Wireless Access

Reply
Contributor I
Posts: 44
Registered: ‎10-16-2012

Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

I have vlans established on all switches in the path from Layer 3 building entry point to the WiFi controller.

I can ping & traceroute from the controller to the DHCP at the central office.

Clients get IP in vlan 1 instead of the range assigned to the virtual AP via the appropriate vlan.

 

Relevant config excerpts attached.

 

Has to be something simple I am missing and would appreciate another set of eyes to point me in the right direction. 

 

Guru Elite
Posts: 21,252
Registered: ‎03-29-2007

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

use the command below to find out:

 

show aaa debug vlan user mac <mac address of user>

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Hi friend,

 

Let me understand couple of points here,

 

1. Is your AP connected over trunklink ?

2. Is your SSID on Tunnel mode or Bridge mode ?

3. If it is on the tunnel mode what is the gateway for your clients Controller or any other ? and check whether IP helper address is configured or not.

 

Please clarify above points and feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Contributor I
Posts: 44
Registered: ‎10-16-2012

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

APs are not trunked, just the controller port to switch.

SSID are all tunneled

Gateway set on each vlan (see attached 'doc' file).

ip helper is on layer 3 switch

Clients do get an IP in the same range as the APs, but trying to segment them by SSID to different vlans so they are easier to manage in DHCP.

BYOD & 1:1 greatly increased devices.

 

To get a client MAC I believe I'll need to go to that school. I don't see it in the controller. Am I overlooking where to find it?

 

 

Guru Elite
Posts: 21,252
Registered: ‎03-29-2007

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

To find out what is going wrong with your client(s), you need a mac address so that you can start debugging to see what happens to that client.  yes, you will need a mac address from a test device.

 

You probably need someone to go over your configuration to make sure you have everything in place.  If this is critical, I would open up a case with support so that they can get you straightened out.

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 44
Registered: ‎10-16-2012

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Would if I could. Alas, a poor school district with a one person network staff and no funds for training or support contracts. Forum has been a blessing in the past for that reason. I really appreciate the effort you all put into it.

 

I have compared two 3400's side by side. (same code version) I find nothing different so why one works and the other doesn't remains a mystery at this. There has to be something...

 

I'll dig into it more next week.

 

Have a wonderful weekend!

 

MVP
Posts: 1,414
Registered: ‎11-30-2011

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

with something like a show user-table you already get a whole list of client MAC addresses. or did you mean with going to the school you don't have remote access to the controller?

 

the reason can be several things, do you actual put you clients in the different VLAN? if you don't it will use the default controller VLAN, which might be 1.

 

can you post config snippits? virtual ap config would be the first useful one. together with IP and VLAN config.

Contributor I
Posts: 44
Registered: ‎10-16-2012

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

301 = "Fast"

302 = "S2"

303 = "MSDPT" (open)

 

Excerpts:

----------------------------

controller-ip vlan 1
interface mgmt
shutdown
!

--------------------------

vlan 301
vlan 302
vlan 303

-------------------------------------

interface gigabitethernet 1/0
description "GE1/0"
trusted
trusted vlan 1-4094
switchport mode trunk
spanning-tree portfast
!

---------------------------------

interface vlan 1
ip address 10.44.1.60 255.255.0.0
!

ip default-gateway 10.44.1.1
uplink disable

----------------------------------

wlan virtual-ap "default"
no vap-enable
!
wlan virtual-ap "MSDPT-vap_prof"
aaa-profile "MSDPT-aaa_prof"
ssid-profile "MSDPT-ssid_prof"
vlan 303
ha-disc-onassoc
vlan-mobility
broadcast-filter all
band-steering
!
wlan virtual-ap "MSDPT_Fast-vap_prof"
aaa-profile "MSDPT_Fast-aaa_prof"
ssid-profile "MSDPT_Fast-ssid_prof"
vlan 1
ha-disc-onassoc
broadcast-filter all
band-steering
!
wlan virtual-ap "MSDPT_S2-vap_prof"
allowed-band g
aaa-profile "MSDPT_S2-aaa_prof"
ssid-profile "MSDPT_S2-ssid_prof"
vlan 1
broadcast-filter all
!
ap provisioning-profile "default"
!
ap spectrum local-override
!
ap-group "default"
virtual-ap "MSDPT_S2-vap_prof"
virtual-ap "MSDPT_Fast-vap_prof"
virtual-ap "MSDPT-vap_prof"
!

Guru Elite
Posts: 21,252
Registered: ‎03-29-2007

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

rmiddleton,

 

Please open a case with TAC.  There are quite a few other things, like server derivation rules and radius attributes that are not included in your output, but can affect the VLAN that users are placed into.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Contributor I
Posts: 44
Registered: ‎10-16-2012

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

(DM-Controller) #show aaa debug
^
% Invalid input detected at '^' marker.

 

-----------------------

(DM-Controller) #show aaa ?
accounting Show accounting configuration
authentication Authentication methods
authentication-server Authentication Servers
bandwidth-contracts Show bandwidth contracts
derivation-rules Show role/vlan derivation rules
device-id-cache Device ID Cache
dns-query-interval DNS query interval
fqdn-server-names Auth Server FQDN names
main-profile Show summary of all AAA profiles
password-policy Password policy for locally configured management
users
profile Show an AAA Profile
pubcookie-authenticat.. Show Pubcookie authentication Configuration
radius-attributes Show RADIUS attributes
rfc-3576-server RFC 3576 server
server-group Show a Server Group
state Show internal state of authentication module
tacacs-accounting Show TACACS accounting configuration
timers Show timers
web Show web server configuration
xml-api External XML API server

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: