Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor I
Posts: 6
Registered: ‎05-26-2015

Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Hello guys,

Trying to figure out what is going on with my internet access. I have a virtual controller on a IAP225 and inside I configured a local DHCP on Vlan50 (172.50.0.0/25). when user try to access internet by IAP225 access point (have 8 IAP access point configure as slave) they can't, but from Controller IAP225 they can. In the Alcatel access switches the vlan 50 is configured and also in the Alcaterl core switch I have already doble check. Do I need to enable something in the IAP225 access point work as slaves?

 

Even, If I move the controller to another switch, everything works fine.

 

Thanks in advance,

 

MVP
Posts: 4,162
Registered: ‎07-20-2011

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Do you have the DHCP to provide IP addresses to the IAP configured on the switch or the Virtual Controller ?

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Hi,

 

When you configure a cluster what happens is,

1. User traffic will always NATed with the VC IP address and get in to the internet.

2. If a Client  is associated to a slave, slave has to send the traffic to VC then traffic will be NATed from the VC.

 

Here in your case I believe, the communication( Datapath traffic ) between VC and Slave is having issue hence I advice you to check the uplink (POE) switch configuration. test by enabling trunking on those access switches.

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Occasional Contributor I
Posts: 6
Registered: ‎05-26-2015

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

hello,


Thanks you very much for your quick response.

the port on access switch are already configured as trunk ports ( vlan 50
as 802.1q and vlan 1 as default port), show you a diagram how are connected.

[image: Imágenes integradas 3]



thanks in advance,
Occasional Contributor I
Posts: 6
Registered: ‎05-26-2015

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Hello,

 

the virtual controller is the one that provides IP DHCP and he does, but for I dont' know what reason clients that get connected through VC get internet acces, but clients that get connected through slave access point does not.

 

Thanks in advance,

Occasional Contributor I
Posts: 6
Registered: ‎05-26-2015

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Hello,

I also attach my VC configuration.

 

thanks in advance

MVP
Posts: 4,162
Registered: ‎07-20-2011

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Are these IAPs attached to a controller via VPN ?

 

I noticed you are using a routing profile and those are meant to be use when the IAPs are connected to a controller via IPSEC .

 

Not sure if that could be causing you any issues but just wanted to point that out.

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 6
Registered: ‎05-26-2015

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Thank you Victor,

 

I'm not using any VPN to attach AP to the controlles. AP's are and controller are in the same place.

 

Another thing I forgot to mention is that there is another SSID configured in this VC, but in this case the DHCP is given for an external server on Vlan 1 (172.20.0.0/23) and everything work fine with this SSID.

 

am I missing something or is there another way to configure this.

 

thanks in advance, 

 

Aruba Employee
Posts: 10
Registered: ‎02-14-2013

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

What is the IAP version ? Can you confirm if a 'local' DHCP pool has been configured on the IAP.

What is the output of 'show dhcp-allocation' and 'show dhcps' on the CLI ?

 

A local pool should somewhat look like this:

ip dhcp test
 server-type Local   <--- Missing
 server-vlan 50        <--- Missing
 subnet 10.10.50.0
 subnet-mask 255.255.255.128
 dns-server 4.2.2.2

Regards
Swathi (ACMX, CWDP, CWNA, CCNA)
[Hit Kudos if this post helps]
Occasional Contributor I
Posts: 6
Registered: ‎05-26-2015

Re: Local DHCP on Virtual controller IAP225 doesn't get Internet to users on IAP225 access point

Thanks Smantha,

 

here they are;

 

Controller Datacenter# show dhcp-allocation

---------------------/etc/dnsmasq.conf--------------------
listen-address=127.0.0.1
addn-hosts=/etc/ld_eth_hosts
addn-hosts=/etc/ld_ppp_hosts
dhcp-src=172.31.98.1
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-authoritative
filterwin2k
#magic-vlan
{
vlan-id=3333
dhcp-range=172.31.98.3,172.31.99.254,255.255.254.0,12h
dhcp-option=1,255.255.254.0
dhcp-option=3,172.31.98.1
dhcp-option=6,208.67.220.220
dhcp-option=54,172.31.98.1
}
#profile: invitados
{
vlan-id=50
dhcp-range=172.50.0.2,172.50.0.126,255.255.255.128,43200s
dhcp-option=1,255.255.255.128
dhcp-option=3,172.50.0.1
dhcp-option=6,208.67.220.220
}
---------------------/tmp/dnsmasq.leases------------------
1432779045 24:0a:11:47:cc:d3 172.50.0.73 50 android-f8cfc9416dfa9dc0 *
1432778021 44:80:eb:be:7c:d1 172.50.0.65 50 android-cfda257cd9399ea7 *

 

ip dhcp invitados
server-type Local
server-vlan 50
subnet 172.50.0.0
subnet-mask 255.255.255.128
dns-server 208.67.220.220

 

Rigth now I have to devices (cell phone and computer connected to VC a get internet), If I move to another room where another IAP225 are, a IP dhcp is assinged but can not get internet.

 

Regards,

Search Airheads
Showing results for 
Search instead for 
Did you mean: