Symptom

Configuring authentication that returns a different VLAN ID to the one mapped to the policy profile on Central Switching implementations breaks multicast/broadcast traffic. Currently this feature is not supported by the 9800 family of controllers. Customers migrating from AIreOS controllers where the feature was implemented will need this feature on IOS-XE controllers.

Conditions

Using a 9800 WLC with any current version and assigning the VLAN ID over a AAA attribute after radius authentication. Central Switching policy profile assigned to the WLAN.

Workaround

Do not change VLAN ID using aaa-override, configure the VLAN ID on the WLC policy profile.

Further Problem Description