Environment:
1. Core switch - Catalyst 6509e
vlans configured:
a. vlan 50 (wired clients)
[Code]....
here's the problem, wireless clients connected to WLAN guest keep getting DHCP leases from WLAN local 10.0.50.10 (scope 10.0.70.101 to 200)
Here at HQ we have a 4402 WLC. At our remote sites we have 1231G APs running in autonomous mode. I upgraded one of the APs -- IOS 12.4(3g)JA -- to run LWAPP. Per release notes I've read upgraded 1231's do not support REAP/HREAP mode, consequently, it's running in LOCAL mode.
The AP is managed by the WLC. I created a WLAN for the remote site and assigned it to the MGMT interface; the remote site subnet doesn't exist in HQ. The DHCP server for the remote site is presently at that site; AP and DHCP server reside at the same place.
Clients authenticate successfully to the remote site AP, however, they are not getting DHCP addresses assigned. Does the DHCP server for the remote site have to reside in HQ since the AP is running in local mode? If so, where is that specified, on the MGMT interface config?
I recently upgraded a clients WLC and they keep saying they are unable to get an IP address from the DHCP server. It's a simple, flat network and here is what the logs are showing.
*apfReceiveTask: Apr 11 13:37:25.477: %SIM-3-DHCP_SERVER_NO_REPLY: sim_interface.c:1039 Failed to get DHCP response on interface 'management'. Marking interface dirty.
*apfReceiveTask: Apr 11 13:37:17.278: %SIM-3-DHCP_SERVER_NO_REPLY: sim_interface.c:1039 Failed to get DHCP response on interface 'management'. Marking interface dirty.
*apfReceiveTask: Apr 11 13:37:05.880: %SIM-3-DHCP_SERVER_NO_REPLY: sim_interface.c:1039 Failed to get DHCP response on interface 'management'. Marking interface dirty.
*apfReceiveTask: Apr 11 13:13:47.397: %SIM-3-DHCP_SERVER_NO_REPLY: sim_interface.c:1039 Failed to get DHCP response on interface 'management'. Marking interface dirty.
[code]....
I have a PIX 515E that I want to use to as a border between my internet connection and my Cisco AIR1131AG. I have configured the PIX to have the outside interface as a dhcp client which gets its dynamic IP address from the cable modem. the AP is connected to the E1 inside interface. Now I could see the E1 interface from the arp table from the AP but I cannot ping it. From the firewall I don't see the ARP table from the firewall. and i cannot ping the AP. what is wrong with the configuration? side note, i am able to connect to the AIR1131AG from my laptop I was not able to retrieve an IP address.
FW1 - CONFIGURATION
interface Ethernet0 description uplink towards the techsavvy modem speed 100 nameif outside security-level 0 ip address dhcp setroute !interface Ethernet1 description >>> WIFI LAN ACCESS <<< nameif inside security-level 100 ip address 10.0.0.1 255.255.255.0
[Code].....
Just inserted a new 5508 WLC into the network. We current have 3 4404 WLCs, and there was a need to duplicate, as much as possible, the configurations on the 4404s, and the design. The 5508 came online as expected. We moved a few access points over to it. The APs got the correct address range. The clients are expected to get addresses in the same scope range as the APs. However, the clients are receiving addresses in the management IP scope.I know there are two "not a good way to do it" in here. Why is the management address range in the DHCP scope, and why are the clients using the same scope as the APs. We are going to change that. For now, the AP and client in the same range has been going on since we rolled out wireless in 2006.The 8 ports on the 5508 are configured for LAG. There is no dedicated port for management. They tell me not to do that on a 5508.
View 8 Replies View Relatedwe have installed and implemented a FWSM on cisco catalyst 6509E and defined two virtual contexts.one of contexts work as datacenter firewall. initially it is configured to allow all traffic to datacenter VLAN. (permit any any) on test, it worked fine, except for one problem: all web services had degradation in performance, all server-client (non web) services worked very fine. additionally all https servies worked well.
