Cisco Wireless :: 2504 WLC And DHCP On Separate VLAN
Aug 8, 2012
My problem, in a nutshell, is that clients do not get an IP from an external DHCP server when connected to a guest VLAN.
My current setup is:
Native VLAN 1 (192.168.2.x)
2008 DHCP Servers
2504 WLC
[Code].....
The guest WLAN just uses WPA and a PSK and is set to interface vlan101 There rest of the 2504 config is default.
The ports that the WLC and APs are connected to are tagged on the correct VLANs. (is that even necessary for the AP now?)
Ive changed the interface config around a hundred times now with no luck. No matter what a client will not get an IP.
Could this be due to the 2504 and ASA both acting as DHCP relays? Ive tried setting the IP of the DHCP on the dynamic interface to many different things with no luck.
View 10 Replies
ADVERTISEMENT
Sep 25, 2012
is it possible to Manage the 2504 Controller over a separate Interface. Exmaple: Port 1 is used as controller management interface (untagged) - AP's are connected to the same VLAN Port 1 is used for Guest Traffic (VLAN 3 tagged) Port 2 should be used to manage the WLAN Controller from the internal LAN. (tested with untagged, tagged, same issue)
with this Setup it is possible to ping the Port 2 IP-Address from the internal LAN but if you try to connect to the controller, the Browser shows "Site not reachable".
I also enabled "Management via Wireless" but without success. I also tried to add the "management" VLAN as tagged on the management Interface with the same effect, the controller is not manageable from the internal LAN. On 5508 WLAN Controller i have an similar setup, but with LAG Port enabled. There this works.
The only interface were i can manage the WLAN controller is from the management Interface.
View 1 Replies
View Related
Jan 16, 2013
My fiance recently signed up for the Screen-wise Panel for Google research. Basically they monitor your TV usage and your internet usage. As part of the program they installed a Cisco WIFI router. I've got no issue with them logging the sites visited etc but I'm a little worried about them possible collecting private information (banking / work related stuff) that I don't want going out there. According to what I've read what's supposed to happen is they replace your router with the new Cisco router.The "technician" who came in and installed the router was actually a builder and not an IT technician and rather than replace our router he connected the Cisco router into port 4 of our router... I wasn't in at the time.
What I was looking to do is separate Port 4 of my router into a separate VLAN that can access the internet, but not access anything on ports 1-3, or the wireless. However, I want to be able to see everything on port 4 from the other side (in other words I want to see "into" the port 4 VLAN, but don't want them to see out). I also wanted DHCP to assign IP addresses correctly depending on where you were plugged in. In this example the first VLAN (your current router ip address) is going to be on 192.168.1.1, and the second VLAN (the new on we create on port 4) is going to be on 192.168.2.1.This is exactly what I'm looking to do, I could then connect the kids machines / tablets / ipods to the Cisco router and have the main machine and my work laptop on the main router... but I don't have a clue how to do it. </quote> Is this something that I am able to do with the Netgear router I own and is it hard to set up?
View 1 Replies
View Related
Aug 10, 2011
I have a WRVS4400N that broadcasts two different SSIDs. One is a public network and the second is a private network. Right now, both SSIDs are pulling from the same DHCP server, but I would like to separate the public from the private. How can I separate these SSIDs by vlans? I can't seem to get the vlans to route to separate ports.
This is my vlan settings. I have two DHCP servers right now. One is in an isolated network plugged into Port 3 of the WRVS4400N. The other is on the production network, plugged into port 1 of the WRVS4400N. For some reason, whenever I connect to SSID Public, it won't pull an IP from the DHCP on port 1, it only pulls it from the one on port 2.
I know there is three SSIDs here, the Static one is going to be the same network as the EMS one.
View 4 Replies
View Related
May 21, 2013
I have a 2504 WLC and 1042 ap's. Everything worked great in my test enviroment (of course). Now when I want to deploy the wireless, the ap's are not getting and ip for the windows dhcp server.
I have option 43 configured in dhcp, sub option 241>ip address of the controller
I have my A record in dns, cisco-capwap-controller.
