IdentiFi: wireless client can ping EWC, but can't ping gateway

[Ilya_Semenov]

Hello, everybody,

At last, I've configured my clients to get correct IPs from DHCP server using relay.

Everything looks fine, but I can't ping outside world from clients, (while could ping EWC).

From EWC I can ping outside networks and can ping wireless clients.

How could I allow wireless clients to reach their gateways?

Access mode for all Roles is "Containment VLAN", all WLAN Topologies are EWC.

Many thanks in advance,

Ilya

[Ilya_Semenov]

Yes, it doesn't.

Please, see the attached screenshots below.

There are no Policy Rules configured for any Roles.

[Ilya_Semenov]

I did - these are MACs of esa0:

VR-Default 10.11.32.2 00:15:5d:0d:a6:1d 11 NO Vlan39 39 45
VR-Default 10.10.32.2 00:15:5d:0d:a6:1d 0 NO Vlan38 38 45

esa000:15:5D:0D:A6:1D V22(u), V38, V39 (this is copypaste from EWC)

[Ronald_Dvorak]

Check the MAC table on the X670, did the switch learn the client MAC on the port that is connected to ESA0 in VLAN38 or is the MAC learned in another VLAN?

[Ronald_Dvorak]

Please provide a network diagram.

[Ilya_Semenov]

No, I am not able to ping a client from the Core.

Wireless clients ping EWC and each other only.

EWC could ping Core and wireless clients.

This is my controller configuration:
https://cloud.mail.ru/public/BYKk/4JdF7rZen