IAP - Wired Clients getting guest "magic" VLAN IPs

[DLC_XZ1F06]

Checking to see if anyone else has had this issue.

Scenario:

APs, wireless clients, and wired clients are all on the same VLAN.

Some wired clients are receiving IP addresses from the VC assigned "magic" VLAN pool (172.31.98.0/23); however, should be receiving DHCP from standard DHCP server.

How can I prevent this from happening?

This would be a temporary fix, as I'm coming up with a new design to include best practices (IAP managment VLAN, wired clients VLAN, authenticated wireless clients VLAN, and guest wireless clients VLAN, other existing VLANs).

Can't filter DHCP at the uplink port (eth0) as clients authenticated would not be able to get an IP address from the LAN DHCP server.

[cjoseph]

The VLAN must be assigned to Network Assigned to avoid assigning addresses to the magic VLAN.