To configure the wireless controller on a core switch, you need to set up VLANs, management interfaces, CAPWAP tunnels, and onboard access points either via CLI or GUI.

Step 1: Prepare the Core Switch

• Enable routing if the switch is Layer 3 to allow inter-VLAN communication.
• Create VLANs for management and wireless networks. For example, VLAN 10 for management, VLAN 20 for corporate Wi-Fi, and VLAN 30 for guest Wi-Fi .
• Configure SVI interfaces for each VLAN and assign IP addresses. This allows the switch to route traffic between VLANs and provide DHCP services if needed .
• Set up trunk ports between the switch and the wireless controller to carry multiple VLANs, and configure access ports for AP uplinks in the management VLAN .

Step 2: Enable Embedded Wireless Controller (EWC)

• On Catalyst 9000 switches, enable the Embedded Wireless Controller using the WebUI or CLI .
• Verify the switch has the required license to support the number of APs you plan to deploy.
• Optionally, configure redundancy if multiple switches will host active EWC instances for high availability .

Step 3: Configure Management Interfaces

• Management Interface: Used for WLC management and AP communication. Assign a static IP in the management VLAN .
• Service Port Interface: Optional out-of-band management interface for initial setup or recovery .
• Dynamic Interfaces: Map each WLAN to a VLAN for client traffic separation .
• Ensure your computer is in the same subnet as the service interface if using GUI for initial configuration .

Step 4: Configure CAPWAP for Access Points

• CAPWAP tunnels allow lightweight APs to communicate with the WLC.
• Connect APs to access ports in the management VLAN; they will automatically discover the WLC if in the same VLAN .
• Ensure DHCP is configured for APs to receive IP addresses and WLC discovery information .

Step 5: Configure WLANs and Security

• Create SSID profiles and map them to the appropriate VLANs.
• Configure security policies, including WPA2/WPA3, authentication servers (e.g., Cisco ISE), and QoS settings .
• Optionally, configure guest networks with separate VLANs and captive portal authentication.

Step 6: Verify and Monitor

• Use CLI commands or WebUI to check AP status, client associations, and CAPWAP tunnel health.
• Ensure logs and time settings are correct for accurate monitoring and troubleshooting .
• Test connectivity for both management and client VLANs. By following these steps, you can successfully configure the wireless controller on a core switch, onboard access points, and manage multiple WLANs securely and efficiently. This setup ensures separation of management and client traffic, supports scalability, and leverages the Catalyst 9000 switch capabilities .