Engineers on the user VLAN cannot open a Catalyst 9800 management address. The same address opens from the admin VLAN. Wireless clients on the user VLAN are passing traffic. What is unreachable?
Select an answer to reveal the explanation.
Short Explanation
The radios are fine, and the management address does not answer from the VLAN you are sitting on. Your path to that address is missing from the user VLAN, so management reachability is the issue. Clients passing traffic already shows the wireless side is up.
Full Explanation
Management reachability is separate from client traffic. The same Catalyst 9800 management address opens from the admin VLAN but not from the user VLAN, while wireless clients on the user VLAN pass traffic. That points to a missing path from the user VLAN to the management address, not a failure of the user VLAN itself. Client traffic passing shows the VLAN is carrying traffic; it does not prove that the management address is reachable. A browser failing to open the management page does not take every access point or its radios down, and the guest SSID name does not determine whether engineers can reach the controller’s management address. The relevant issue is the path from the user VLAN to that address. Exam caveat: a management access list that permits the admin VLAN but denies the user VLAN can create the same symptom, even when routing is present. For a practical check, confirm that the admin VLAN still opens the controller, then verify the intended engineer subnet has a route and is permitted to reach the management address. After making a change, test with one live client and confirm the result before changing anything else.