Users connect to the web server bypassing the proxy, web services are expected to act just like other ones.
I have to upgrade two Cisco Catalyst 6509E from Catos to IOS. I would want to know the requirements hardware or software for upgrading. Which are the recommended images I must download? From cat6000-sup32pfc3k9.8-4-5 to the latest stable version of IOS, is it recomended to pass to another previously version before?
I have viewed the following links,[URL]but, it doesn`t mention anything about that. The image below is the result of the "show version" command of one of our Cisco Catalyst.
WS-C6509-E Software, Version NmpSW: 8.4(5)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Aug 3 2005, 13:13:36
[code]....
I'm migrating from a failover pair of FWSM modules across to a failover pair of ASA Service Modules. In order to avoid a "big bang" switchover I intend to migrate subnets from one to the other over a protracted period.With that in mind, whether there is any restriction on having FWSM and ASASM modules in the same chassis? A trawl of the relevant documentation hasn't revealed anything.In this specific case it is Catalyst 6509E VSS chassis pairs with Sup-2T.
View 1 Replies View RelatedI have Catalyst 6509 E with redudant SUP720-3B (and MSFC3) running 12.2(18)SXF6 IP Services Lan Only IOS (this IOS requires 512MB DRAM and 64MB of flash) SUP has 512MB DRAM (458720K/65536K) and 512MB sup-bootdisk:, but, there is65536K bytes of Flash internal SIMM (Sector size 512K).
My question is can I put 12.2(33)SXJ3 IP Services Lan Only IOS to this 6500 because this IOS requires 512MB DRAM and 512MB od flash?This is "sh ver" and "dir all-filesystems" of my 6500:
cat6500#sh verCisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-IPSERVICESK9-M), Version 12.2(18)SXF6, RELEASE SOFTWARE (fc1)Technical Support: [URL] Copyright (c) 1986-2006 by cisco Systems, Inc.Compiled Mon 18-Sep-06 23:59 by tinhuangImage text-base: 0x40101040, data-base: 0x42D90000
ROM: System Bo
Initially there were 3 SSIDs configured but all of them were assigned a single interface and this interface was configured with the controller management IP address as DHCP server so that the WLC could assign IP addresses to wireless clients, guns and printers etc.
Issue: As part of PCI initiative, we decided to segment the traffic in multiple subnets based on type of wireless clients; so now there are 3 interfaces configured and each SSID is assigned a specific dynamic interface and each interface is configured to use the controller management IP address as DHCP server.
There are 3 scopes configured for each of the dynamic interfaces/SSIDs and DHCP proxy is enabled but wirelss clients are still being allocated IP addresses from the original DHCP scope that was associated with the dynamic interface originally assigned to all 3 SSIDs.
I verified the following:
1. Each SSID is assigned a different dynamic interface (Users, Voice and Handhelds)
2. Each dynamic interface is configured to use controllers management IP address as DHCP server
3. DHCP scopes configured with correct network information for each dynamic interface and enabled
I have a LAP1142N that is connected to a 3560 nonPoE switch (using compatible power injector) that will not associate to the controller I have set-up. The wireless is existing and I have about 11 other APs connected to the controller with no issues. The AP will pull an IP address from DHCP running on the primary controller. The AP pulls a new IP address in roughly a minute. I set the pool to be 3 IP addresses and set a contant ping to each, there is about 1 request time out before the next IP address starts pinging. I went to the controller and pulled the following message error from the log.
*Feb 13 14:24:58.614: %LWAPP-3-HDR_ENCAP_ERR: spam_lrad.c:4216 Unable to encapsulate LWAPP header for discovery response; AP (APs MAC address)
*Feb 13 14:24:58.614: %APF-3-PDU_ENCAP_FAILED: apf_net.c:771 Failed to encapsulate a PDU for transmission to station00:00:00:00:00:00. Destination IP address not set in L3 mode.
