Wireless Access

I have noticed that one of the subnets cannot ping/ssh/web to the master controller. On that subnet, we can get to everything else on the entire network except for the master controller. The master and local our on the same subnet. Any ideas why this is happening?

We need more information.  What type of host is this that is trying to connect?  Is it wired or wireless?  Did you do a traceroute to the master or ping each hop in between?

 

The devices are all wireless. The devices are laptops or wireless workstations. I cannot ping/ssh/ web/trace route to it. But I can ping the switch in between the local and the master. It is only one switch in between the 2 controllers. From all other wireless subnets, i can get to the master.

what is the gateway of that subnet ? and what is the gateway or default route of the contollers ? make sure those 2 subnets are having routes pointing to each other from the layer 3 device.

Start from the controller and move towards the gateway of the controller's IP and from their start troubleshooting... also check what role those clients are getting and if there is any deny rule matching the controllers IPs or subnet.

from those clients Can you reach or ping any other device from the same subnet as the controllers ?

Yes, more info. Is the IP address of the controller in the same subnet as your wireless client? Any ACL's being applied to the user role?

The Master and Local controller are on one subnet and the clients are on another. The clients gateway is the controller. The controllers have routes to the core and the core has routes to the controllers.  The puzzling thing is I can get to the local controller which is on the same subnet as the master. There are no ACLs that prevent the clients to get to the master.

Probably the reason why is that the default gateway for that client is the local controller.  

 

The local controller has a route to the master that is the ipsec tunnel between them.  The master controller's return route to the client is probably not over the tunnel.  You may have a case of asymetric routing due to the fact that the default gateway of the client is the controller...

Simply Changed the AAA profile to Authentciated in inital role for your SSIDs you wnat to be aple to do all of this through wireless and make sure you disable the STP on all controllers connected to switches run STP and you will get everything work well also know your network well.