I set the AP mode flex connect and the native vlan to 310. In the vlan mapping section on the AP, I setthe SSID to vlan 2335.

interface GigabitEthernet3/18

switchport access vlan 310

switchport trunk encapsulation dot1q

switchport trunk native vlan 310

switchport trunk allowed vlan 310,331,2335

switchport mode trunk

switchport port-security

switchport port-security violation restrict

no snmp trap link-status

spanning-tree portfast trunk

spanning-tree bpduguard enable

switch#sh spann int gig 3/18

Vlan Role Sts Cost Prio.Nbr Type

------------------- ---- --- --------- -------- --------------------------------

VLAN0310 Desg FWD 19 128.146 P2p Edge



See More




Scott Fella 2 years ago (reply to mvoegtlin)

I would test with a vlan that has a lower id. I never used vlans above 999 to be honest. This will just prove of its thehigh vlan id or not. I woul also remove the port security on the trunk port.

See More



Hi Scott

I already checked with vlan id 331. But the port-security is a good hint.

I just checked the switch and saw that Security-Violation counters are at a high level on that port. I'm pretty sure thatport-securtiy is the problem. I'm sorry, just wasn't aware of this configuration. I will test it tomorow and give a

feedback.

See More



Hi Scott

Yes, as you were right. Port security on the LAN Switch was the problem. Thanks once again, and sorry for my silly

question. Should have seen it myself .

See More




shamax_1983 2 years ago

Hi All,

Can I use the Native vlan to map one of the SSIDs ?

Thanks

Shamal

See More


rasyadanr 2 years ago

Hi Markus/Scott,

Where is the configuration of the swith took placed? the access switch that connect directly to AP or at the

core/distribution switch? I have 40 APs at remote site which the controller resides at HQ. The connection betweenAPs and controller seems ok. The APs got the dynamic ip address and joined the controller. Sadly, the clients at

remote site do not get the ip address after connected to the SSID. The WAN connection between the HQ & remotesite is using access port via MetroE network.

Please help me to rectify this problem. Thank you in advance.

See More


shamax_1983 2 years ago (reply to rasyadanr)



Do your remote users reside in seperate VLAN to what the Access Points are in ?

If so, for the customers to get an IP from there specific VLAN, you sould either have a dhcp ip-helper address definedon the local router (remote router) or have DHCP server available locally.

See More


mvoegtlin 2 years ago (reply to rasyadanr)

Hi Rasyadan

On the access switch you have to configure the access VLAN (L2).

On the next hop (L3) you have to configure the IP-Helper for the dhcp server.

The configuration is similar to normal wired switched environment.

Using flex connect, IP-Helper addresses configured on the controller have no effect.

See More


iskoy.istem about a year ago

Hi,

can i have a locally switched VLAN gateway to a local internet connection in a branch?

See More


mvoegtlin about a year ago

Hi Joseph



Yes, that's what I used the feature for.

See More


jspradling 10 months ago

Any way to set the AP flexconnect parameters for all the AP's, or do you have to hit each one individually?

See More


mali1977us 4 months ago

Great document, I do have a question about this part:

Select the VLAN Support check box and enter the number of the native VLAN on the remote network (such as100) in the Native VLAN ID text box.

This Native VLAN that I define here on the 5508 WLC at the corporate site this would be the native VLAN of theremote site not the Corporate site correct?

FlexConnect group what is that for exactly?

Also 5508 supports 100 AP groups and 25 AP's per group so that equates to 2500 AP's however max AP support

on 5508 is 500 AP's. Can someone confirm what is the exact number?

See More




IngGerardo013 2 months ago

Hi there,

Configuration it seems not so complicated, I am goint to implement it next wednesday on the remote office, on thecentral office they have a virtual WLC with the latest release 7.6.100. reading this document, I get a little doubts,

1.- If the AP is on remote office, How can I tell to the AP that look for virtual WLC that is on central office to getregistered? if the AP look for VWLC locally (making broadcast that no pass over the WAN link).

2.- How the virutal WLC will know that the native vlan specified (for the AP) on this configuration example is across

the WAN link?

3.- What considerations we neet to take making reference to routing (on switch core of the remote office, radiusservers and certificates)

4.- We need to create interfaces on the virtual WLC?...

Thanks a lot for yor inputs. I will apreciate so much.

See More


Actions

Login or Register to take actions

This Document

Posted April 27, 2012 at 12:33 AM



Show

- Any -

By baramamuStats:

Comments: 20 Avg. Rating: 5

Views: 30426 Contributors: 11

Shares: 7

Tags: configuration, hreap, wireless, h-reap, wireless_lan, example, configuration_example, flexconnect

+

FollowShortcutAbuseSave

Related Content

DiscussionCiscoworks LMS 3.2 Bulk Configuration Exportbriantsaunders2 days 9 hours ago1 viewsDocumentDeploying ASA with CX module as a Cisco Cloud Web Security (CWS) Connectorcsaxena1 week 10 hours ago0 viewsBlogImplementing Voice Gateway on CUCM 10.xmpaneers2 weeks 6 days ago3 viewsDiscussionCisco Pix 501 random connectivityemanueled11 month 18 hours ago37 viewsDocumentUnderstanding ASR9000 BNG DHCPv4 Routed Subscriberraghuvkr1 month 2 weeks ago80 views



Documents Leaderboard

All Time Monthly

Rank Username Points

1 rtracy 15

View Full Leaderboards

Information For

Small BusinessMidsize BusinessExecutives

HomeService Provider

Industries



ContactsContact Cisco

News & AlertsNewsroomBlogs

Field NoticesSecurity Advisories

Technology TrendsCloud

IPv6MobilityOpen Network Environment

Trustworthy Systems

SupportDownloadsDocumentation

CommunitiesDeveloper Network

Learning NetworkSupport Community

Video Portal

About Cisco

Investor RelationsCorporate Social Responsibility

Environmental SustainabilityTomorrow Starts HereCareer Opportunities

ProgramsCisco Designated VIP Program

Cisco PowereredFinancing Options

Terms & ConditionsPrivacy Statement

Cookie PolicyTrademarks of Cisco Systems, Inc.