...
- Access to the Internet is performed in vlan 3500, using the default gateway 172.16.0.1 (router-NAT) for the default route. User egress is done by routing to router-NAT, which performs NAT translation of user addresses to the Internet.
- ESR control network is located in vlan 1200, subnet 10.20.20.20.0/28, which is also used for interaction with SoftWLC complex.
- APs receive the management IP address in vlan 3 from the DHCP server deployed on SoftWLC, from the network 10.10.10.0.0/23. In option 43, the SoftWLC server address is transmitted (see How to configure option 43, and other DHCP configuration aspects). At the same time AP sends packets from the management address without vlan tag, so on the switch, on the port of which it is connected, the untagged traffic from AP should be tagged with vlan ID 3. Then vlan 3 comes to ESR, where it is terminated on sub-interface gi1/0/1.3, whose address (10.10.10.10.1) will be the default gateway for AP management address.
- SSID is configured on the AP, with vlan ID 10. The traffic of this SSID will be coming from the point with tag 10, so on the switch port to which the AP is connected we configure vlan 10 in tagged mode and bring it to ESR. On the ESR, vlan 10 comes on the sub-interface gi1/0/1.10, which address 100.64.0.1 will be the default gateway for SSID users.
- All user traffic will be passed from vlan 10 to the ESR. DHCP requests from the client will be redirected to SoftWLC using DHCP-relay ESR.
...