Accounting + mDNS gateway + mobility groups

Services & wireless
Advanced
12 min
2 steps
Cisco IOS-XE-style

Three operator-visible surfaces from the 300-430 ENWLSI blueprint, in one lab. AAA accounting: after WPA2-Enterprise Access-Accept, the WLC fires a RADIUS Acct-Start carrying Acct-Status-Type: Start + Acct-Session-Id; the AAA server replies with Accounting-Response. mDNS gateway: the WLC carries a named-policy catalog of allowed DNS-SD service strings; show wireless mdns-sd policy surfaces the catalog plus any policy-profile that references a missing entry. Mobility groups: WLCs sharing a group name form a mobility tunnel; show wireless mobility summary reports per-peer tunnel verdict (formed vs mismatch).

Open this lab in your browser →

Free · no install · no account

Scenario

These three knobs land together because they're all "config + show + verification" surfaces — no new datapath, no new wire encap. They each close ~3-5% of the ENWLSI exam-weight blueprint. After the existing WPA2-Enterprise auth flow lands an Access-Accept (Slice N), the WLC immediately follows with a RADIUS Accounting-Request carrying: - Acct-Status-Type: Start - Acct-Session-Id: <unique 32-bit> - User-Name, Calling-Station-Id, Framed-IP-Address The existing RADIUS server-side handler (in aaa/wire.ts) replies Accounting-Response. The wifi-client carries the active session id at runtime via wifiClient.acctSessionId. Pcap shows both legs. Cisco WLCs catalog allowed mDNS service-type strings (_airplay._tcp.local, _googlecast._tcp.local, etc.) and reference them per policy-profile via policyProfile.mdnsServicePolicy. Slice R adds the catalog IR (device.wireless.mdnsServicePolicies) plus a show command that: - Lists each policy + its services + the policy-profiles that reference it. - Surfaces unresolved references (a policy-profile pointing at a name not in the catalog) as a separate Unresolved references: line. Actual frame interception of UDP/5353 multicast is forward work; the slice ships the config + verification surface. WLCs in the same mobilityGroup (string name) form a mobility tunnel that lets clients roam between controllers without re-auth. mobilityPeers lists the other WLCs the local one knows about. show wireless mobility summary reports per-peer verdict: formed when the peer's group matches ours, mismatch (peer-group=X, local=Y) otherwise — the canonical "I configured it wrong" failure mode. Cross-controller client-context handoff (the actual roaming exchange) is forward work.

Topology

1 × wireless controller · Cisco IOS-XE-style

WLC1 — wireless controller

What you will do

On WLC1, run show wireless mdns-sd policy. Output should list 2 policies: APPLE-CASTING (referenced by CORP-POL) and PRINTERS (no references).
On WLC1, run show wireless mobility summary. Output should show local group HQ-WEST + 2 peers: WLC2 (formed) and WLC3 (mismatch).

Open this lab in your browser →

Accounting + mDNS gateway + mobility groups

Scenario

Topology

What you will do

More labs on this topic

This lab in other languages