Controllerless Networks

Hi everyone,

New here and realitively new to wifi.  I have an environment that consists of IAP 225's and 115's.  I am on the most recent firmware(6.4.2.3-4.1.1.2_48114).  I am having an issue where it seems some clients will be assigned a different role than what exists for that particular SSID.  Sometimes they'll be assigned a role for a completely seperate SSID or one of the built-in roles such as wired-instant.  When this happens, depending on the role, will depend on their browsing/streaming experience.  Does that make sense?  I can try and elaborate further if needed.

Thanks everyone

Here's my pertinant config:

version 6.4.2.0-4.1.1
virtual-controller-country US
virtual-controller-key
name BELWIFI41
organization
virtual-controller-ip
virtual-controller-vlan 1374
terminal-access
ntp-server
clock timezone Pacific-Time -08 00
clock summer-time PDT recurring second sunday march 02:00 first sunday november 02:00
rf-band 5.0

arm
wide-bands 5ghz
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
scanning

rf dot11g-radio-profile
interference-immunity 4
csa-count 3

rf dot11a-radio-profile
interference-immunity 4
csa-count 3

syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless

wlan access-rule ncorpnet
index 0
rule any any match any any any permit

wlan access-rule default_wired_port_profile
index 1
rule any any match any any any permit

wlan access-rule wired-instant
index 2
rule any any match any any any permit
rule masterip 0.0.0.0 match tcp 80 80 permit
rule masterip 0.0.0.0 match tcp 4343 4343 permit
rule any any match udp 67 68 permit
rule any any match udp 53 53 permit

wlan access-rule fitnet
index 3
rule any any match udp 68 68 deny
rule any any match any any any permit
bandwidth-limit peruser downstream 4500
bandwidth-limit peruser upstream 4500

wlan access-rule ncorpnetnew
index 4
rule any any match any any any permit

wlan access-rule trackernet
index 5
rule any any match any any any permit

wlan ssid-profile fitnet
enable
index 1
type guest
essid fitnet
opmode opensystem
max-authentication-failures 0
vlan 129
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter arp
g-min-tx-rate 2
dmo-channel-utilization-threshold 90
local-probe-req-thresh 25
max-clients-threshold 255

wlan external-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"
auto-whitelist-disable
https

blacklist-time 3600
auth-failure-blacklist-time 3600

ids
wireless-containment none

wired-port-profile default_wired_port_profile
switchport-mode trunk
allowed-vlan all
native-vlan 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type employee
captive-portal disable
no dot1x
inactivity-timeout 1000

wired-port-profile wired-instant
switchport-mode access
allowed-vlan all
native-vlan guest
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poe
type guest
captive-portal disable
no dot1x
inactivity-timeout 1000

enet0-port-profile default_wired_port_profile

uplink
preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180

airgroup
disable

airgroupservice airplay
disable
description AirPlay

airgroupservice airprint
disable
description AirPrint

The issue is that you need to have a condition for which the IAP will assign different roles and its currently not defined on your configuration.