接口 :web
virtual interface : (
二三層漫遊)
用於支持移動性管理需求 (客戶端漫遊時的網關)
DHCP中繼
嵌入式三層安全
guest web認證 (web認證重定向地址)
×××終結
客戶端在不一樣控制器和客戶端之間通訊
在一個網絡裏其餘設備不一樣配置和virtual interface相同的地址 不能被映射到任何物理口 不能存在與路由表中全部控制器在一個移動組裏virtual interface必須配置相同的IP
Enter the following parameters:
• Any fictitious, unassigned, and unused gateway IP address
• DNS gateway hostname
To ensure connectivity and web authentication, the DNS server should always point to the virtual interface.
If a DNS hostname is configured for the virtual interface, then the same DNS host name must be configured
on the DNS server(s) used by the client.
config interface address dynamic-interface/management/service-port/virtual x.x.x.x
config interface hostname virtual
show interface detailed virtual
Service-Port Interface
默認網關不能設置爲service接口IP
控制器上能夠定義遠端網絡到達服務接口的路由
用於控制器的帶外網管
一般預留一個VLAN和子網供WLC和LWAPP使用,可將管理子網中的IP分配給管理接口和AP管理接口
外部管理數據流(web,telnet,ssh,aaa)和LWAPP都到達此地址
因爲LAP分佈於不一樣的位置,LAP的數據流視爲外部數據流
config route add
network-ip-addr ip-netmask gateway
可經過config route add x.x.x.x x.x.x.x來定義遠程工做站到控制器的路由
show interface detailed service-port
Interface Name................................... service-port
MAC Address...................................... 00:0c:29:16:0c:f0
IP Address....................................... 172.16.1.254
IP Netmask....................................... 255.255.255.0
DHCP Protocol.................................... Disabled
AP Manager....................................... No
Guest Interface.................................. No
動態接口 : (
橋接無線客戶端的接口)
即vlan 接口,被用戶建立用作客戶端的vlan,也稱用戶口
一臺控制器最多支持512個動態接口 客戶端關聯到無線接口的DHCP中繼
二層管理口 , 三層AP管理口
全部的動態口必須在不一樣的VLAN或IP子網中
Wireless Controllers |
Maximum VLANs |
Cisco Virtual Wireless Controller |
512 |
Cisco Wireless Controller Module for ISR G2 |
16 |
Cisco 2500 Series Wireless Controllers |
16 |
Cisco 5500 Series Wireless Controller |
512 |
Cisco Catalyst 6500 Series Wireless Services
Module2 (WiSM2) 512
Cisco Flex 7500 Series Cloud Controller 4,096
Cisco 8500 Series Controller 4,096
If you are using DHCP proxy and/or a RADIUS source interface, ensure that the dynamic interface has
a valid routable address. Duplicate or overlapping addresses across controller interfaces are not supported.
We recommend using tagged VLANs for dynamic interfaces
AP-manager interface :
控制器和AP之間的3層通訊
WLC在此接口上偵聽LAP試圖發現控制器時發送的子網廣播 新版本複用了manage interface
用作AP到控制器之間的CAPWAP/LWAPP隧道間的關聯和通訊