You are on page 1of 22

7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956

956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 1/22

Search
Language: English
English
(Japanese)
Espaol (Spanish)
Portugus (Portuguese)
P (Russian)
(Chinese)
Contact Us
Help
Follow Us
Facebook
Twitter
Google +
LinkedIn
YouTube
Newsletter
Instagram
Community Directory
Expert Corner
Solutions
Community Corner
Community Resources
Cisco
Cisco Support Community
Community Directory
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 2/22
Expert Corner
Top Contributors
Leaderboards
Knowledge Sharing
Experts Bureau
Cisco Live! Events
Solutions
Cisco SMB Marketplace
Cisco On Demand
OnDemand Solutions
Network
Infrastructure
WAN, Routing and Switching
LAN, Switching and Routing
Network Management
Remote Access
Optical Networking
Getting Started with LANs
IPv6 Integration and Transition
EEM Scripting
Other Subjects
Security
VPN
Security Management
Firewalling
Intrusion Prevention
Systems/IDS
AAA, Identity and NAC
Physical Security
MARS
Email Security
Web Security
Other Subjects
Service
Providers
Metro
MPLS
Voice Over IP
XR OS and
Platforms
Video
Other Subjects
Collaboration,
Voice and
Video
IP Telephony
Video Over IP
Jabber Clients
Unified
Communications
Applications
TelePresence
Digital Media
System
Contact Center
Conferencing
UC Migrations
Other Subjects
Wireless - Mobility
Security and Network
Management
Wireless IP Voice and Video
Getting Started with Wireless
WLCCA
Other Subjects
Services
Cisco ServiceGrid
Compliance Management and Configuration
Service
Connected Analytics
Customer Premises Equipment (CPE) Support
Data Center and Virtualization
Partner Support Service
Smart Call Home
Smart Care
Smart Net Total Care
Operations Exchange
Mobile
Applications
Cisco Proximity
Cisco Technical Support
Online Tools
and
Resources
Cisco Bug
Discussions
Technical
Documentation
Ideas
Support
Community
Help
Data Center
Application Networking
Intelligent Automation
Server Networking
Storage Networking
Unified Computing
Wide Area Application Services
(WAAS)
Other Subjects
Small
Business
Network
Storage
Routers
Security
Surveillance
Switches
Voice and
Conferencing
Wireless
Solutions and
Architectures
Borderless Networks
Collaboration
Cisco User Groups
Seattle Cisco User Group (SEACUG)
Silicon Valley Cisco User Group (SVCUG)
Southern California Cisco User Group
(SCCUG)
Cisco SMB
Marketplace
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 3/22
Community Corner
Awards & Recognitions
Behind the Scenes
Cisco Cafe
Cisco.com Idea Center
Community Ideas
Feedback Forum
Mobile Community
Login | Register
Search
Home/
Wireless - Mobility
Additional Communities
Community Corner
Data Center
Mobile Applications
Network Infrastructure
Service Providers
Collaboration, Voice and Video
Small Business Support Community
Security
Solutions and Architectures
Services
Top Contributors
Cisco User Groups
On Demand
Online Tools and Resources
Private
/
Getting Started with Wireless
WLCCA
Security and Network Management
Wireless IP Voice and Video
Other Wireless - Mobility Subjects
Language: English
English
(Japanese)
Espaol (Spanish)
Portugus (Portuguese)
P (Russian)
(Chinese)
Contact Us
Help
Follow Us
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 4/22
Facebook
Twitter
Google +
LinkedIn
YouTube
Newsletter
Instagram
Wireless LAN FlexConnect Configuration Example
Document
Apr 27, 2012 12:33 AM
baramamu 2 years ago
Table of Contents [hide]
Introduction
Configuring the Wireless LAN Controller for FlexConnect (GUI)
Configuring an Access Point for FlexConnect (GUI)
Verifying the client connectivity
Introduction
FlexConnect is a wireless solution for branch office and remote office deployments. Prior to WLC Release 7.2,
FlexConnect was referred as Hybrid REAP (HREAP). Now it is called FlexConnect.
FlexConnect feature enables customers to configure and control Access Points through a wide area network (WAN)
link without deploying a controller in each branch office. The FlexConnect access points can switch client data traffic
and perform client authentication locally when their connection to the controller is lost. When they are connected to the
controller, they can also send traffic back to the controller. In the connected mode, the FlexConnect access point can
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 5/22
also perform local authentication.
FlexConnect is supported on the Cisco Aironet 1130AG, 1140, 1240, 1250, 1260, AP801, AP802, AP3550, and
Cisco Aironet 600 Series OfficeExtend Access Points on the Cisco WiSM, Cisco 5500, 4400, 2100, 2500, and Flex
7500 Series Controllers, the Catalyst 3750G Integrated Wireless LAN Controller Switch; the Controller Network
Module for Integrated Services Routers.
Configuring the Wireless LAN Controller for FlexConnect (GUI)
1. Choose WLANs from Controller web interface to open the WLANs page.
2. From the drop-down list, select Create New option and click on Go to open the WLANs > New page.
3. From Type drop-down list, choose WLANS.
4. In the Profile Name text box, enter a unique profile name for the WLAN. In this example Profile Name is
Flexcon.
5. In the WLAN SSID Text box, enter a name for WLAN. In our example, SSID is FlexWIFI.
6. From the WLAN ID drop-down list, choose the ID number for this WLAN. Here WLAN ID is 4.
7. Click on Apply to save your changes.
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 6/22
8. Once we apply the changes, Edit page appears. The controller can be configured for FlexConnect in both
centrally switched and locally switched WLANs. In this example, lets configure the controller for FlexConnect in
a locally switched WLAN.
9. In the General tab, select the Status check box to enable the WLAN.
10. In the Security > Layer 2 tab, select WPA+WPA2 from the Layer 2 Security drop-down list and then set
the WPA+WPA2 parameters as required.
11. In the Advanced tab, select the FlexConnect Local Switching check box to enable local switching for the
WLAN. Click Apply to save your changes. Click Save Configuration to save your changes.
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 7/22
1. We can verify the configuration of the FlexConnect in WLANS tab
Configuring an Access Point for FlexConnect (GUI)
1. Select Wireless to open the All APs page. And click the name of the desired access point. In our example click
on AP_3500E. The All APs >
Details page appears.
1. Select FlexConnect from the AP Mode drop-down list to enable FlexConnect for AP_3500E access point.
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 8/22
2. Click Apply to save your changes and the AP will reboot.
3. After the reboot the AP will have Flexconnect Tab. Click on FlexConnect tab to open the All APs > Details for
(FlexConnect) page. Note: If the access point belongs to a FlexConnect group, the name of the group appears
in the FlexConnect Name text box.
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 9/22
Select the VLAN Support check box and enter the number of the native VLAN on the remote network (such as 100)
in the Native VLAN ID
text box.
1. Click Apply to save the changes. The access point temporarily loses its connection to the controller while its
Ethernet port is reset.
2. Click the name of the same access point and then select the FlexConnect tab.
3. Click VLAN Mappings to open the All APs > Access Point Name > VLAN Mappings page.
Enter the number of the VLAN from which the clients will get an IP address when doing local switching (VLAN 61, in
this example) in the VLAN
ID text box
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 10/22
.
1. Click Apply to commit your changes.
2. Click Save Configuration to save your changes
Verifying the client connectivity
Choose MONITOR > Clients or MONITOR > Summary to verify whether the clients are getting associated to the
Flexconnect AP.
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 11/22
Rating
Average Rating: 5 (1 ratings)
Log in or register to post comments
Share:
Comments
stephen.marshall 2 years ago
Hi there - just a point of confusion for my self that I would like clarified. Please can you confirm whether or not the
Aironet 1040 series APs support HREAP?
many thanks
Stephen Marshall
See More
Log in or register to post comments
dgohain 2 years ago (reply to stephen.marshall)
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 12/22
Yes stephen 1040 is supported
.
http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080736123.shtml
See More
Log in or register to post comments
vinayaka.raman 2 years ago (reply to dgohain)
remote office ap registered to corporate off wlc in flex connect mode..
i wanted to ensure they recieve ip address from the local wlc not the wlc configured on controller
how can i acheive this ?
See More
Log in or register to post comments
dgohain 2 years ago (reply to vinayaka.raman)
are you talking about a single wlc in the corporate site and a ap on the local site and you want clients to get ip from the
local DHCP server than follow this document:
http://www.cisco.com/en/US/products/ps11635/products_tech_note09186a0080b7f141.shtml
See More
Log in or register to post comments
mvoegtlin 2 years ago
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 13/22
Hi
I configured flexconnect as described. But my clients dont't have connectivity to the local network.
I used vlan 2334 vor Clients and vlan 186 as native vlan,
I'm running code
7.2.110.0 on 5500 controller and 1242bg Access Points
See More
Log in or register to post comments
mvoegtlin 2 years ago
I've got some additional information on my problem:
I checked the MAC addresse on the switch interface. There is no mac address entry on the client vlan.
The switch configuration ist correct. I don't use any authentication on the wirless LAN.
Has someone an idea why my setup is not working?
I also tried a vlan number 310 (standard vlan instead of extended vlans) for clients -> no difference
Thanks for your support.
See More
Log in or register to post comments
Scott Fella 2 years ago (reply to mvoegtlin)
Your switchport is a trunk port correct and it's allowing the native vlan of the ap and vlan 310? Can you post you ap
switchport config. Is spanning-tree forwarding vlan 310 on that port?
See More
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 14/22
Log in or register to post comments
mvoegtlin 2 years ago (reply to Scott Fella)
Hi Scott
Thanks for your help.
Here ist the switch config. The AP is working fine. I have access to the AP, but client traffic is obviousliy not bridged
to vlan 2335. I set the AP mode flex connect and the native vlan to 310. In the vlan mapping section on the AP, I set
the SSID to vlan 2335.
interface GigabitEthernet3/18
switchport access vlan 310
switchport trunk encapsulation dot1q
switchport trunk native vlan 310
switchport trunk allowed vlan 310,331,2335
switchport mode trunk
switchport port-security
switchport port-security violation restrict
no snmp trap link-status
spanning-tree portfast trunk
spanning-tree bpduguard enable
switch#sh spann int gig 3/18
Vlan Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
VLAN0310 Desg FWD 19 128.146 P2p Edge
VLAN0331 Desg FWD 19 128.146 P2p Edge
VLAN2335 Desg FWD 19 128.146 P2p Edge
See More
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 15/22
Log in or register to post comments
Scott Fella 2 years ago (reply to mvoegtlin)
I would test with a vlan that has a lower id. I never used vlans above 999 to be honest. This will just prove of its the
high vlan id or not. I woul also remove the port security on the trunk port.
See More
Log in or register to post comments
mvoegtlin 2 years ago
Hi Scott
I already checked with vlan id 331. But the port-security is a good hint.
I just checked the switch and saw that Security-Violation counters are at a high level on that port. I'm pretty sure that
port-securtiy is the problem. I'm sorry, just wasn't aware of this configuration. I will test it tomorow and give a
feedback.
See More
Log in or register to post comments
mvoegtlin 2 years ago
Hi Scott
Yes, as you were right. Port security on the LAN Switch was the problem. Thanks once again, and sorry for my silly
question. Should have seen it myself .
See More
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 16/22
Log in or register to post comments
shamax_1983 2 years ago
Hi All,
Can I use the Native vlan to map one of the SSIDs ?
Thanks
Shamal
See More
Log in or register to post comments
rasyadanr 2 years ago
Hi Markus/Scott,
Where is the configuration of the swith took placed? the access switch that connect directly to AP or at the
core/distribution switch? I have 40 APs at remote site which the controller resides at HQ. The connection between
APs and controller seems ok. The APs got the dynamic ip address and joined the controller. Sadly, the clients at
remote site do not get the ip address after connected to the SSID. The WAN connection between the HQ & remote
site is using access port via MetroE network.
Please help me to rectify this problem. Thank you in advance.
See More
Log in or register to post comments
shamax_1983 2 years ago (reply to rasyadanr)
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 17/22
Do your remote users reside in seperate VLAN to what the Access Points are in ?
If so, for the customers to get an IP from there specific VLAN, you sould either have a dhcp ip-helper address defined
on the local router (remote router) or have DHCP server available locally.
See More
Log in or register to post comments
mvoegtlin 2 years ago (reply to rasyadanr)
Hi Rasyadan
On the access switch you have to configure the access VLAN (L2).
On the next hop (L3) you have to configure the IP-Helper for the dhcp server.
The configuration is similar to normal wired switched environment.
Using flex connect, IP-Helper addresses configured on the controller have no effect.
See More
Log in or register to post comments
iskoy.istem about a year ago
Hi,
can i have a locally switched VLAN gateway to a local internet connection in a branch?
See More
Log in or register to post comments
mvoegtlin about a year ago
Hi Joseph
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 18/22
Yes, that's what I used the feature for.
See More
Log in or register to post comments
jspradling 10 months ago
Any way to set the AP flexconnect parameters for all the AP's, or do you have to hit each one individually?
See More
Log in or register to post comments
mali1977us 4 months ago
Great document, I do have a question about this part:
Select the VLAN Support check box and enter the number of the native VLAN on the remote network (such as
100) in the Native VLAN ID text box.
This Native VLAN that I define here on the 5508 WLC at the corporate site this would be the native VLAN of the
remote site not the Corporate site correct?
FlexConnect group what is that for exactly?
Also 5508 supports 100 AP groups and 25 AP's per group so that equates to 2500 AP's however max AP support
on 5508 is 500 AP's. Can someone confirm what is the exact number?
See More
Log in or register to post comments
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 19/22
IngGerardo013 2 months ago
Hi there,
Configuration it seems not so complicated, I am goint to implement it next wednesday on the remote office, on the
central office they have a virtual WLC with the latest release 7.6.100. reading this document, I get a little doubts,
1.- If the AP is on remote office, How can I tell to the AP that look for virtual WLC that is on central office to get
registered? if the AP look for VWLC locally (making broadcast that no pass over the WAN link).

2.- How the virutal WLC will know that the native vlan specified (for the AP) on this configuration example is across
the WAN link?

3.- What considerations we neet to take making reference to routing (on switch core of the remote office, radius
servers and certificates)

4.- We need to create interfaces on the virtual WLC?...


Thanks a lot for yor inputs. I will apreciate so much.



See More
Log in or register to post comments
Actions
Login or Register to take actions
This Document
Posted April 27, 2012 at 12:33 AM
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 20/22
Show
- Any -
By baramamu
Stats:
Comments: 20 Avg. Rating: 5
Views: 30426 Contributors: 11
Shares: 7
Tags: configuration, hreap, wireless, h-reap, wireless_lan, example, configuration_example, flexconnect
+
Follow
Shortcut
Abuse
Save
Related Content
Discussion
Ciscoworks LMS 3.2 Bulk Configuration Export
briantsaunders
2 days 9 hours ago
1 views
Document
Deploying ASA with CX module as a Cisco Cloud Web Security (CWS) Connector
csaxena
1 week 10 hours ago
0 views
Blog
Implementing Voice Gateway on CUCM 10.x
mpaneers
2 weeks 6 days ago
3 views
Discussion
Cisco Pix 501 random connectivity
emanueled1
1 month 18 hours ago
37 views
Document
Understanding ASR9000 BNG DHCPv4 Routed Subscriber
raghuvkr
1 month 2 weeks ago
80 views
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 21/22
Documents Leaderboard
All Time Monthly
Rank Username Points
1
rtracy
15
View Full Leaderboards
Information For
Small Business
Midsize Business
Executives
Home
Service Provider
Industries
7/4/2014 Wireless LAN FlexConnect Configuration Example | Getting Started with Wireless | Cisco Technical Support Forum | 5956 | 98646
https://supportforums.cisco.com/document/98646/wireless-lan-flexconnect-configuration-example 22/22
Contacts
Contact Cisco
News & Alerts
Newsroom
Blogs
Field Notices
Security Advisories
Technology Trends
Cloud
IPv6
Mobility
Open Network Environment
Trustworthy Systems
Support
Downloads
Documentation
Communities
Developer Network
Learning Network
Support Community
Video Portal
About Cisco
Investor Relations
Corporate Social Responsibility
Environmental Sustainability
Tomorrow Starts Here
Career Opportunities
Programs
Cisco Designated VIP Program
Cisco Powerered
Financing Options
Terms & Conditions
Privacy Statement
Cookie Policy
Trademarks of Cisco Systems, Inc.