Cisco Switching/Routing :: 881w-gn-a-k9 Access Point Not Serving DHCP Addresses
Jan 27, 2013
i have to Bridge the AP to VLAN1 which has the DHCP pool. For some reason when I try to do this from iOS console it tells me that gig0 is not a bridgable interface. I am newb to Cisco iOS (24 hours new ). I got the Cisco Configuration Professional working and would like to fix my issue through there if possible? why my AP wont get anything but APIPA addresses?
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
I have several Cata 3500XL switches connected to one 1 HP L3 switch which is connected Sonicwall router. Vlan1 has subnet of 10.10.0.0/24 and Microsoft DCHP server lays inside VLAN1.
Now i want to add VLAN11 (192.168.10.0/24) as second data VLAN but DHCP requests should go to microsoft DCHP server.
This is what i did: Configured VLAN11 IP on each cisco switch IP default gateway with IP from other subnet (i guess this is bad since maybe it should be IP of VLAN11 on HP L3 switch?) Trunk ports are configured to pass everything on cisco switches On VLAN11 i configured IPhelper IP to be MS DHCP server on each Cisco switch
I haven't tested this yet but i have problem in process.I can't ping VLAN11 IPs between switches (i configured VLAN1 and VLAN11 with IP). When client plugs computer to a port that belongs to VLAN11 will i be sure that client will get IP from the 192.168 range or there is possiblity that he gets IP from the management VLAN range?
I currently have a the following configuration and am unable to get more than 2 DHCP addresses for the devices connected to the Cisco new SG 100-16 Switch.The AP have no trouble handing out DHCP to the wireless clients, but we are unable to get the SG 100-16 to be able to do the same thing to wired clients. It is currently connected to the 2960-8 in port 1. We can get 2 devices connected without a problem, but the 3rd machine and beyond do not work. Also, setting up a static IP does not work. Using a static will not even allow us to ping or tracer back to any devices beyond the SG 100-16.
I used to use a CentOS self-made server for intranet for my little office, but I bouth few days ago a Cisco 861 router to replace the linux box.
1. I have 2 public IP classes from my ISP. 1 class is limitted to 80mbit upload, the other to 30mbit upload. So I need some sort of DNAT to be able to know exactly which intranet computer uses big internet and which one limitted internet. 2. I need DHCP server and with static IP addresses (one computer must always have the same IP address, etc).. i have my needs for this. 3. Also I need external access to some servers inside (web, ftp, etc) [code]
So far so good, all looks simple and I can achieve this in 2 hours on a centos linux box (correct routes, ip forwarding enabled and few iptables rules for NAT/SNAT/DNAT).
But on this brand new Centos router well, i'm not even successful in pinging the outside world, nor the inside world I'm tired of reading the forums, the documentation..i want (at first) a simple scenario: vlan+dhcp, fa4 with 1 public ip address and ACCESS to the real world. I wasn't able to achieve not even that much. [code]
Had a problem with a 3750 this morning not handing out DHCP addresses. The following is a sanitized config of what the switch is using. [code] The IOS installed on the switch is c3750-ipbasek9-mz.122-55.SE1.bin. What got my attention was that the sh ip dhcp pool PC showed 180 addresses being excluded. In doing the math from the dhcp excluded addresses, only 64 should be excluded.
My next step was to remove the second dhcp excluded-address line above. Doing a clear ip dhcp binding * started letting the DHCP service hand out addresses but the sh ip dhcp pool PC stil showed 180 addresses excluded.
It finally took removing the dhcp pool and putting it back in to drop the number of excluded addresses down to a value that matches the first excluded-address line. Didnt see a dhcp bug in the bug database that would explain this.
I tried re-entering the second excluded-address line from above and saw the number of excluded addresses rise as expected. When I negated the line, the number of excluded addresses dropped back to its previous value.
Haveing issue with DHCP server handing out IP addresses to client connected to VLAN5 interface.ISP Router>Firewall -(WatchGuard Drop-in mode) I have several 3750 switches and one acting as a L3 switch. The L3 is configured as follow: [code]
If I connect a laptop to int fa1/0/10 I DO NOT get an IP address from the 10.100.0.8 scope. If I connect to another interface within the VLAN 1, I get an address from the 10.100.0.0 range.
"In the past I have noticed if I have one of my rigs running NAT and DHCP that my ping response times are lower compared to my router DGL-4300, when playing games. Is this due to the PC hardware being superior or is it a software/firmware thing?
Or is there a router out there that will perform better ping response time wise/ lag than my DGL-4300?"
Is this due to hardware or is it software/firmware? My NAT and DHCP box was a windows server 2003 configured with just those roles and my pings were in the 20-30 and I could host/join games no problem and no lag, but when I play through the Dlink DGL-4300 my pings would be 70-90 and some games I had lag issues and host/ join issues, sometimes it would work sometimes not.
I have a Motorola Surfboard Modem connected to a Netgear 24-port switch. I bought the WAP4410N to provide wireless connectivity from the switch. All my PC's can get perfect connectivity via the switch but none of my wireless devices can connect at all. Sometimes I can get 1 PC to connect but what's strange is I can view my networked folders and such but cannot access the internet. I've upgraded the firmware to the latest May-2012. IPv4 and IPv6 are both set to automatic.
1 x 4500 and 1 x 3560?They are gateways of 8 Vlans?They are doing HSRP in each of those Vlans?The 4500 is the Active?There is a DHCP Pool for each of those Vlans on both gateways using "ip dhcp excluded-address" I ensured that the range of provided ips by each DHCP server will not be overlapped Obs.: Reducing the lease time, I ended with the calls bringing related problems.
OK, every thing is blue, every thing is fine.But the network diagram is realy complex(41 switchs, 89 uplinks), and depending of how is the network flow, one or other server answer first or latter.
For many reasons I would like that the secondary DHCP server would answer only if the primary DHCP server goes down.To me, the bigger reason is that DHCP database would be only in one DHCP server.But there is other reasons.
I passed by many frustrated solutions:Try to force a delay on the answer on one of the servers. - Impossible.Try to disable DHCP server, and, using EEM, enable it only if router became active in HSRP. - I couldn't do It.
What I'm thinking now is use the HSRP resource to resolve it.On both routers I would put a "ip helper-address" pointing to an Virtual_HSRP_IP.And depending on which router is the active, him will answer the request.
My first doubt is:Would it work?The second doubt is:Could I use the same Virtual_HSRP_IP that exists on that Vlan(see example 1),or I would need to point it to a Virtual_HSRP_IP in a different Vlan(see example 2)?
Example 1 ----------------------------------- | 4500 | ----------------------------------- interface Vlan1 ip address 10.10.0.2 255.255.0.0 ip helper-address 10.10.0.1 standby 1 ip 10.10.0.1
My company has an 881-w ISR that provides wireless and wired network functions for our small office (about 20 users). I was attempting to create a new V LAN (another story), and was able to create the V LAN (4) and assign it a new IP. However, when i came in today, and when i attempted to connect to the ISR, the serial console started spewing this over and over:
Now, I did leave the console session up overnight, as that's the only thing that I can think of. As expected, our service contract had expired. I did reboot the ISR, and I am looking to see if this can be fixed, or symptomatic of a larger issue, and time to replace? At this point i can't even get it to stop, and thus cannot log in.
I have an 871w set up to add wireless connectivity to an existing network. When adding a client to the physical interfaces to test VLAN internet connectivity, however, a DHCP address is assigned but internet traffic on the terminal never reaches the network nor does the network recognize the IP the terminal shows as being 'connected'. Also, pings sourced from the VLAN do reach destinations. I've attached my config file, I think it's a routing issue of some kind.
10.26.99.0 is the existing network. 10.26.99.1 is an existing 871w router set as the DHCP server for that network and 10.26.99.10 is a Windows Server 2003 DNS box. VLAN 2 and DHCP pool alpha were control sets for trialing DNS settings.
I have a 1130 cisco access point,we are using this for wireless cisco IP phone connectivity to the network.Earlier access point was woring fine and we were able to make calls through IP phone.But we have relocated to new place.Now the access point is not working and we are not able to make the calls on the wireless IP phone as the access point is not working.But the access is in the netwrok and we are able to ping the IP address of the Access point.
We are contonuously getting the below loggs on Access point and the access point is getting power from the ethernet port of the switch not through the external powerr adaptor.
I have a static IP given to me by the service provider, and I need to make the Access point as a DHCP server to provide me IPs inside my LAN.I have created a DHCP pool in the AP. But do I have to NAT the public IP onto the private DHCP range ? This setup is possible.