*Mar 1 00:03:17.050: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
Not in Bound state.
*Mar 1 00:03:27.050: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:27.054: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
*Mar 1 00:03:37.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:47.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:57.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:04:07.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
Not in Bound state.
View 3 Replies
View Related
May 10, 2012
We are installing a 2504 with management on VLAN2. The management port is on interface 1 which is attached to a layer 3 3750. From other VLANs in the network we cannot manage the 2504 controller with the web manager. We are running the latest code, 7.2.103.0, since we are using 3600 APs. We have a TAC case open, but spent 3 hrs with them and they can't figure out the problem. TAC did some debugging and saw that the 2504 is ARPing for the address of the PC on the other VLAN instead of sending the packet to its default gateway. How to get success with the management interface on a VLAN and managing the controller from another VLAN?
View 2 Replies
View Related
May 7, 2012
I am using a WLC 5508 and its internal DHCP server. I cant find anywhere I can setup option 43. However, the access points are connected in just fine. Do I need to worry about setting up a seperate DHCP server to get option 43 setup properly?
View 7 Replies
View Related
Nov 25, 2012
I am wondering if the folowing is a valid configuration:
WLC2504
AP2600
I need 3 SSID/VLAN, 1 for corporate devices, 1 for coporate smartphones, 1 for guest.
Port 1 on the 2504 should be used for management and corporate devices and connect to the corp network. Port 2 is for smartphones/guest and will be connected to a Cisco ASA 5515 that is connected to a second ISP.
Corp devices should get IP from an Windows DHCP. Smartphones/guest should get IP from the WLC. Is this possilbe? I read this in a document "To use the WLC as a dhcp, you need to enable DHCP proxy as it is required." Some how I am imagining that this will mess with the Windows DHCP. Is it better to use the ASA as DHCP for smartphones/guest?
View 4 Replies
View Related
Aug 25, 2012
i have configured wlc 2504 .in that i have configured two interfaces.one is guest, 2nd is internal user, the pblm when user try to connect with that contain ssid user not getting ip address,
i have connected only one link between core to wlc on port 1.for guest interface i used port 4.but no physical link.
View 3 Replies
View Related
Jan 7, 2013
I have a Cisco Wlan Controller 2504 with 1042N AP (3-nos) every thing was working fine from past 2 months. Now i am getting a issue with clients which are connected to the wireless AP, they are not able to get an dhcp IP address from the 2960 Switch (DHCP Server). The clients are getting IP address as 0.0.0.0. [code]
View 36 Replies
View Related
Apr 17, 2013
I am looking to enable the internal DHCP on my WLC. I have enabled it and it seems to be operating correctly but I think my routing and or settings allowing me to access anything beyond the private network is wrong.
DHCP is handing out correct IP info and DNS info.How do I route the new private network (10.1.9.*) out to our existing 10.1.4.1. (management IP is 10.1.4.253) Can this be done within the WLC ?
View 3 Replies
View Related
Feb 29, 2012
It seems like the 4-ports switch in the 2504 can only one port can be used for management VLAN at a time ? I need all 4 ports to be untagged in the managment VLAN.
View 7 Replies
View Related
Nov 7, 2012
All controllers are in version 7.2.111.3.C1 is a 5508, it is ou anchor controller.C2 is a 5508, it is a big site controller.C3 is a 2504, it is a small site controller. C2 and C3 are in the same mobility group than C1 (and all is up up in mobilty managment). When "DHCP Addr. Assignment" is enable on C1 : Clients on C2 received their IP address by our external DHCP server via C1 and the guest tunneling betwenn C1 and C2 and all is working fine. Clients on C3 don't received their IP address by our external DHCP server via C1 and the guest tunneling betwenn C1 and C3, so nothing work.
View 4 Replies
View Related
Apr 17, 2013
I am looking to enable the internal DHCP on my WLC. I have enabled it and it seems to be operating correctly but I think my routing and or settings allowing me to access anything beyond the private network is wrong.
