Restrictions for Passive Clients
-
The interface associated to the WLAN must have a VLAN tagging.
-
GARP forwarding must to be enabled using the show advanced hotspot command.
Note
Client ARP forwarding will not work if any one of the two scenarios, mentioned above, is not configured.
-
The passive client feature is not supported with the AP groups and FlexConnect centrally switched WLANs.
-
If ARP caching is enabled, APs reply to ARP requests on behalf of clients in locally-switched WLANs. If you have enabled passive clients for a WLAN and if an ARP request is received for an unknown client, the ARP packet is broadcast to all clients connected to the WLAN. However, if you have enabled AAA override for the WLAN, the ARP request for the unknown client is dropped by the AP because the AP does not have a mapping between the VLAN in which the ARP request is made and the WLAN to which the client is connected.
Without WLAN-VLAN mapping, APs cannot find the corresponding WLAN for the VLAN of incoming ARP requests. Therefore, the APs cannot check if passive clients are enabled for the WLAN.