On a small Bording School we have the students living in several small houses, each equipped with an AP.Each Ap serve 4 Vlans.I want to restrict the switch for these AP, in a way to keep the students from removing the AP and connecting their own equipment.I tried using the secure port feature on the SG300, but that had the result of allowing the AP but denying all the users connected to the AP.The switch is a SG300-28P placed in L3 mode.
i am trying to configure my HP 420 access point. I have configure different SSID on it, This access point is connected to cisco 4500 switch, i have configure trunk on up link to access point.my problem is the client are not able to get an IP address form the correct vlan if i tagged the SSID to it.
in the following the output of show run int in cisco 4500 switch:
interface GigabitEthernet3/13 description ==== HP ACCess point ==== switchport trunk allowed vlan 99,130,132 switchport mode trunk
I am setting up an autonomous 1142 Access Point. The intended goal is to get it accessible though 2 SSIDs:Private: VLAN3 (our internal data VLAN)Guest: VLAN98 (our DMZ/Segregated VLAN)At present, our VLAN3/internal users get DHCP addresses from x2 Windows DHCP servers. Eventually, the DMZ VLAN connections will get their IP addresses from a switch in our DMZ VLAN.At the moment, I am able to authenticate with the Access Point through the VLAN 3 SSID but never get an IP address. I have posted the switch port config below as well as the Access Point config.
I've some strange things with my WAP610.I connect it to my lan, my DHCP server assign an IP, that's normal way..I lookup for this IP, and fill in the address field in my IE (firefox or safari I've tried all of them).... the AP ask me password and user... I fill in the password field... and get into config...
So I think it could be a bug with static IP... I'll try on the wireless security... select "manual"... change nothing (leave default value) click save... wait a while... connect on the DHCP ip, return to the wireless page... and lost a lot of time since nothing is saved.
On a 4500 switch port , defined as access vlan 10, if the user connects his own dhcp server ( instead of the normal pc that should be connected ), will it cause issues with my existing network. the existing network is all static ip. In above case, will the dhcp server start looking out and assign dhcp ip's , if a user unknowingly removes his static ip and changes to obtain ip via dhcp option on the lan properties.
On a 4500 switch port , defined as access vlan 10, if the user connects his own dhcp server ( instead of the normal pc that should be connected ), will it cause issues with my existing network. the existing network is all static ip. In above case, will the dhcp server start looking out and assign dhcp ip's , if a user unknowingly removes his static ip and changes to obtain ip via dhcp option on the lan properties.
I have a Cisco 870 integrated service router and 3 Cisco Aeronet 1180 Access Points.I have configured the router to act as a DHCP server. with all four /26 subnets in a seperate address pool.the first one is for the routers wireless interface and works fine.but the other 3 are for each of the wireless access points, that are used for internet access, but have to operate independently (i.e. the clients on each must not be able to access anything other than the devices associated with that access point and the internet.
The problem I are having is that the router doesnt distribute DHCP information via the access points so the clients on all the access points are not recieving any internet connection at all, but are connecting to the access points, and the LED for the access points suggest that they are connected t the router, the router accnowledges their existence but is not transmitting through the fast ethernet switch ports. but is communicating with a wired printer that is associated with the wireless vlan.
Each access point is on its own vlan, and the switchport access vlan command has been used. only the five static addresses have been excluded from the address pool. the router, the three access points and the printer adresses are static. the printer is working despite being the only device on the /24 network all other addresses are on the /26 networks. this to my knowledge shouldent work but it does, which is handy because the printer software doent support subnetting.The simulation I have ran say that only the printer shouldent work, but its the access points that are not working how they should. I have studied the configuration of the router and access points, and came up empty on why they are not recieving DHCP information.
I are not even able to telnet to them, despite having an address setup. I have not set up a routing protool on the router due to it being the only router. I have checked the interfaces fa0 to fa3 and they are line up protocol up, the wireless is line up protcol up, the vlans are line up protocol down, except the one asociated with the wireless which is line up protocol up (I believe the protocol only goes up when a device is connected to it).
To extend my wired ethernet I have purchased a WAP300N access point and connected it according to the instructions. I can see the AP from a wireless client and connect, but no IP number is provided to the client. The AP is connected to a router which has a DHCP server via wired connection (though a switch). The AP does it self get an IP number from the router but does not pass through DHCP requests from the clients.Occasionally an IP number is provided, but then there is no route to the LAN or the WAN on the other side of the AP.I have tried a whole lot of things to make it work (and been in the internet chat for two hours with a Linksys supporter, who could not make it work either).I have tried to set the IP number in the AP to static.I have tried to remove security (has to be WPA2 eventually, but for the sake of testing it has been removed)I have tried to factory resetI have tried to reinstall the firmware (the same version as the factory installed)etc.
