Cisco Cisco 4402 Wireless LAN Controller

These hardware features are not supported on 2000 and 2100 series controllers:

Power over Ethernet (PoE) for 2000 series controllers only

Ports 7 and 8 on 2100 series controllers are PoE ports.

Service port (separate out-of-band management 10/100-Mbps Ethernet interface)

These software features are not supported on 2000 and 2100 series controllers:

VPN termination (such as IPSec and L2TP)

Termination of guest controller tunnels (origination of guest controller tunnels is supported)

External web authentication web server list

Layer 2 LWAPP

Spanning tree

Port mirroring

Cranite

Fortress

AppleTalk

QoS per-user bandwidth contracts

IPv6 pass-through

Link aggregation (LAG)

In a crowded RF environment, clients may not be able to detect the desired SSID because of internal 
table limitations. Sometimes disabling and then enabling the client interface forces a rescan. Your RF 
environment needs to be controlled. Cisco UWN rogue access point detection and containment can help 
you to enforce RF policies in your buildings and campuses.

Pinging from a network device to a controller dynamic interface may not work in some configurations. 
When pinging does operate successfully, the controller places Internet Control Message Protocol 
(ICMP) traffic in a low-priority queue, and the reply to ping is on best effort. Pinging does not pose a 
security threat to the network. The controller rate limits any traffic to the CPU, and flooding the 
controller is prevented. Clients on the WLAN associated with the interface pass traffic normally.

The 2006 controller image is supported for use with only 2000 series controllers. Do not install the 2006 
image on a 3504 controller. Otherwise, errors may occur. Install only the 3504 image on a 3504 
controller.