CCIE Enterprise Wireless (v1.0) – Enterprise Wireless Network – Wireless segmentation with profiles and groups – 3.4.c Flex groups

Posted on Posted in 9800 Flexconnect, Flexconnect


In Cisco IOS XE Software, Version 16.12.01s – 9800 Wireless controllers there is NO longer an option to place an access point into flexconnect via the AP mode option. Access points can only be placed in the following modes: monitor, sensor, sniffer and bridge.


In order to configure a FlexConnect Local Switching here are the
general steps you need to follow:

  1. Create/Modify a WLAN profile
  2. Create/Modify a Policy Profile
  3. Create/Modify a Policy Tag
  4. Create/Modify a Flex Profile
  5. Create/Modify a Site Tag
  6. Policy Tag assignation to AP


  1. Create WLAN profile




2. Create a policy profile







3. Create policy tag





4. Create Flex profile




5. Create site tag – the site tag is where the AP can be configured for flex or local. By default “enable local site” is checked. When “enable local site is unchecked and applied to the access point, it will change the mode of the access point from local to flex.


The site tag is where you also associate the flex profile site tag




6. TAG the access point

By default the access point is in “local” mode


Click on the access point to assign the respective tags:


Once the tags are applied to the AP it will move from local mode to flex


SSID updated – logic is the same:

note: There is an issue with flexconnect VLANs at least on the virtual controller… Cat9800 Client unable to authenticate due to VLAN failure when using VLAN name in the Policy Profile CSCvn48234 . Debugs can be found here


Remote switch configuration




Verify client






One important thing to note: VLAN 315 does NOT exist in the data center, it is local to remote location where the AP resides:


Leave a Reply

Your email address will not be published. Required fields are marked *