Controllerless Networks

Is it possible to configure a DHCP relay address on the instant. I would like users at small branch sites with IAPs to pick up an IP address from a local DHCP server. In addition there is a requirement to forward the DHCP messages to a centralised ClearPass for profiling. Is it possible to configure this on the Instant?.

Try this:

(Instant Access Point)(config)# ip dhcp <profile-name>
(Instant Access Point)(DHCP Profile <profile-name>)# server-type <centralized>
(Instant Access Point)(DHCP Profile <profile-name>)# server-vlan <vlan-ID>
(Instant Access Point)(DHCP Profile <profile-name>)# dhcp-relay
(Instant Access Point)(DHCP Profile <profile-name>)# dhcp-server <DHCP-relay-server>
(Instant Access Point)(DHCP Profile <profile-name>)# vlan-ip <DHCP IP address> mask <VLAN mask>
(Instant Access Point)(DHCP Profile <profile-name>)# end

Is the client's gateway the Virtual Controller or the upstream router in the LAN?

The client DG is a local address to the branch site probably the same device that issues the DHCP address. Clearpass at the core.

At the device that's the client's gateway, can you configure a helper address to Clearpass?

I have a VPN tunnel configured, will this send the relay down the VPN?. This is what I dont want to happen as the tunnel is only for guest traffic. The relay is needed for corporate BYOD profiling. I cannot set the relay on another device - this is the basis for the original question.

Sorry, the original question was can I configure a DHCP relay on the Instant AP?

In distributed L3 mode, yes. See the config I posted in post #2.

When I configure these centralised DHCP scopes, it looks like the traffic will go down the VPN, is this correct?

Still looking for a definite answer on this subject?