DHCP is handing out correct IP info and DNS info. How do I route the new private network (10.1.9.*) out to our existing 10.1.4.1. (management IP is 10.1.4.253) Can this be done within the WLC ?
View 3 Replies
View Related
Mar 25, 2013
setup a DHCP server on a WLC 2504. I'll try to resume my configuration:
I have 2 networks: inside users (vlan 1) and external users (vlan)
My controller uses the port 1 to connect to the switch, which has a trunk with WLC.
I have two routers, one using vlan 1 (192.168.3.0/24) and one using vlan 10 (200.X.X.X). All ports to these routers are access ports on their respective vlans.
I have 2 SSID, one for inside, other to outside. Inside is working very well.
To the outside I created a DHCP escope and already set the IP of the management interface 192.168.3.119.
Managemente interface (vlan 1 inside): 192.168.3.119/24
Outside interface (vlan 10): 200.X.X.195 - Default gateway 200.X.X.X.193
I alredy checked the DHCP Proxy in Advanced option.
See the output of the debug client:
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
[Code].....
View 3 Replies
View Related
Mar 28, 2012
I created a wlan just for our wireless IP phones.I assigned an interface I created which in turn was set to a specific port on company 2504 WLC. Connecting switchport is set to trunk. Right now I can't ping the voice wlan interface.
View 1 Replies
View Related
May 22, 2012
Our VMware guys want to use shared networking infrastructure to create a DMZ on a network.
[ASA (subif;VLAN 4)] <-trunk-> [DMZ Switch] <-trunk-> [LAN Core Switch] <-trunk-> [ESX vSwitch] <-VLAN 4-> [VM]
The DMZ Switch does not participate in VTP with the LAN but will have a VLAN ID created (same VLAN ID used from VM to ASA) No vlan interface will be created for the vlan
Is this a bad idea from a security or otherwise point of view? i.e. Best practices that should be followed here? Should I configure the link between the LAN Core Switch and DMZ switch as access ports so the port on each switch is forced to be on one specific vlan? I was going to use allowed vlans command to limit the vlans that can pass on it and possibly vtp pruning for all vlans.
View 2 Replies
View Related
Apr 2, 2013
I have just setup a new WLC 2504 controller to manage a WiFi service that will span 6 geographic locations. The local networks at each location are on different subnets (all 192.168.x.x) and are linked up via IPSEC VPN links, and there is Active Directory spanning the sites, with DNS and DHCP servers running at each location.
I tested the WLC at our main office with a single AP, and it worked fine. The AP set itself up, and wireless devices connect with no probs. Great! Yesterday I headed out to one of our remote sites, and connected an AP to their network - and that seemed to work fine too. Within a few minutes I was able to see the WiFi network I'd setup, and my smartphone connected to it straight away (as I'd rpeviously connected at the main office), so I was pretty happy that all was working well.
This morning however I've had notification that wifi performance at the remote site isn't great. I've got someone to check their ip address, and I've found that their IP address and default gateway match the LAN at the main office where the WLC is based - NOT the LAN where the wireless client is. Obvioulsy this is not ideal!
(I guess I HAVE done something wrong!?). And how can I get wireless clients at remote sites to pick up an IP from the DHCP server at THEIR site?
View 3 Replies
View Related
Oct 3, 2012
I'm new at this stuff and very stumped. I have one WAP with multiple SSIDs that support VLAN ID (for a private and guest wireless network) and a managed switch that supports tag or port based VLAN ID. How do I set up the switch so that the networks are separate, but can still reach their own routers to get on the Internet? In case details are necessary, the WAP is a Cisco Aironet 1130AG and the switch is a Netgear FS750T2
View 14 Replies
View Related
May 29, 2012
Is it possible to assign IP addresses to remote site WIFI users from local DHCP server and forward all other traffic to 2504 WLC?
[WIFI Users] >--------<AP (DHCP server) >------ VPN ---------< WLC
View 1 Replies
View Related
Mar 20, 2012
in my network i got a switch with 4 vlan's configured
-vlan 10
-vlan 20
-vlan 30
-vlan 40
in vlan 40 i have my domain controller for my existing domain.i have read that seperate vlan's can't have contact without a lollipop router ( router on a stick, inter vlan routing)i want that users in vlan 10, vlan 20 and vlan 30 can have access to my domain controller in vlan 40
but they can't have access to each other.
