Controllerless Networks

Hello guys,

Trying to figure out what is going on with my internet access. I have a virtual controller on a IAP225 and inside I configured a local DHCP on Vlan50 (172.50.0.0/25). when user try to access internet by IAP225 access point (have 8 IAP access point configure as slave) they can't, but from Controller IAP225 they can. In the Alcatel access switches the vlan 50 is configured and also in the Alcaterl core switch I have already doble check. Do I need to enable something in the IAP225 access point work as slaves?

 

Even, If I move the controller to another switch, everything works fine.

 

Thanks in advance,

 

Do you have the DHCP to provide IP addresses to the IAP configured on the switch or the Virtual Controller ?

Hello,

 

the virtual controller is the one that provides IP DHCP and he does, but for I dont' know what reason clients that get connected through VC get internet acces, but clients that get connected through slave access point does not.

 

Thanks in advance,

Hi,

 

When you configure a cluster what happens is,

1. User traffic will always NATed with the VC IP address and get in to the internet.

2. If a Client  is associated to a slave, slave has to send the traffic to VC then traffic will be NATed from the VC.

 

Here in your case I believe, the communication( Datapath traffic ) between VC and Slave is having issue hence I advice you to check the uplink (POE) switch configuration. test by enabling trunking on those access switches.

 

Please feel free for any further help on this.

hello,


Thanks you very much for your quick response.

the port on access switch are already configured as trunk ports ( vlan 50
as 802.1q and vlan 1 as default port), show you a diagram how are connected.

[image: Imágenes integradas 3]



thanks in advance,

Hello,

I also attach my VC configuration.

 

thanks in advance

Are these IAPs attached to a controller via VPN ?

 

I noticed you are using a routing profile and those are meant to be use when the IAPs are connected to a controller via IPSEC .

 

Not sure if that could be causing you any issues but just wanted to point that out.

Thank you Victor,

 

I'm not using any VPN to attach AP to the controlles. AP's are and controller are in the same place.

 

Another thing I forgot to mention is that there is another SSID configured in this VC, but in this case the DHCP is given for an external server on Vlan 1 (172.20.0.0/23) and everything work fine with this SSID.

 

am I missing something or is there another way to configure this.

 

thanks in advance, 

 

What is the IAP version ? Can you confirm if a 'local' DHCP pool has been configured on the IAP.

What is the output of 'show dhcp-allocation' and 'show dhcps' on the CLI ?

 

A local pool should somewhat look like this:

ip dhcp test
 server-type Local   <--- Missing
 server-vlan 50        <--- Missing
 subnet 10.10.50.0
 subnet-mask 255.255.255.128
 dns-server 4.2.2.2

Thanks Smantha,

 

here they are;

 

Controller Datacenter# show dhcp-allocation

---------------------/etc/dnsmasq.conf--------------------
listen-address=127.0.0.1
addn-hosts=/etc/ld_eth_hosts
addn-hosts=/etc/ld_ppp_hosts
dhcp-src=172.31.98.1
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-authoritative
filterwin2k
#magic-vlan
{
vlan-id=3333
dhcp-range=172.31.98.3,172.31.99.254,255.255.254.0,12h
dhcp-option=1,255.255.254.0
dhcp-option=3,172.31.98.1
dhcp-option=6,208.67.220.220
dhcp-option=54,172.31.98.1
}
#profile: invitados
{
vlan-id=50
dhcp-range=172.50.0.2,172.50.0.126,255.255.255.128,43200s
dhcp-option=1,255.255.255.128
dhcp-option=3,172.50.0.1
dhcp-option=6,208.67.220.220
}
---------------------/tmp/dnsmasq.leases------------------
1432779045 24:0a:11:47:cc:d3 172.50.0.73 50 android-f8cfc9416dfa9dc0 *
1432778021 44:80:eb:be:7c:d1 172.50.0.65 50 android-cfda257cd9399ea7 *

 

ip dhcp invitados
server-type Local
server-vlan 50
subnet 172.50.0.0
subnet-mask 255.255.255.128
dns-server 208.67.220.220

 

Rigth now I have to devices (cell phone and computer connected to VC a get internet), If I move to another room where another IAP225 are, a IP dhcp is assinged but can not get internet.

 

Regards,

From the config file, the IAP seems to have a VC VLAN configured.

 

name WCV-1-Master
virtual-controller-ip 172.20.0.72
virtual-controller-vlan 1 255.255.254.0 172.20.0.1  <-- This one
terminal-access
telnet-server

 

If the IAP's actual IP address (show ip interface brief) is in the same VLAN as the VC VLAN (VLAN 1 here), then it is recommended to not configure virtual-controller-vlan.

In your setup, if it is the same, can you try deleting the VC VLAN config and see if it makes any difference.