Wireless Access

Reply
Occasional Contributor II

IP addresses that are not in DHCP scope being assigned to wireless clients

Hello,

I have a number of IP addresses that are not in any assigned DHCP scope in my network

These addresses are assigned to wireless clients that are 802.1x authenticated and assigned

the proper role base.  These clients are attached to different AP's throughout the campus.  The only common denominator is that they are all Android clients.  The range of IP addresses are all over.  Example   50.x.x.x   51.x.x.x  30.x.x.x 100.x.x.x

 

Again none of these IP ranges are assigned by the controller or our Campus DHCP server.

 

Any ideas?

 

Thanks,

 

-James-

Guru Elite

Re: IP addresses that are not in DHCP scope being assigned to wireless clients

Try turning on "Enforce DHCP" in your AAA profile.  Alternatively, you can turn on "aaa user fast-age"  https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-286



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: IP addresses that are not in DHCP scope being assigned to wireless clients

Thanks Joseph,

 

By turning that on will it allow addresses to be assigned by the DHCP server, which is not the controller (we do not use the controller for DHCP)

 

Do you have any idea why this is happening to some not all of my Android clients?

 

Thanks,

Guru Elite

Re: IP addresses that are not in DHCP scope being assigned to wireless clients

- It will ONLY allow DHCP addresses that are seen being given out by your DHCP server (enforce dhcp)

- WAN address leakage happens on devices that are connected on 3g/4g.  It is fairly common. You might even see it on devices that have Virtual Machines installed.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: IP addresses that are not in DHCP scope being assigned to wireless clients

Hello,

 

    I have checked on my controller under the AAA and the option "Enforce DHCP" has already been enabled but I am also seeing IP addresss that are not on part of the DHCP scope.

 

Thanks,

Rick

Guru Elite

Re: IP addresses that are not in DHCP scope being assigned to wireless clients


RickS82 wrote:

Hello,

 

    I have checked on my controller under the AAA and the option "Enforce DHCP" has already been enabled but I am also seeing IP addresss that are not on part of the DHCP scope.

 

Thanks,

Rick


RickS82,

 

You might want to check with support to make sure you configured the correct AAA profile.  If you have, it could be a bug.  Open a TAC case to see.

 

You can type "show user-table verbose" to see what AAA profile corresponds to your clients.

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: