I got a set of dhcp pool in one 3750 attached to diferent Vlans in the network, the wired network works fine, you can get from any switch port across the LAN a diferente VLANs IP. In my wlc2504 I got 5 WLANs with the DHCP server pointed to the VLAN in the 3750, but I just got one set of ip when i tried to connect to diferent WLAN, without connectivity, I can see all the Ap's, and ping the VLANs in the 3750,
View 4 RepliesI am trying to come up with a wireless solution for a campus deployment. The campus has ten buildings currently using Autonomous APs and are currently converting to Dual 5508 Controller model.
I would like to have a separate AP Mgmt subnet in each building, so I will configure an ip helper on the SVI on this vlan to:
Option1 - Point to the Internet Router configured with DHCP Option 43 with the controller IP addresses
Option 2 - Point to the Wireless LAN Controller itself.
Problem with Option 1 is that the Internet Router will now have to connect directly to the COE network to be able to route back to the AP mgmt subnets. So I would emply a VRF here to keep the separation.
Problem with option 2 is that there appears to only be one DHCP scope allowed on the controller. So this would mean a flat mgmt network across all buildings which I am trying to avoid. I know that after the AP joins the controller, I could change the IP and change the vlan on the port but this is not very neat.
So question is:
Is there a way of getting multiple DHCP pools on the controller?
Is it possible to have multiple dhcp pools for multiple VLANs? The switch is a 6509 and/or 4506 catalyst. I don't want to use server-based products.
View 5 Replies View RelatedHow to configure the ACS5.0 radius for remote access VPN authentication.
And how could I implement the IP Pools for the VPN users.
I know ACS 5 lacks the IP Pools of earlier ACS versions. I'm looking at a 4 to 5 migration and was thinking of just configuring the IP Pools on the router ("ip pool local" etc) and sending back a RADIUS Cisco Attribute pair with the name of the pool. (Seemed like a neat fix, needs no extra kit, etc.)
I could have sworn that attribute pair existed... but I can't find it in ACS5! What's it's name?! Where is it!? Or have I gone mad!? (And, if I have gone mad, how would you go about fixing it?)
We have an ASA 5510 and we also have two separate address pools which have been provided by our ISP. The addresses are not contiguous. Is there a way to configure an interface on the ASA to handle both sets of public address pools? If the outside interface is set up on eth0/0 would I create two subinterfaces (eth0/0.1, eth0/0.2) and assign each subinterface an address pool? Then just NAT/PAT to my heart's content? At that point I would want both to route to our inside network. So it's basically two inbound sets of IP addresses comming into one interface and then comming into the network... Right now the outside interface is configured with our first set of IP addresses. We wanted additional addresses and when we called our ISP they told us we already had them - just a different pool. Hence the question. I'm guessing that I wouldn't put anything specific on the outside interface and I would put the specifics on the subinterfaces?
View 4 Replies View Relatedcan i have on asa 5510 multiple pools and multiple group authentication for various departments along with restricted access if any
View 3 Replies View RelatedI'm trying to enable dhcp server on it. done this how to [URL] It works, but unfortunately the client takes almost 2 min to get an ip.
View 3 Replies View RelatedI have a WCS that I use to manage 8 controllers (2 WiSM's totaling 4 controllers, and 4 more controllers at remote locations). All controllers connect to 3750 switches. The layer three interfaces for all V LAN's that are related to the wireless network are created on these switches. Each layer three interface has a helper address that points the devices in the sub net to the correct DHCP server.
When a wireless device requests a DHCP request I believe it gets to that server based on the relay from the layer three interface on the 3750. However, I know that the virtual interface on the controller is also requesting an address because my firewall is flooded with deny statements. The virtual interface is configured for 1.1.1.1 and so it gets blocked. I am starting to question the use of this interface considering the fact that it is getting blocked and the clients are still getting address.
Are both interfaces trying to act as DHCP relays? Could I setup the controllers to be the only relay (without using the virtual interface)?
Can we Configure DHCP server in 3750 ? we have configure DHCP server in 1841 router but some reason we want remove router .
View 2 Replies View RelatedI've set up a WLC2504 with interface "mgmt" and "guest" (2 different VLAN IDs) both configured on port1.Now I'd like to be able to connect to PoE ports (port 3 and 4) 2 LAPs which should be able to get IP addresses from the DHCP as if they were connected to port1.
View 14 Replies View Relateda power analyzer in my network is sending some packets that are unexpected and incorrectly recognized as DHCPOFFERS. As a workaround, I would like to filter those packets with my Cisco switch 3750.Suppose IP_POWER_ANALYZER is the ip address, what could be the best choice
1. deny udp any IP_POWER_ANALYZER eq bootpc
2. deny udp any IP_POWER_ANALYZER eq bootpc; deny udp IP_POWER_ANALYZER any eq bootps
3. deny udp any eq bootpc IP_POWER_ANALYZER eq bootps
We are configuring ACLs for a dhcp pool on Sw3750
ip access-list extended Test
permit ip any 192.168.1.0 0.0.0.31
permit ip any host 172.16.1.1
And, here is dhcp pool:
ip dhcp excluded 192.168.1.1 192.168.1.3
ip dhcp pool Name
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
But when a PC try to obtain IP automatically, it doesn't work.
i created the 10 V LAN in my Cisco 3750 switch.All other V LAN DHCP IP's (192.168.2.X - 192.168.10.X) will be release from the DHCP server except VLAN1 . In my 3750 switch i created DHCP pool(192.168.14.X).... and i assigned to VLAN10.... but one of the client is assigned to V LAN 2(192.168.2.X) configuration. but its getting IP from the Cisco DHCP instead of DHCP server.
View 2 Replies View RelatedI have customer who has as Core Switch one Cisco Catalyst 3750 with the IOS c3750-ipbase-mz.122-35.SE5.I know that this image support DHCP Server configuration, but I like to implementate new vlans (approx 15) and I want to know if this switch support 15 DHCP Servers.
View 3 Replies View RelatedI want to clear following things regarding Cisco 3750 switch.
1. Can I configure Multiple DHCP pool on C3750?
2. Performance effect due to same?
3. Can I resrve IP addrese from DHCP pool for specific MAC address.
4. Can I Exempt IP address from DHCP pool ?
I configured an DHCP server on cisco 3750 switch . Wher in w3750 gets connected to plain l2 switch 2960 on floor and machine gets connected to 2960 port. [code] Below is the description of problem:
-> The Cisco 3750 switch is the DHCP server. VLAN 108 is named as internet vlan.
-> Ports in Cisco 2960 switch has been configured with "switchport access vlan 108".
-> There were no problems at all and everything had been working smoothly.
-> 3 days back, users started complaining that they couldn't access the internet. Up on troubleshooting the issue, I found out that there was an issue with the DHCP server as the computer couldn't get any IP address at all. After setting static IP address, the internet started working again.
If I bind IP to MAc address reservation on core 3750 switch for some time of moment it works but after that machine gets unreachable .I restarted the 3750 switch and also all the 2960 switches over the weekend, however, the issue still hasn't been resolved yet. I did issue the command "clear ip dhcp conflict *", clear ip dhcp binding * but no joy at all.
I have a 1250 AP connected to an Switch Cisco 3750. We have a SSID(v lan 1 - native) which get an IP Address from our DHCP Server(located in a Windows 2003 server). I added a new SSID in VLAN 2 and I would like no to use the DHCP Server but to make the AP get an IP Address from the pool I created in the own AP (ip dhcp pool Guest) but every time I try to connect the new v lan, it doesn't get an ip address.
Follow the settings of the AP.
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
[Code]...
I've been working with a client's integrated 3750 WLC running 4.0.179.11. I want to upgrade the code because it is old plus I am having DHCP trouble. I have a couple of questions:
1. Is it OK to upgrade to SWLC3750K9-5-2-193-0.aes ? or do I need to go through 4.2 first ?
2. Will that code upgrade the bootloader at the same time?
3. How can I make sure there is enough flash space on the WLC?
4. Are there any special considerations to plan/prepare for?
The DHCP issue is failure of associated clients to get an IP address with this message found in WLC debugging:
[Code]...
Had a problem with a 3750 this morning not handing out DHCP addresses. The following is a sanitized config of what the switch is using. [code] The IOS installed on the switch is c3750-ipbasek9-mz.122-55.SE1.bin. What got my attention was that the sh ip dhcp pool PC showed 180 addresses being excluded. In doing the math from the dhcp excluded addresses, only 64 should be excluded.
My next step was to remove the second dhcp excluded-address line above. Doing a clear ip dhcp binding * started letting the DHCP service hand out addresses but the sh ip dhcp pool PC stil showed 180 addresses excluded.
It finally took removing the dhcp pool and putting it back in to drop the number of excluded addresses down to a value that matches the first excluded-address line. Didnt see a dhcp bug in the bug database that would explain this.
I tried re-entering the second excluded-address line from above and saw the number of excluded addresses rise as expected. When I negated the line, the number of excluded addresses dropped back to its previous value.
setting up a 2504 on a 2960 switch. The management interface is up and pingable, and from the WLC we can ping vlan 20 (our wireless client vlan) gateway. However, when we create the vlan20 interface on the WLC, give it a valid address and assign it to a port, we can no longer ping the vlan 20 gateway from the wlc, nor can we ping the vlan20 interface from a PC. I’m told the 2960’s don’t do dot1q trunking…
View 6 Replies View RelatedI have WLC 2504 and AP3502I . AP can not join wireless controller .
*May 24 16:33:51.871: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*May 24 16:33:51.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
p: 10.80.90.99 peer_port: 5246
[code].....
The company I work for owns a remote manufacturing facility that houses a stack of five 3750 switches that function as the core switching system for the plant. DHCP services are configured on the 3750 stack.
There are currently three VLANs configured, one for data and one for voice (144 and 244 respectively) and one for UCM servers (200), with corresponding subnets of 10.44.32.0 /19, 10.44.0.0 /19 and 10.44.100.0 /24.
The current DHCP scope configurations are as follows:
ip dhcp pool Plant-44_DHCP
network 10.44.32.0 255.255.224.0
default-router 10.44.33.254
[Code].....
My question is will the addition of this scope in the manner presented cause any problems with PCs or IP phones outside the targeted recepents receiving the wrong IP information from this scope?
I plan to identify the users that should be members of this VLAN 444 and change the switchport mode access configuration on the corresponding switch ports from VLAN 144 to VLAN 444. The voice VLAN 244 will remain the same.
I need urgent support on creating SSID as layer 2.We have cisco WLC2504 and 1602i access point. In our network we have in gate for guest.I want to create one ssid and bind with vlan only. We can not creat interface on WLC b/c of static IP.
View 3 Replies View RelatedI have two Wireless LAN Controllers 2504 and 8 APs 3502e. The WLCs are running software version 7.0.116.0. The problem is that I don't have the mesh option to configure indoor mesh inside the controller. In chapter 9 of Wireless LAN Controller Configuration Guide, Release 7.0.116.0 says that I have to go to Wireless Menu and select the AP. When I am inside the AP general page, the guide says I have to go to the Mesh tab, but that tab doesn't appear in the controller GUI. Do I have to use another image in the controller? Or do you have to use an special mesh code or something like that? Because in the download page of the controller it only appears the 7.0.116.0, two more new versions but there is nothing about mesh image.
View 5 Replies View RelatedI have the problem that the AP1130 can not join to WLC2504.
Console Messages of AP1130:
*Aug 14 09:34:54.029: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Aug 14 09:34:54.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.x.251 peer_port: 5246
[Code].....
I have a question about managing the Access Point:
-WLC2504
-AIR-LAP1262N-A-K9
First: I need the access point works by period, example: 08:00AM - 06:00PM after that disable the radio and return work next day at 08:00AM
Second: Also, if the radio no activity for a long period (e.g 60 or 120 minutes), disable the radio interface.It's possible with the WLC? Or maybe need implement one NCS?EnergyWise Technology - but, I only need "shutdown" the radio not the Access Point completely.
1) We have client setup, which has all PCs in Workkgroup , client has network sharing enable in LAN . Its work well in LAN , he don't have Local DNS , still he is able to ping or access sharing using device hostname
2) When Client moves into Wireless , he is not able to ping or access sharing using Hostname , but if used the ip details he is able to ping and do sharing using IP address onlye.
My Wireless Setup has WLC2504 and LWAPP Access Points.
I am having issue with integrating WLC2504 with Win2k8 server NSP radius server.
View 3 Replies View RelatedI have few question with WLC 2504 with 25 License AP. Our customer have SSID around 30 SSID then, is it possible to create WLAN around 30 SSID on WLC 2504? becuase i had tried to do it on WLC4404-25 License that can do or create WLAN with 30 SSID.
View 12 Replies View Relatedconfigured Cisco 2504 WLC with 1142 Aps... Guest wireless works fine
for the staff wireless I wanted to authenticate with 802.1x & Radius. So configured an external Radius server (Imprivata) and configured the 2504 Radius options for the extenal server.( Layer 2: WPA2-AES & Auth Key Mgmt: 802.1x )
When I connect a client to this wireless, the authentication fails, I wonder whether it is because of the client side settings..
Which trusted Root Certification Authorities need to be checked?
a new LAN installation, two VSS pair 6509 core, 15 closets, with 3750 stacks. Floor 15 only, devices/hosts can ping teh DHCP server but cannot aquire IP addresses. no such problem on other floors?
portfast an dother parameters are intact.
If it's possible, how do you protect/block a unauthorized DHCP SOHO router with NAT form a Cisco 3750?
View 16 Replies View Related