View 11 Replies
View Related
Mar 12, 2011
I have a ASA 5505 that I have been using for a while, but a new ISP is trying to configure my service so that the outside interface has to be configured as DHCP to receive a reserved IP address, and then they will route a separate, non-contiguous block of addresses to that address.
Essentially, they have a DHCP reservation for 1.2.3.4 for my ASA, and then they have 10.2.3.16/28 as a separate block routed to me.
Obviously, I can do my static NAT translations using outside as the address, but I cannot get the separate block of addresses to route through the ASA. Is there a way to do this and get them to work? My ASA is running 7.2(2)
View 3 Replies
View Related
May 21, 2012
i am first time to trying to make Vlans. I managed to do 2 vlans to SA520 to ports 1 and 2. But when i try to separatethem to SG300 with web management it doesnt work. Vlan 1 works fine, i untagged wanted ports and forbid vlan 2 ports.In Vlan 2 there vice versa, is this right way to do? Both Vlans has their own DHCP range as i do them to SA520.
View 2 Replies
View Related
Feb 4, 2013
I have a Cisco RV180-K9-NA router. I would like to set up 2 separate VLAN assigned to different ports on the router. I will be using LAN port #1 to communicate with the router. The NIC connecting the PC to the router has multiple IP addresses assigned to it so that I can communicate with the separate VPNs (192.168.1.x for the router; 172.16.10.x for VLAN #1 on port 2; and 182.16.10.x for VLAN #2 on port 3). I also need to be able to have the router provide both IPv4 and IPv6 DHCP services for devices on each subnet.
View 3 Replies
View Related
Dec 21, 2011
Can a 2504 wlc use a vlan ids of 190X? I have found that it supports 512 vlans but I have not found any restrictions in the id used.Vlan id 190X is distributed by the isp (they have the ASAs in their central site) so if it is not supported I must prepare a vlan transfer between switches.
View 4 Replies
View Related
Oct 30, 2012
Ok, so with my WLC2504 implementation, I use the 4 ports to physically segment my wireless networks. Here is my setup:
Port 1 (Management) - Internal IP so I can manage the WLC from our internal network (Untagged)
Port 2 - Connected to our core stack and tagged with VLAN 14
Port 1 and 2 are both connected to the same core stack
Port 3 - Connected to a RV016 Linksys which is connected to our fiber connection to the outside (Untagged) - External connection for laptops
Port 4 - Connected to a Linksys wireless router (with wireless disabled) (Untagged) - External connection for smartphones
The TAC engineer I talked to just told me that I can only have one untagged interface on the WLC. If they are physically connected to different switches, thus physically segmenting the network, should it matter?
The wireless works just fine. What I am having issues with is getting a client that is hard-wire connected to the RV016 to get a DHCP address from the WLC.
View 9 Replies
View Related
Apr 14, 2013
I have two ethernet cards (from same equipment) that arent acquiring IP Address after instalation of WLC 2504.I dont want (yet) to disable DHCP proxy on WLC.
*DHCP Socket Task: Apr 15 18:49:04.219: 00:0a:95:XX DHCP received op BOOTREQUEST (1) (len 556,vlan 0, port 1, encap 0xec00)
*DHCP Socket Task: Apr 15 18:49:04.219: 00:0a:95:XX DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')
*DHCP Socket Task: Apr 15 18:49:07.218: 00:0a:95:XX DHCP received op BOOTREQUEST (1) (len 556,vlan 0, port 1, encap 0xec00)
*DHCP Socket Task: Apr 15 18:49:07.218: 00:0a:95:XX DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')
[code].....
View 6 Replies
View Related
Mar 20, 2012
WiSM WLAN Service Module WS-SVC-WISM-1-K9 in 6509e running VSS IOs s72033-ipservicesk9_wan-mz.122-33.SXI2a.bin having trouble to get the IP from service-vlan DHCP.The pertinent config is as follows.
