Wireless Access

We are having a heck of a time trying to get options passed to both Aruba APs and VoIP phones using ISC DHCP.

 

It appears that we can do one or the other, but not both at the same time.

 

I'm not a ISC DHCP expert, but our DHCP guru's are reaching the conclusion that it is not possible.

 

They tell me it has to do with the way Aruba wants to handle option 60 and 43. They claim Aruba is not adhering to standards.

 

 

In dhcpd.conf

#
# for VoIP phone options
#
option time-offset -21600;

#  class "vendor-classes" {
#     match option vendor-class-identifier;
#  }
option space MSUCClient;
option MSUCClient.UCIdentifier code 1 = string;
option MSUCClient.URLScheme code 2 = string;
option MSUCClient.WebServerFqdn code 3 = string;
option MSUCClient.WebServerPort code 4 = string;
option MSUCClient.CertProvRelPath code 5 = string;
option UCSipServer code 120 = text;

if substring (option vendor-class-identifier, 0, 12) = "MS-UC-Client"
{
#  option UCSipServer code 120 = text;
   option UCSipServer "ourlyncpooll.iowa.uiowa.edu";
  # Define sub-options for DHCP option 43
  #  subclass "vendor-classes" "MS-UC-Client" {
   vendor-option-space MSUCClient;
   option MSUCClient.UCIdentifier "MS-UC-Client";
   option MSUCClient.URLScheme "https";
   option MSUCClient.WebServerFqdn "ourlyncserver.iowa.uiowa.edu";
   option MSUCClient.WebServerPort "443";
   option MSUCClient.CertProvRelPath "/CertProv/CertProvisioningService.svc";
#  }
}

# End VoIP Phone stuff

#
# Aruba AP's
#

option arubaserverip code 43 = ip-address;

class "Aruba AP" {
  match if option vendor-class-identifier = "ArubaAP";
  option vendor-class-identifier "ArubaAP";
}

 include "/local/dhcpd/conf/ap-nh-test";

# End Aruba ap

Then in "/local/dhpd/conf/ap-nh-test":

 

host aruba-test-ap {
   hardware ethernet 00:0B:86:ED:4B:E8;
   fixed-address 128.255.97.199;
   option arubaserverip 172.30.97.10;
}

If you have gotten this to work with ISC DHCP and are willing to share your configuration I'd appreciate it.

 

Thanks.

-Neil

I found the solution and it is not pretty.

 

option Option43String code 43 = string;

class "vendor-class" {
  match option vendor-class-identifier;
}

# Campus AP's
subclass "vendor-class" "ArubaAP" {
  option vendor-class-identifier "ArubaAP";
  # Controller IP in hex
  option Option43String  ac:1e:61:0a;
}

# New AP's with Unified Image.
subclass "vendor-class" "ArubaInstantAP" {
  # Tell unified AP it is a Campus AP
  option vendor-class-identifier "ArubaAP";
  # Controller IP in hex
  option Option43String  ac:1e:61:0a;
}

# VoIP Phones (Microsoft Lync)
subclass "vendor-class" "MS-UC-Client" {
  option vendor-class-identfier "MS-UC-Client";
  # Hand code option 43 for VoIP phones See:
  # http://blog.schertz.name/2012/05/understanding-dhcp-option-43/
  opton Option43String  01:23:34:56:......34;
}

For some reason, that kind of horrid handling of option 43 is popular among lots of wireless vendors. It's also the reason I've always greatly preferred using DNS based controller location...

I found a much more elegant solution!

 

It uses the vendor-capsulated-optons keyword.

It means you just have to hand code the Controller IP!

 

 

 

.
.
.

#
# Define Options for VoIP Phones
#

option space MSUCClient;
option MSUCClient.UCIdentifier code 1 = string;
option MSUCClient.URLScheme code 2 = string;
option MSUCClient.WebServerFqdn code 3 = string;
option MSUCClient.WebServerPort code 4 = string;
option MSUCClient.CertProvRelPath code 5 = string;

option UCSipServer code 120 = text;

#
# Class
#
class “vendor-class” {
 match option “vendor-class-identifier”;
}

#
# MS Skype for Business Phones
#
subclass "vendor-class" "MS-UC-Client” {

 option vendor-class-identifier “MS-UC-Client”;

 option UCSipServer "iowalyncfepool.iowa.uiowa.edu”;

 vendor-option-space MSUCClient;
 option MSUCClient.UCIdentifier "MS-UC-Client";
 option MSUCClient.URLScheme "https";
 option MSUCClient.WebServerFqdn "iowalyncwebint1.iowa.uiowa.edu";
 option MSUCClient.WebServerPort "443";
 option MSUCClient.CertProvRelPath "/CertProv/CertProvisioningService.svc";
}

.
.
.

#
# Scope Definitions
#

# AP Net Scope
subnet 192.168.0.0 netmask 255.255.255.0 {
 authoritative;
 option routers 192.168.0.1;
 .
 .
 .

 range 192.169.0.10 192.168.0.250;

 # Options for Normal Campus AP
 subclass “vendor-class” “ArubaAP” {
   option vendor-class-identifier “ArubaAP”;
   # Controller IP in Hex
   option vendor-encapsulated-options ac:1e:61:0a;
 }

 # Options for “New” Unified AP
 subclass “vendor-class” “ArubaInstantAP” {
   # Tell Unified AP it is a Campus AP
   option vendor-class-identifier “ArubaAP”;
   # Controller IP in Hex
   option vendor-encapsulated-options ac:1e:61:0a;
 }

 # include DHCP for AP reservations here.
 .
 .
 .
}

Note: you may  not need to encode the IP address in hex.

 

option vendor-encapsulated-options "172.30.97.10";

Works as well.