I am looking to enable the internal DHCP on my WLC. I have enabled it and it seems to be operating correctly but I think my routing and or settings allowing me to access anything beyond the private network is wrong.
DHCP is handing out correct IP info and DNS info.How do I route the new private network (10.1.9.*) out to our existing 10.1.4.1. (management IP is 10.1.4.253) Can this be done within the WLC ?
I am looking to enable the internal DHCP on my WLC. I have enabled it and it seems to be operating correctly but I think my routing and or settings allowing me to access anything beyond the private network is wrong.
DHCP is handing out correct IP info and DNS info. How do I route the new private network (10.1.9.*) out to our existing 10.1.4.1. (management IP is 10.1.4.253) Can this be done within the WLC ?
This is a new setup and has not worked yet. I have multiple 3602 APs and one 2504 Controller. I thought initially I could plug-in an AP into one of two POE Ports on the 2504. During debug mode I see that it has low power, was suprised that the 2504 switch can't fully power the AP? Is this correct?Anyways I have another POE switch that I am using with ample power. The configuration for my wireless is that it will be completely segmented off of my internal network as this is for guest access. So DNS servers are external so I cannot create host entries for the AP to discover the controller. With that being said I believe that is just one way for the discovery process to happen. I have my controller management interface and DHCP scope on the controller on the same subnet plugged into the same POE switch. The AP does seem to get a DHCP address and I can ping the controller from the AP. I cannot get any further then that. I will not join the controller and the radios get disabled. I get messages such as "discovery response from MWAR is rejected. I will post a debug log of the AP and its bootup process. This is new equipment so I would assume the firmware is somewhat up-to-date and the 3602 AP is somewhat the latest model.
View 3 Replies View RelatedI have a 2504 WLC and 1042 ap's. Everything worked great in my test enviroment (of course). Now when I want to deploy the wireless, the ap's are not getting and ip for the windows dhcp server.
I have option 43 configured in dhcp, sub option 241>ip address of the controller
I have my A record in dns, cisco-capwap-controller.
*Mar 1 00:03:17.050: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
Not in Bound state.
*Mar 1 00:03:27.050: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:27.054: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
*Mar 1 00:03:37.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:47.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:03:57.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
*Mar 1 00:04:07.054: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does not have an Ip !!
Not in Bound state.
I am wondering if the folowing is a valid configuration:
WLC2504
AP2600
I need 3 SSID/VLAN, 1 for corporate devices, 1 for coporate smartphones, 1 for guest.
Port 1 on the 2504 should be used for management and corporate devices and connect to the corp network. Port 2 is for smartphones/guest and will be connected to a Cisco ASA 5515 that is connected to a second ISP.
Corp devices should get IP from an Windows DHCP. Smartphones/guest should get IP from the WLC. Is this possilbe? I read this in a document "To use the WLC as a dhcp, you need to enable DHCP proxy as it is required." Some how I am imagining that this will mess with the Windows DHCP. Is it better to use the ASA as DHCP for smartphones/guest?
i have configured wlc 2504 .in that i have configured two interfaces.one is guest, 2nd is internal user, the pblm when user try to connect with that contain ssid user not getting ip address,
i have connected only one link between core to wlc on port 1.for guest interface i used port 4.but no physical link.
My problem, in a nutshell, is that clients do not get an IP from an external DHCP server when connected to a guest VLAN.
My current setup is:
Native VLAN 1 (192.168.2.x)
2008 DHCP Servers
2504 WLC
[Code].....
The guest WLAN just uses WPA and a PSK and is set to interface vlan101 There rest of the 2504 config is default.
The ports that the WLC and APs are connected to are tagged on the correct VLANs. (is that even necessary for the AP now?)
Ive changed the interface config around a hundred times now with no luck. No matter what a client will not get an IP.
Could this be due to the 2504 and ASA both acting as DHCP relays? Ive tried setting the IP of the DHCP on the dynamic interface to many different things with no luck.