I have tried a different cable, connecting to a PoE switch, different controller, larger DHCP range, hosting DHCP on the distribution switch, I am awaiting console access to the AP since this is remote work. The controller is running Software Version 5.1.151.0. Thoughts?
console inventory output from GUI
Model No. AIR-WLC4402-25-K9
Burned-in MAC Address XXXXXXXXXX
Maximum number of APs supported 25
Gig Ethernet/Fiber Card Absent
[Code] ....
Have a WLC 5508 running 7.0.230 with internal DHCP server. Timeout is 3600 seconds. The IP addresses never seem to be released. The controller will show 70 clients but 254 addresses will be assigned.
View 2 Replies View RelatedI'm monkeying around with an 881-W. Clients can associate and authenticate to ssid 'test', but they cannot get a DHCP address. Clients plugged into f 0 - 3 get DHCP addresses just fine.
I've looked at a lot of different guides, ran debugs etc. When wifi clients make DHCP requests the server never gets them. So there must be some IRB thing going on.
The 1130ag was the LAP model but I upgraded it to run in autonomous mode. My understanding is that it cannot assign IP addresses but I just want that confirmed. It is not connected to a WLC nor a server that can do DHCP.
View 5 Replies View RelatedI currently have DCHP server set up on my new 1141N. Everything works great, but I wanted to know if it were possible to make the DHCP server only hand out ip addresses on the wireless connection? Currently the AP is giving out ip addresses from the pool to wired and wireless pc's.
View 3 Replies View RelatedI work on a college campus that has thousands of students a day accessing our wireless network. We have broadcast SSID that the students use to connect to the internet. The students usually have more than one WiFi enable device on them and their laptops and phones both take an IP address, but they are only using the laptop to authenticate while the phone is associted, but not authenticated. In the meantime, I have several thousand IPs being used by their phones/iPods etc. Is there a way to revoke the DHCP lease if the client does not authenticate within a specified time frame (i.e. 10 minutes)?
View 3 Replies View RelatedI have new 2504 WLC + 1041LAP. I configured the first DHCP scope on WLC and the first WLAN. Then I set WLC DHCP server in WLAN properties and tried to connect to WLAN with wireless clients.
My wireless clients are able to authenticate on WLAN, but not able to get IPs from DHCP. The only lease that DHCP shows is for 1041LAP.
If I set permanent IPs on my wireless clients, they can connect and ping WLC.
I'd like to add a name to a few ip addresses in the DHCP client table currently there is an asterix for a couple client names. the router is an ea3500.
View 2 Replies View RelatedI have my other XBOXs connected to a 24 port switch but the one connected to the ea6500 directly gives me this moderate NAT issue. I thought this new router would be an upgrade to my old dlink but so far I get a new problem every day.I have reserved dhcp addresses for all the boxes and set up port triggering for the ports listed in several guides. But what else do I need to do? Is it likely I got a bad router?
View 2 Replies View RelatedMy company AP 1231G is not passing the DHCP address to the client from the DHCP server, my config listed below basicly the AP is on its own VLAN 10.1.123.1 and the DHCP server is 10.1.10.2 -- trying to use iphelper to pass DHCP to clients and the AP is on static IP 10.1.123.2--
!
! Last configuration change at 13:15:56 +0800 Fri May 25 2012 by root
! NVRAM config last updated at 13:15:56 +0800 Fri May 25 2012 by root
!
[Code].....
I know this question was asked many times, but I'm still not able to finalize my configuration on 871w. LAN part works fine, but wireless clients do not get DHCP IP. here is the config:
Building configuration...
Current configuration : 2092 bytes
!
version 12.4
no service pad
service timestamps debug date time m sec
service timestamps log date time m sec
no service password-encryption
!
[ code ].....
I'd like to have LAN and WLAN clients in same 192.168.1.0 sub net.
Region : Poland
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : 3.13.23 Build 120810 Rel.44064n
ISP : [url]...
