11-07-2013 04:11 PM
Another thing you can do is use Local, L3 config in the More--> DHCP server screen. This will allow the VC to hand out IP addresses on that VLAN ID configured here LOCALLY and not have to do the VC/NAT type scenario as seen in the Virtual Controller Assigned network option.
So...when you create a DHCP scope and choose Local, L3...you specify a VLAN ID. That VLAN id is then matched in the SSID VLAN settings.
These settings are more often than not associated with our Instant + VPN solution however, I believe this MIGHT work without a VPN tunnel up and running as the VC acts as the DHCP server AND default gateway for this subnet.
From the user guide -
OnselectingLocal,theDHCPserverforlocalbranchnetworkisusedfor keeping the scope of the subnet local to the IAP.
Consulting Systems Engineer - ACCX, ACDX, ACMX
If you found my post helpful, please give kudos
11-08-2013 01:19 PM
Thanks for the link. This explains a lot.
So I have a unique serrano. I have a client that I just deployed 4 IAP's. This client does not use DHCP, everything inside the building has a static address. I statically assigned all AP's and VC with an address of 192.168.1.x and created two SSID's. The "Employee SSID" is configured for the VC to had out DHCP, no restrictions. Everything works great on this SSID, I can hit local resources and speeds are great. I created another SSID "Guest" again VC handing out DHCP, and the following rules.
1. Allow DHCP to all dest
2. Allow DNS to 192.168.1.x
3. Allow Http to all dest
4. Allow Https to all dest
5. Deny any to all dest
When connected to this Guest SSID I notice that the speeds are definitely slower. I am not sure what I misconfigured or if this is even correct.