I have a Cisco Wlan Controller 2504 with 1042N AP (3-nos) every thing was working fine from past 2 months. Now i am getting a issue with clients which are connected to the wireless AP, they are not able to get an dhcp IP address from the 2960 Switch (DHCP Server). The clients are getting IP address as 0.0.0.0. [code]
View 36 Replies View RelatedAll controllers are in version 7.2.111.3.C1 is a 5508, it is ou anchor controller.C2 is a 5508, it is a big site controller.C3 is a 2504, it is a small site controller. C2 and C3 are in the same mobility group than C1 (and all is up up in mobilty managment). When "DHCP Addr. Assignment" is enable on C1 : Clients on C2 received their IP address by our external DHCP server via C1 and the guest tunneling betwenn C1 and C2 and all is working fine. Clients on C3 don't received their IP address by our external DHCP server via C1 and the guest tunneling betwenn C1 and C3, so nothing work.
View 4 Replies View Relatedsetup a DHCP server on a WLC 2504. I'll try to resume my configuration:
I have 2 networks: inside users (vlan 1) and external users (vlan)
My controller uses the port 1 to connect to the switch, which has a trunk with WLC.
I have two routers, one using vlan 1 (192.168.3.0/24) and one using vlan 10 (200.X.X.X). All ports to these routers are access ports on their respective vlans.
I have 2 SSID, one for inside, other to outside. Inside is working very well.
To the outside I created a DHCP escope and already set the IP of the management interface 192.168.3.119.
Managemente interface (vlan 1 inside): 192.168.3.119/24
Outside interface (vlan 10): 200.X.X.195 - Default gateway 200.X.X.X.193
I alredy checked the DHCP Proxy in Advanced option.
See the output of the debug client:
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
[Code].....
I have just setup a new WLC 2504 controller to manage a WiFi service that will span 6 geographic locations. The local networks at each location are on different subnets (all 192.168.x.x) and are linked up via IPSEC VPN links, and there is Active Directory spanning the sites, with DNS and DHCP servers running at each location.
I tested the WLC at our main office with a single AP, and it worked fine. The AP set itself up, and wireless devices connect with no probs. Great! Yesterday I headed out to one of our remote sites, and connected an AP to their network - and that seemed to work fine too. Within a few minutes I was able to see the WiFi network I'd setup, and my smartphone connected to it straight away (as I'd rpeviously connected at the main office), so I was pretty happy that all was working well.
This morning however I've had notification that wifi performance at the remote site isn't great. I've got someone to check their ip address, and I've found that their IP address and default gateway match the LAN at the main office where the WLC is based - NOT the LAN where the wireless client is. Obvioulsy this is not ideal!
(I guess I HAVE done something wrong!?). And how can I get wireless clients at remote sites to pick up an IP from the DHCP server at THEIR site?
I have a problem with our WLC 2100 series (2125). Basycally internal DHCP server configured on WLC is not working. I have one AP connected to port no 7 (PoE) to bypass and eliminate problem with other equipment.
Port no 7 details:
IP Address: 192.168.30.10
Netmask: 255.255.255.0
Default router: 192.168.30.1
DHCP Server: 192.168.1.250(code)
Is it possible to assign IP addresses to remote site WIFI users from local DHCP server and forward all other traffic to 2504 WLC?
[WIFI Users] >--------<AP (DHCP server) >------ VPN ---------< WLC
I manage Wi-Fi on a college campus, and we have implemented 802.1x with RADIUS authentication running on a Windows server, and that works well. The issue is that the college is looking at removing wired connections in the dorms in favor of just deploying wireless, and the gaming consoles (Xbox, PS3, etc. ) cannot support 802.1x. We use Cisco 5508 Wireless LAN controllers with 1142 and 3602 APs.
I would like to enable MAC address authentication for these gaming consoles, wherein we (IT) would enter the MAC address of the console for a single connection and allow that console to connect to Wi-Fi, but I do not want to use WEP or any other TKIP passwords, because once the students would know the password they would use WEP/WPA instead of authenticating through RADIUS for their PC/tablet connections. .