I'm having issues with DHCP server not dealing IP after few hours (varies between 1h and 8h) of torrent traffic. If no continuous torrent traffic is applied, the problem does not occur. New wireless devices connect to the wi-fi network, but get stuck on 'getting IP adress'. The problem is with DHCP service or the wireless network service. New wired devices receive IP. The problem is only with wireless devices. I have no additional wireless device, that I can configure the network settings on my own (only phones) to check if it works without DHCP server giving IP. Wired connection is stable, but the bandwidth usage curve becomes somewhat similar to a sinewave.
I did disable the hardware NAT because that feature made the router unstable and caused it to hang up within minutes.
I have a 4402 (version 7.0.235) working with 10 units of 1121 APs connected to it. The WLC is not configured to work in LAG mode. Physical portt #1 is connected to the Main Switch (trunk). I have 3 WLAN mapped to 3 Different VLAN and Everything (security and internal, external DHCP) is working swell...Now- I have connected Physical port #2 directly to an ADSL Router (giga port), Configured Port 2 as untaggedwith the proper IP details.I have configured this interface to receive DHCP from the ADSL Router and for some reason, Clients are not getting addresses.When I assign a Static address to my laptop I get internet access and all is nice. I tried configuring The WLC internal DHCP server (instead of the ADSL router) and that didn't work. It seems like a DHCP problem but I dont understand the source of the problem of think of the solution.When turning off the proxy settings I noticed that it worked. Is there anything to do with that? The problem was that after a while the other WLANs starting causing DHCP issues as well.
View 7 Replies View RelatedI have 19 locations, each with 1 or more LAP1142N AP's in FlexConnect mode, AP's are primed using CAPWAP to my 5508 WLC at the datacenter. The AP's join the WLC without issue every time. I have two WLAN's, one guest and one staff, the guest network is open and obtains DHCP from a WatchGuard XTM33 firewall at each of the remote locations. The staff side is WPA2/RADIUS and DHCP is assigned from the WLC. Each AP is assigned a static IP that is not in the DHCP scope. For example: DHCP scope on the branch firewall is 192.168.1.10-250 the AP will be assigned static IP of 192.168.1.1.. The AP's are connected to a HP procurve switch that has a untagged VLAN, the firewall is using the native vlan 1 and so is the AP.
I have been running this network for over a year and it has not had a single issue until the last two weeks. Nothing on the network has changed or has been upgraded.The issue I am seeing is that clients are no longer able to connect to the AP and do not get DHCP assigned to them. I am able to get it working, if I remove the static IP from the AP, the AP will reboot, join the controller, then begin working, users can connect and DHCP is assigned from the firewall as it should. However, If the AP then reboots, the AP will join back to the controller but no clients can connect nor do they get a DHCP address. So, I then reassign a static IP to the AP again and it reboots, connects to the controller and clients then can connect and get DHCP.i've found several posts on this topic, in fact the patch of unassigning or reassigning static IP is one that I found. I am also waiting on my SmartNet to start up and will be contacting Cisco support as well.
I have a Cisco RV220W running the latest firmware (currently 1.0.4.17), and I have noticed that after about a week of use, wireless clients can no longer acquire IP addresses via DHCP.
I have used Network Monitor on both the DHCP server, and the WiFi client, and can see that the server is receiving the requests and sending a reply, but the client never sees the response from the server. So far the only way to resolve this is to reboot the router.
Is it possible to assign IP addresses to remote site WIFI users from local DHCP server and forward all other traffic to 2504 WLC?
