Wireless policy profile — bind egress VLAN
- Services & wireless
- Intermediate
- 12 min
- 2 steps
- Cisco IOS-XE-style
Create a *policy profile* guest-policy on WLC1 that pins client traffic to VLAN 30 with central switching turned off (so APs forward locally instead of tunneling client data back to the controller). Verify the profile is enabled.
Open this lab in your browser →
Free · no install · no account
Scenario
A WLAN profile decides *what radios advertise*. A policy profile decides *what happens to a client's traffic once it joins*: which VLAN, central or local switching, central or local DHCP, and similar forwarding-plane knobs. In the controller-managed wireless model, the two halves are bound by a Policy Tag — a separate object that lists (WLAN, policy) pairs. You build the policy half here; tags come in a follow-up lab. Defaults you will frequently flip: - central switching is on by default — client data is tunneled back to the controller. Branch deployments turn it off so the AP forwards directly to the local LAN switch. - central authentication is on by default — RADIUS lookups go via the controller. Off means the AP talks to RADIUS directly. - central dhcp is on by default — DHCP relay via controller. Off means the AP DHCPs straight to the LAN. - The profile is born shut down. You must no shutdown it before any tag will reference it usefully. Grammar: `` wireless profile policy <name> vlan <1..4094> no central switching ! pick FlexConnect-style local switching no shutdown ``
Topology
1 × wireless controller · Cisco IOS-XE-style
WLC1— wireless controller
What you will do
On WLC1, create policy profile
guest-policyand pin egress to VLAN 30.Flip the profile to local-switching (off central switching) and bring it up.
Open this lab in your browser →
More labs on this topic
- Configure a DHCP serverBeginner · 12 min
- WLAN — broadcast a basic SSIDBeginner · 10 min
- HSRP: configure first-hop redundancyIntermediate · 12 min
- NAT: PAT (overload) for an inside LANIntermediate · 14 min
- HSRP — interface tracking with priority decrementIntermediate · 12 min
- VRF-Lite — two customers on one routerIntermediate · 12 min
This lab in other languages
WLAN-Richtlinienprofil – Ausgangs-VLAN bindenPerfil de política inalámbrica: vincular la VLAN de salidaPerfil de política sem fio – vincular VLAN de saídaProfil de stratégie sans fil – lier le VLAN de sortieवायरलेस नीति प्रोफ़ाइल - बाइंड इग्रेस वीएलएएन无线策略配置文件 — 绑定出口 VLANProfilo policy wireless: associa la VLAN in uscitaワイヤレス ポリシー プロファイル - バインド出力 VLAN무선 정책 프로필 - 송신 VLAN 바인딩Профиль политики беспроводной сети — привязка исходящей VLANKablosuz politika profili — çıkış VLAN'ını bağlayınHồ sơ chính sách không dây - liên kết Vlan đầu ra