I have a case that to minimize wireless signal into one room.Room has dimenitons 3 x 6 meters.But the signal should pass to other room.I have tried many scenarios but couldnt reach the result that i expect.First i have used a 3502 with external antenna ports , but no antenna attached to it.I have set up the maximum power level from TPC menu from controller , but it was more limited than i thought.I can only connect whenever i put Ap next to myself.Then i have used a 3602 with internal antennas.The reason i have picked 3602 is , it has the lowest gain 2.4GHz antenna attached to it.I reset TPC to minimum power level (5) , but as expected signal can be heard from two rooms from the AP is located.
View 2 Replies View RelatedOk, so with my WLC2504 implementation, I use the 4 ports to physically segment my wireless networks. Here is my setup:
Port 1 (Management) - Internal IP so I can manage the WLC from our internal network (Untagged)
Port 2 - Connected to our core stack and tagged with VLAN 14
Port 1 and 2 are both connected to the same core stack
Port 3 - Connected to a RV016 Linksys which is connected to our fiber connection to the outside (Untagged) - External connection for laptops
Port 4 - Connected to a Linksys wireless router (with wireless disabled) (Untagged) - External connection for smartphones
The TAC engineer I talked to just told me that I can only have one untagged interface on the WLC. If they are physically connected to different switches, thus physically segmenting the network, should it matter?
The wireless works just fine. What I am having issues with is getting a client that is hard-wire connected to the RV016 to get a DHCP address from the WLC.
I have two ethernet cards (from same equipment) that arent acquiring IP Address after instalation of WLC 2504.I dont want (yet) to disable DHCP proxy on WLC.
*DHCP Socket Task: Apr 15 18:49:04.219: 00:0a:95:XX DHCP received op BOOTREQUEST (1) (len 556,vlan 0, port 1, encap 0xec00)
*DHCP Socket Task: Apr 15 18:49:04.219: 00:0a:95:XX DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')
*DHCP Socket Task: Apr 15 18:49:07.218: 00:0a:95:XX DHCP received op BOOTREQUEST (1) (len 556,vlan 0, port 1, encap 0xec00)
*DHCP Socket Task: Apr 15 18:49:07.218: 00:0a:95:XX DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')
[code].....
The last shipment of 3602 APs for a customer came with 7.3 software. Controllers are running 7.2.110.0 so APs had to be downgraded. After APs finished downgrading they were still up. When we moved the APs to another controller running 7.2.110.0 they would not come back up. Power was denied at the switch.
View 2 Replies View RelatedWe are in the process of evaluating Cisco wireless controllers and AP. We have 3602 APs and 2504 controllers right now. We have multiple branch offices connected to the main office through layer 3 and they all have different vtp domains and vlans. I am trying to deploy APs at the branch offices and connect them back to the controller and the central site. I created a sub interface and ssid with one of the vlans at the branch office on the controller and was able to get the AP to join the controller through DNS. However, a client at the branch office connected to the AP was unable to ping anything at the branch and central sites. Any documentations on how to deploy such a setup where the controller is at the central site and AP at the branch office going through multiple routers in between?
View 1 Replies View RelatedIs 802.11ac wireless module for Cisco Access Point 3602 is available to order ? what Wireless controller we need to use for the support of 802.11ac wireless standard ?802.11ac will support only on 5700 series wireless controller ? Or it will support with 5508 Series also ?
View 7 Replies View RelatedI am busy setting up a wireless backhaul.. I have the bridge setup using 2 x 3602's ( Root / mesh) configuration. The bridge is self is up. The main idea is to get older autonomous access point (1231) connected to the ethernet and pull that back in to a temporary building. I have groupped the bridge to only have one SSID on it.
The switch port on the pwr inj4 is currently connected to a laptop - Ethernet Bridging is enabled on the mesh port. Now the laptop does get an ip form the dhcp server. This is where my issue comes in. I can ping the mesh ap's IP address, but not past it.
