A structured lesson workspace with readable content, hands-on examples, and a clean path to completion.
That output is a Rosetta stone for WLC concepts. Every WLC has a set of logical interfaces, each with a role. Understanding them is the difference between a WLC you can configure and one you just stare at.
| Interface | Purpose | Typical subnet |
|---|---|---|
| Management | WLC's own management IP, AP join target | Infrastructure VLAN |
| Dynamic (one per client VLAN) | Maps WLANs to client subnets | One per user VLAN |
| Virtual | Used for DHCP relay and web auth | Any unused IP (usually 192.0.2.1) |
| Service-port | Out-of-band management, physically separate | Dedicated subnet |
| Redundancy | HA pairing between WLCs | Infrastructure VLAN |
The virtual interface is the odd one. It has an IP, but nothing routes to it. It's used as the source IP for DHCP relay (so DHCP servers see a consistent relay address) and as the redirect target for web authentication. Best practice is to use an RFC 5737 documentation address like 192.0.2.1 — unreachable on purpose.
Discovery is layered. First the AP gets an IP via DHCP. Then it resolves a special DNS name (`CISCO-CAPWAP-CONTROLLER` + domain name) or uses DHCP option 43 to learn the WLC's IP. Then it sends a CAPWAP Discovery Request — UDP 5246 — and if the WLC responds, they negotiate a join.
If DNS lookup and DHCP option 43 both fail, the AP falls back to broadcasting on the local subnet and trying several other methods (cached WLC addresses, prior join info). This is why an AP shipped to a branch office can be plug-and-play if the DHCP scope includes the WLC IP in option 43.
Roaming is where WLCs earn their keep. A client walking between APs doesn't want to re-authenticate or re-associate at every step. The WLC maintains a mobility database of clients and coordinates the handoff between APs.
Finish the lesson once you have worked through the material. This awards ★ 15 XP.