Wireless Access

I've created a new WLAN and get the VLAN does not exist error message but can't find why I'm getting the error message and I presume is causing the SSID not to be broadcast.

Below is the the error I'm seeing from the CLI.

Virtual AP profile List
-----------------------
Name           References  Profile Status
----           ----------  --------------
default        1
VAP-DWLAN      3
VAP-MWLAN      2
VAP-PWLAN      2
VAP-WIFISpark  1           Invalid: VLAN 66 does not exist

Jan 17 09:39:42  stm[1814]: <305004> <ERRS> |stm|  AP PH09_9A_AP3: wlan virtual-ap "VAP-WIFISpark" is invalid.

 ip radius source-interface vlan 7
!

controller-ip vlan 7
interface mgmt
    dhcp

 

vlan 7 "NETWORK_MANAGEMENT"
vlan 66 "WIFISPARK"
vlan 202 "PWLAN"
vlan 203 "MWLAN"
vlan 250 "DATA"


interface gigabitethernet  0/0
    description "GE0/0"
                                         
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    lacp group 0 mode active

interface gigabitethernet  0/1
    description "GE0/1"
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,202-203,250
    lacp group 0 mode active

interface gigabitethernet  0/2
    description "GE0/2"
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,202-203,250
    lacp group 0 mode active

interface gigabitethernet  0/3
    description "GE0/3"
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,202-203,250
    lacp group 0 mode active

interface port-channel 0
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,66,202-203,250

interface vlan 7
    ip address 10.170.38.20 255.255.255.0

interface vlan 1

interface vlan 250
    ip address 10.170.28.2 255.255.252.0
!

interface vlan 202
    ip address 10.170.32.2 255.255.255.0

interface vlan 66
    ip address 172.30.4.5 255.255.252.0
    ip helper-address 172.30.4.1
    description "WIFISPARK"

ip default-gateway 10.170.38.1
uplink disable

aaa authentication mac "default"
!
aaa authentication dot1x "default"
!
aaa authentication dot1x "DOT1X-PSK"
!
aaa authentication dot1x "DOT1X-RADIUS"
   termination eap-type eap-peap
   termination inner-eap-type eap-mschapv2


ap system-profile "APSP-PILGRIM"
   lms-ip 10.170.38.20
   bkup-lms-ip 10.169.231.131
   lms-preemption


wlan ssid-profile "SSID-WIFISpark"
   essid "WIFISPARK"

wlan virtual-ap "VAP-WIFISpark"
   aaa-profile "NoAuthAAAProfile"
   ssid-profile "SSID-WIFISpark"
   vlan 66

ap-group "APG-PILGRIM"
   virtual-ap "VAP-WIFISpark"
   ap-system-profile "APSP-PILGRIM"

Any help would be much appreciated.

Thanks

Jon

Remove the ip interface for vlan 66

Remove the VLAN66

Recreate Vlan 66

Recreate the ip interface for VLAN66

See if that works.

I've done as you suggested and still get the VLAN does not exist.

Something else I have tried is changing the VLAN that we use for management and it worked fine the SSID started being broadcast on all our AP's so its something to do with the way VLAN 66 is configured but I can't see anything that's wrong with the config.

interface gigabitethernet  0/1
    description "GE0/1"
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,202-203,250
    lacp group 0 mode active

interface gigabitethernet  0/2
    description "GE0/2"
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,202-203,250
    lacp group 0 mode active

interface gigabitethernet  0/3
    description "GE0/3"
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,202-203,250
    lacp group 0 mode active

interface port-channel 0
    trusted
    trusted vlan 1-4094
    switchport mode trunk
    switchport trunk allowed vlan 7,66,202-203,250

Take a look at the lines outlined above.  VLAN 66 is not part of the trunk allowed VLANs on the 3 physical ports, although it is allowed on the port-channel.  Add VLAN66 and see if that works.  Also confirmed that VLAN 66 is being trunked from the upstream switch.

-Mike

VLAN 66 is defiantely working up and downstream of the LAN as I can ping both way.

I did try adding the VLAN to the individual interfaces but it errors saying its in a trunk, the only way to do it would be to remove the interfaces from the trunk and make the change and then re-add.

I'll try it this afternoon.

Thanks

Try changing to Virtual AP vlan to something else, then back to vlan 66.

I've already tried that, changed it to VLAN 7 and it worked fine but switching back to vlan 66 didn't make any difference.

Please open a support case, then.

Wanted to share my experience with something very similar.

I had an AP group with 2 VAPs, each VAP had 1 SSID profile with a different VLAN

the 2nd VAP wouldn't broadcast my SSID. Kept saying "VLAN165 does not exist"

After reading this thread, I did the following.

1. Removed interface vlan 165

2. removed vlan 165

3. re-created both, did not work.

4. removed both, created vlan 199, assigned same IP range as vlan 165, WORKED.

5. removed vlan 199

6, re-added vlan 165, WORKED.

Pulling my hair out for this.

VLAN 165 existed the entire time and "show profile-errors" displayed nothing.

I've removed the trunk allowed off all the interfaces and I still get VLAN 66 doesn't exist.