I set up my internet access by adsl modem as gateway, then RV042 as load balancer and dhcp server, security by MAC address restriction and static IP assignment. WAP 610N used as access point.works great for first few weeks, then somehow I can't access the network.I've been using linksys on my SOHO network, no problem before (RV042+WAP54g)
we've an infrastructure were the Access is based on Cat3750G Stacks connected to both Cores using L3 connections.On the Access Switches are implemented the following features DHCP Snooping, IP Source Guard and Dynamic ARP Inspection and all is working fine since years...the DHCP Servers are on a dedicated stack which act as a SFarm.
On the Access Switches the port configuration is the following:the Uplink Ports to both of the Cores are configured in TRUST for DHCP Snooping and ARP Inspection the Access Ports, where the end-device are connected, are UNTRUST for DHCP and ARP Inspection with IP Source Guard Active Right now I've to add a new L2 switch on one of the Access Port and I'm wondering if this is possible since I've to keep on the Stack Access Ports all the security feature active and I've also to implement DHCP Snooping on the new L2 switch to avoid rouge DHCP Server...
I suppose that the uplink to the L2 switch on the Stack Access Switch should be left as it is connected to an end device...but the uplink port on the L2 switch should be set up as TRUST...isn'it? Keeping in mind that I want to implement DHCP Snooping also on this L2 switch to avoid that Rogue DHCP Servers will impact the end-device connected to this L2 switch...is this scenario possible??? or I can't do that and should leave DHCP Snooping only on the Access Stack.
I have a Cisco 2951 Router and I am trying to set it up to use DHCP and for security purposes I need to use the "IP Access-Group in" command. The DHCP will not work when I have this command on the interface that I need to run it through, DHCP works fine when I do not have the "IP Access-Group in" command in the configuration. When I check the log after the failed DHCP attempt it shows up as denied, as if it's being blocked. The IOS I have is c2951-UNIVERSALK9-m 15.0 (1) M3. Conf Reg 0x2102.
I'm using a 2601X router connecting to a broadband connections. The following NAT connections is working but I need to do NAT exemptions to set up my VPN appliance on the DMZ. I see a lot of documentation on how to use a pool of public addresses to do that, but I only have the one dhcp address from my isp.
! boot system flash:c2600-adventerprisek9-mz.124-25d.bin ! ! ! interface FastEthernet0/0
I've just been testing QOS on 3560 with version 15.0(1) and it seems the the default qos trust behavior on access ports has changed. By default the trust state of a port is not to trust anything, however rather than rewriting the DSCP value of the incoming packets and settign it to 0 the switch now seems to leave the DSCP value unchanged.
SW04-C3560(config)# do sh mls qos int g0/2 GigabitEthernet0/2 trust state: not trusted trust mode: not trusted trust enabled flag: ena [Code]......
I recently installed a couple of Cisco Aironet 3600 Series Wireless Access Points at a remote site. While I was at the site everything seemed OK, The clients were able to get connected to the access points, the guest network worked fine, I could SSH into the access points, and I could ping them. The problem is when I went back to my home site I tried to SSH into the access points through an ASA IPSec VPN Tunnel and it couldn’t find it. When I try to ping the access points they “time out”. I can ping and connect all other addresses (via RDP, HTTP, etc..) on the same subnet which should rule out an access list problem. A couple of notes to be aware of:
The WAP’s have the Autonomous IOS installed (Version 15.2(2)JB) The WAP’s are connected to Dell PowerConnect 5724 (Not by choice.. We are a Cisco shop, these were already there and have plans this year to replace)
I can ping and SSH with Putty to the WAP’s from the local subnet I cannot ping or SSH from a remote subnet to the WAP’s. I can access all other IP’s and Computers from a remote subnet.
configuring DHCP on access point, i have cisco 1142N access point, in my network.. working in autonomous mode, i have assigned a static ip to access point with default gateway.. from AP i'm able to reach internet and user connecting to access point are not able to get ip.. i have DHCP server in my network. how to make access point to fetch ip from my dhcp server and assign the saem to client.
