Aruba Instant & Cloud Wi-Fi

Reply
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

IAP DHCP relay

Is it possible to configure a DHCP relay address on the instant. I would like users at small branch sites with IAPs to pick up an IP address from a local DHCP server. In addition there is a requirement to forward the DHCP messages to a centralised ClearPass for profiling. Is it possible to configure this on the Instant?.

Guru Elite
Posts: 7,852
Registered: ‎09-08-2010

Re: IAP DHCP relay

Try this:

 

(Instant Access Point)(config)# ip dhcp <profile-name>
(Instant Access Point)(DHCP Profile <profile-name>)# server-type <centralized>
(Instant Access Point)(DHCP Profile <profile-name>)# server-vlan <vlan-ID>
(Instant Access Point)(DHCP Profile <profile-name>)# dhcp-relay
(Instant Access Point)(DHCP Profile <profile-name>)# dhcp-server <DHCP-relay-server>
(Instant Access Point)(DHCP Profile <profile-name>)# vlan-ip <DHCP IP address> mask <VLAN mask>
(Instant Access Point)(DHCP Profile <profile-name>)# end

 


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: IAP DHCP relay

Is the client's gateway the Virtual Controller or the upstream router in the LAN?

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: IAP DHCP relay

The client DG is a local address to the branch site probably the same device that issues the DHCP address. Clearpass at the core.

Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: IAP DHCP relay

At the device that's the client's gateway, can you configure a helper address to Clearpass?

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: IAP DHCP relay

I have a VPN tunnel configured, will this send the relay down the VPN?. This is what I dont want to happen as the tunnel is only for guest traffic. The relay is needed for corporate BYOD profiling. I cannot set the relay on another device - this is the basis for the original question.

Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: IAP DHCP relay

If there is no vlan specified, the client's traffic will be sent out of the controller untagged
Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: IAP DHCP relay

Sorry, the original question was can I configure a DHCP relay on the Instant AP?

Guru Elite
Posts: 7,852
Registered: ‎09-08-2010

Re: IAP DHCP relay

In distributed L3 mode, yes. See the config I posted in post #2.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Super Contributor II
Posts: 429
Registered: ‎01-19-2011

Re: IAP DHCP relay

When I configure these centralised DHCP scopes, it looks like the traffic will go down the VPN, is this correct?

Search Airheads
Showing results for 
Search instead for 
Did you mean: