View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

WL0039 - WLC Mesh AP (Part 3)

Average: 5 (1 vote)
Difficulty Level: 
Lab Document: 
<Please login to see the content>
Video Download: 
Title: WL0039 - Video Download $17.00
Purchase WL0039 - Video Download $17.00
The video introduces you to the concept of wireless mesh on Cisco Wireless LAN Controller. Using indoor mesh in our lab, you will learn the basics and behavior of wireless mesh AP. We will go through different topology and connection scenarios from a single hop mesh to multi-hop with VLAN propagation, Ethernet bridging, and bridging with FlexConnect. 
Part 3 of this video covers Flexconnect bridging and mesh settings
  • Root Access Point (RAP)
  • Mesh Access Point (MAP)
  • Bridge Group Name (BGN)
  • AP Bridge Mode
  • AP MAC Authentication
  • Parent, Child, Neighbor Mash AP
  • Multihop Mesh
  • Wireless Bridge (Ethernet Bridging)
  • Wireless Bridge with VLAN Transparent
  • AP Flex+Bridge Mode

About Author

Metha Cheiwanichakorn, CCIE#23585 (RS, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at, Metha enjoys learning and challenges himself with new Cisco technologies.


Hi Metha,

I have a campus networks which consists of 5 buldings, which have respectively 9 MAs, 6 MAs, 8 MAs, 5 MAs, 1 MA. all MAs are Cisco 3850 switches.

I also have 2 WLC5760 that will be installed only in one of the building.

the buildings are connected together over an IP MPLS cloud.

is it possible to deploy a solution in which I use cisco 3850 MA in the branches and WLC5760 as the MC for all the branches? meaning, I will not use cisco3850 as MC at the branch side.

I read somewhere that it is not recommended for the MAs and MCs to be connected over WAN. as per the below link.

please advise me on how to build my setup. what is the correct design in my case.


The question you need to ask is if there is possibility for client to roam between these locations. If the answer is no, they should stay as a separate system with their on MC/MA. Cisco design doc also recommends MC/MA to stay on the same high speed LAN. We have not seen a Cisco design guide where MC/MA are separated by WAN.


thank you for your reply.

If am using the 3850 as WLC, I have no ISE, and I don't want to use dot1x. Customer is asking me to authenticate corporate users (corporate SSID) via active directory, and Guest users (Guest SSID) to be authenticated via local database on the WLC3850.

is it possible to do this on 3850? can I integrate 3850 with Active Directory via LDAP?

does 3850 support WebAuth, if I want to redirect guest users to a webpage for login.?

kindly support.

much appreciated.

Haitham Jneid

We are not aware of 3850 ability to connect directly to AD. The best bet for corp SSID is to point to a RADIUS server and this could be Microsoft RADIUS. For Guest, you might be able to get away with Local WebAuth.

If you don't mind, please take further discussion on LM Forum as this page is about Mesh AP. Thank you. 

Lab Minutes Classifieds