[WIFI Users] >--------<AP (DHCP server) >------ VPN ---------< WLC
I'm setting up a Cisco Aironet 1141 (standalone mode, AP) to handle wireless traffic in the office. It gives out 2 mbssids, one of which authenticates domain users through a RADIUS server and places them in an appropriate VLAN (RADIUS options 64, 65, and 81). The other is a guest ssid that uses WPA-PSK and places users in the restricted guest VLAN. Physically, the AP is connected to a 3750 PoE Catalyst, to which RADIUS and DHCP servers are also connected. AP, SSIDs, RADIUS and EAP authentication all work. The configuration given below is a working configuration. People do get authenticated and do get placed in the appropriate vlan. The problem is that, once authenticated, the "Obtaining IP Address" phase on the client hangs and most clients timeout without getting an IP address. Given that the DHCP server is on the same switch and a test simple ASUS Wi-Fi IP gives out the same scenario (except the multiple VLAN) at the speed of light, I don't think that it's a problem with the network connections between clients and the DHCP server. After reading some topics here, I realized that probably other communication will be extremely slow, as well, but haven't tested that for sure. Clients are all non-Cisco - smartphones, notebooks, etc. Most of them are 802.11G, not N.
View 4 Replies View RelatedI have a (single) client (it is a cisco IOS router) behind a wireless workgroup bridge (cisco1242).The client's IP address is obtained via DHCP from the wired network.Now, when roaming occurs, the Client will never have knowledge about this event,and hence will not renew its IP address until lease expiers. This is not a problem of course when Layer 2 roam occurs, but with Layer 3
roam it will interrupt the traffic.
The cisco's IP Mobile implementation does have this issue addressed in DCCoA scenario: the WGB is configured to send an SNMP trap on its dotradio state change;the cisco mobile router is configured with snmp-server manager to process this trap and start DHCP renew on the Down/Up event. Unfortunately, this works in Mobile IP scenario only because I cannot make it work without the mobile router registered with a home agent.
how to force DHCP renew on a client (cisco IOS router) in such a situation - event scripting, SLA, or ...?
Is there a way to get the E4200 to NOT provide itself as a dns server to the DHCP clients? I have the unit set up to provide two dns servers to the clients, but the 4200 always provides itself as a third and it uses my cable providers dns servers. I am using a dns based filtering service to prevent certain material from being accessed within my network as the first two resolvers. So long as both or one of the provided servers is working it doesn't fall back to the unfiltered third, but I would prefer to remove it entirely.
View 8 Replies View RelatedThe router always inserts its’ own address as the primary DNS server for the all DHCP clients even though you have set the DHCP server on the router to assign manual external addresses?
Oh I have a
WRT310n v2
firmware v2.0.01 build 004
Let me elaborate a little so I am clear what I am saying. On the router setup page go to the section that is labeled “DHCP server settings” enter 3 static DNS servers. Say 2 Google and one open dns.
8.8.8.8
8.8.4.4
208.67.222.222
Apply your settings.
Release your ip on your workstation, then renew it. And look at your DNS, the routers address is still the first entry.
DNS Servers . . . . . . . . . . . : 192.168.1.1
I suspect this was probably a design decision so that they could allow a user to open their web browser and type something neat like [URL]. Which for the average user is fine and dandy. If my ISP didn’t suck and try to redirect everything to cached copies I probably wouldn’t have noticed it. But since I end up using the router for DNS and it picks up DNS from my ISP I end up getting Akamai IP addresses, and they have problems with SSL certs…. So you get errors.
I know I can go set the DNS server settings on the workstations. But I really don’t want to do this on all of my devices as they are mobile and switch networks, and on some networks not using the local dns breaks things. Like on the corporate network.
with our WLC 5500 controller, once the clients get the DHCP address the page is not redirecting them to the guest portal.What is the best way to check as to why the redirection is failing.
View 8 Replies View RelatedI've got an E4200v1 running 1.0.04 firmware with guest access enabled. I'd like to find out who is logged in using the guest access. Is there a way to get a list of the DHCP clients on the guest network? I'm able to do this for the non-guest access via the WEB interface's Status->Local Network->DHCP Clients Table page. But I can't find a similar table for the guest network.
View 3 Replies View RelatedI've just installed a 2106 Controller at a remote site. The Controller is seen by the WCS at the main site so, connectivity is good and I'm able to login from the main site. I've configured the DHCP server which is at the Main site on the AP manager interface and the Manager interface and on the WLAN of the new controller but, APs are not getting addresses.
View 6 Replies View Related