ISA 550 cannot reach a Wireless controller cisco 2400

Hi experts ,

i have a wireless controller cisco 2400 series with two wifi Profil .
My guest WIFI should be setup ed to permit just an internet connection , My firewall is a cisco ISA 550  , i configured a vlan Guest associated to my port GE7  , and i linked directly to port 2 On wireless controller , port 2 is already attribute to guest profil . i fixed 192.168.100.110/24 for isa 550 and 192.168.100.203/24 for my cisco 2400 .

THE problem, that when i try to ping 110 or 203 from the other device , it doesnt work !!!
two devices are connected directly and the ip add is configure on the same subnet .
like a test , i connect a computer instead of port 2 in cisco 2400 , with active dhcp in isa 550 , everything works .
also i have a snapgear McAfee , with the same configuration on isa550 , everything works !!
i do know why my ISA 550 cannot reach cisco 2400 (even LINK is up )
swordhitechAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Craig BeckCommented:
Do you have LAG running on the WLC?

Have you configured a VLAN ID on the Guest interface on the WLC?
0
swordhitechAuthor Commented:
yes my vlanID for guest is 2 . and LAG is disabled by default , and i dont have any option to enable it , sorry this is a 2500 series wireless controller .
0
Craig BeckCommented:
If you're not using LAG you should set the VLAN ID to 0 for the guest interface.  When you're using LAG you have to trunk everything out of the same ports, but without LAG it's one port (or multiple for failover) for each VLAN.

On the ASA you should be using a dedicated interface if it's connected directly to the WLC, which I'm guessing you are as the PC works when you connect it to the ASA.
0
Powerful Yet Easy-to-Use Network Monitoring

Identify excessive bandwidth utilization or unexpected application traffic with SolarWinds Bandwidth Analyzer Pack.

swordhitechAuthor Commented:
AS explain in problem description , Im using port 2 in my WLC for guest interface and to connect directly to my ISA , and when i set vlan id to 0 , VLAN identifier set to untagged , and it doesnt work anymore .
and i dont think it s a WLC configuration , because when using a snapgear instead of ISA550 , with a VLAN ID 20 the ping respond . (WLC configuration still the same )
Thank you
0
Craig BeckCommented:
yes my vlanID for guest is 2
If your guest VLAN ID is 2 but your snapgear is configured with VLAN ID 20 you won't be able to ping the WLC from the snapgear or vice-versa when connected directly - they