!
vlan 300
name WiSM_Service_Vlan
!interface Vlan300
description *** WiSM Service-Vlan
ip address 192.168.200.1 255.255.255.0
[code]....
The service IP is supposed to have been populated with an address from the dhcp pool. I am also unable to connect to it by doing a session switch 1 slot 4 processor 1. I get the following upon attempting to do so:
HO2NET0001##session switch 1 slot 4 proc 1
The default escape character is Ctrl-^, then x. You can also type 'exit' at the remote prompt to end the session Trying 0.0.0.0 ...
View 5 Replies
View Related
Feb 16, 2012
I did the config below but unable to obtain the ip from the subnet scope 10.10.9.0. The switch is in the layer 3 mode.
no spanning-tree
vlan database
vlan 2
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
[code]....
View 1 Replies
View Related
Sep 25, 2012
I have a new 5508 that I am setting up. My first one from scratch.
Interfaces:
managment -> 10.10.10.10 ->dhcp 10.10.10.1
voice -> 10.10.7.1 ->dhcp 10.10.10.1
guest -> 192.168.1.2 ->dhcp 192.168.1.2
Local DHCP (via the 5508) is for the guest network while the management and voice use the Windows DHCP server.
My problem, Voice and guest work fine. I have two SSID's (one 802.1X and the other PSK) that use the management interface that will not get an IP. I have enabled dhcp proxy from the cli on the controller. I tried with the management VLAN tagged and untagged.
View 2 Replies
View Related
Dec 14, 2011
We have a Cisco Aironet 1130AG Wireless AP (firmware 12.4) and have a guest wireless network (internet only) and corporate wireless network configured on it. They are kept separate by having different VLANs assigned to them. When a laptop connects to the guest network I see the DHCP request go out and it is tagged with the correct VLAN. The problem is when a laptop connects to the corporate network I see the DHCP request go out but there is no VLAN tagged on the packets. This causes a problem because both of our DHCP servers (on VLAN 1 and 3, remote DHCP servers no DHCP running on the Aironet [Doesn't seem like this version has a DHCP server]) are sending responses and sometimes the corporate user will get an IP address on the Guest subnet.
Our corporate network is setup on VLAN 1 which is configured as the Native VLAN on the Aironet. Will this cause the Aironet not to tag these packets with any VLAN information? Any other thoughts as to why it isn’t tagging these packets to a VLAN?
View 3 Replies
View Related
Feb 23, 2012
In our test set up, we have two WLC 5508 Controllers connected via Checkpoint UTM-1 firewall Inside and DMZ Interfaces. Both the WLC controllers are connected to the firewall via Cisco 3750 switch. On the Local (Inside) Controller, guest SSID is enabled and attached to the wireless management Interface. On the remote anchor controller, guest SSID is enabled and attached to the Management Interface as well. The following configs are replicated on both the Controllers.
SSID Name - guest
Interface - Management ( VLAN 10 on Local and VLAN 20 on remote) -
Mobility Group: Same configs at both ends
SSID Anchor : Anchor SSID on local and local SSID on Anchor.
AP: CAPWAP 3502 Management Subnet
[code]....
Is there any thing missing in the wireless configs and or the firewall rules as i could not see DHCP request back from the Anchor Controller. Also, after DHCP is obtained, the web authentication request will be redirected to an Amigopod device for authentication. In this case is the redirect URL congiguration to be performed only on the Anchor Controller or is this to be replicated on both the Local and Anchor Controllers.
View 8 Replies
View Related
Oct 15, 2012
I have a firewall that I want acting as a DHCP relay. This firewall has a number of VLAN interfaces serving clients. The DHCP relay destination is the IP address of a Windows 2012 Server running Microsoft DHCP which has multiple scopes configured, one for each client VLAN.What I'm finding confusing is how the DHCP will identify the client. Does the DHCP relay insert an identifier of some sort (opt. 54?) based on which VLAN the DHCPREQUEST comes from and then this identifier can be configured to be recognized on the DHCP server?
View 2 Replies
View Related
