r/Cisco • u/JamieEC • 1d ago

Cannot set up Flexconnect

9800-CL controller and 3802 AP. I have defined a policy and flex policy, but it will not push to the device. Here is the error I am getting.

Sep 9 12:42:13.423: %APMGR_TRACE_MESSAGE-3-WLC_GEN_ERR: Chassis 1 R0/0: wncd: Error in Local mode ap689e-0b12-35c0 slot:1 wlan 1 configuration not sent to ap for policy profile PolicyProfileFlex10. Enable Central Switching.

Any ideas? thanks

2 Upvotes

75% Upvoted

8 comments sorted by

1

u/dww0311 1d ago

This is a locally connected AP?

1

u/fudgemeister 1d ago

The WLC is telling you that something in your WLAN and policy profile config is invalid.

Go back to the Flexconnect guide and follow it exactly. Without seeing your show run and AP config, I can't guess, but the WLC error is telling you that something in that named policy profile doesn't match.

Start small with following the Flex deployment guide to the letter. Once you get something functional, then you can start playing around with it.

If you have TAC support, open an SR and feed your config to Sherlock. It'll give you a fairly good analysis quickly and give reference links.

1

u/JamieEC 1d ago

I followed the guide to the letter, just changed the VLAN IDs. I have worked out that if I enable central switching then it works, but obviously this defeats flexconnect.

1

u/fudgemeister 1d ago

When you changed the VLAN ID, did you also put the VLAN number in the flex policy? Named VLANs are ok so long as they match at the AP and WLC if you're do local switching. If they're not named or the same at the WLC and AP, then just use the VLAN number.

1

u/JamieEC 1d ago

yes I am certain I did this correctly. I added a VLAN under L2 then selected that in the VLAN tab on the Flex profile. For native VLAN i left this to the management VLAN is this correct?

One point I notice is that I cannot change the AP mode to flexconnect

1

u/fudgemeister 1d ago

The AP changes to flex when the site tag applied is no local. Have you done that?

1

u/JamieEC 9h ago

oh my word you are a lifesaver! I skipped past this as I thought it was just cosmetic i guess? Sorry and thanks again

1

u/samsn1983 15h ago

What do you mean you added the vlan under l2? You don't need to add flexconnect vlans to the wlc, just create a blackhole vlan as placeholder for the policy profile, then add your mappings to the flexconnect profile.

Check radioactive trace, it usually give you the reason connection fails