We have been using a dhcp and tftp server to automatically configure branch WAN routers such as 1751's and 1841's for years but, have recently purchased a 1921 and 1941 as possible next generation replacements. The problem is when the 1900 series power up instead of getting a dhcp address directions to the tftp server it boots up and asks for the user name to be immediately changed or you will be "locked out". Any workaround to this so that I can again go back to download my common configuration? Or any other way of automatically configuring the newer version ios? Doing extra steps for 500 WAN branch routers is time consuming. Doing configurations without automation for that many is moving in the wrong direction.
View 1 Replies View RelatedI have a small, simple small business network. There are 2 switches - an 8-port switch connected to my main Windows server (which is the DHCP provider for the network), and a 24-port switch which is plugged into the 8-port switch.
I replaced these switches (Dell unmanaged switches) with the Cisco 200 series smart switches (the 8-port and 26-port models). When I plug the 26-port switch into the 8-port switch, it is unable to get its DHCP address from the Windows server. Also, any device plugged into the 26-port switch cannot communicate with any other device, and all of the ethernet port lights flash at the same time at the same frequency - quite a light show!
If I plug the Windows server DIRECTLY into the 26-port switch it receives a DHCP address.
I have tried a 2nd Cisco 26-port swtich and it does the same thing, so I assume it is not a hardware issue.
I have a small, simple small business network. There are 2 switches - an 8-port switch connected to my main Windows server (which is the DHCP provider for the network), and a 24-port switch which is plugged into the 8-port switch.
I replaced these switches (Dell unmanaged switches) with the Cisco 200 series smart switches (the 8-port and 26-port models). When I plug the 26-port switch into the 8-port switch, it is unable to get its DHCP address from the Windows server. Also, any device plugged into the 26-port switch cannot communicate with any other device, and all of the ethernet port lights flash at the same time at the same frequency - quite a light show!
If I plug the Windows server DIRECTLY into the 26-port switch it receives a DHCP address.
I have tried a 2nd Cisco 26-port swtich and it does the same thing, so I assume it is not a hardware issue.
does Cisco 2600 series switch support 802.1x and DHCP snooping?
View 6 Replies View RelatedHow many IP address can handle the DHCP server of the RV0xx Series VPN router? can be configured for more than 250 ip addresses? it is posible to configure the router in order to have more than 250 ip address?
View 2 Replies View RelatedI am upgrading from 7.0.116.0 to 7.2.110.0 to support the 3602 APs. Is it a different license to upgrade to 7.2.110.0 or can I directly upgrade to 7.2.110.0 without a new license?We currently have a 5508 base license.
View 1 Replies View RelatedI need to apply DHCP snooping on 4500 series switches working as L2 in my Network. We have external DHCL Server in another location connected with 6500 series switch.
Running EIGRP Configured Voice & Data Vlan both
DHCP Server -------- 6509 switch<----------------------------------->6509 Switch -------- 4500 switch ----------------------------------------------------------Ip Phones.
(ving Redundant) (ving Redundant)
I need to know whether the configuration which I mentioned in scenario is enough for apply DHCP snooping in my network.
Can the Cisco 3602 APs be configured by a Cisco 5508 WLAN controller to provide client isolation?
View 2 Replies View RelatedCan Controller 4400 series work with Aironet 3600 series?
View 5 Replies View RelatedWhat's the main technical differences among the 1140 AP series and the 1260 AP series?I know that the 1260 supports external antennas while the 1140 supports internal antennas, but apart from that, is there any other important difference ?
View 10 Replies View Relatedwhy I can't use cisco ehwic-3g-hspa-u card in cisco 2800 series and 1841 series router?documentation said that it should work with that devices but when I installed it, it doesn't work even as device i can't see I am using cisco latest ios advance ent. 15.1(4)M4?
View 3 Replies View RelatedMy Draytek 2710 just dies after 2 years so I was looking for something a little more reliable and noticed the spec of the SRP527W-U.I take it with only one antenna and reading a couple of past discussions, the wireless will only manage n-lite as some people call it i.e. 150Mbps, and not the full 300? Oh, and are the ports still only 100M and not Gig?I know the 547 would tick both these boxes but we are talking twice the price. How does the quality and logevity of the SRP500 series compare to the RV series (which would need an adsl modem) or the Linksys boxes?
View 1 Replies View Related