06-16-2017 02:54 PM
I am trying to understand the DHCP scope Local L2 in Instant. I have built a lab which is made up of one IAP, one router and one firewall, as illustrated below:
The configuration of the IAP is as follow
When I connect my laptop to the WLAN Test, it gets an IP in the 172.16.2.0/24 subnet but it can't access the Internet, even I can't ping the gateway 10.10.10.1. What am I missing?
Solved! Go to Solution.
06-17-2017 01:21 AM
Hey, did the IAP actually accept this configuration? My thoughts are that your client has an IP in the 172.16.2.x range but the clients default gateway is 10.10.10.1 which I expect wouldn't work? In Local L2 mode, the DHCP is completed by the IAP but the gateway would be hosted by another device in the same subnet e.g a core switch for the client vlan.
Are the VLAN's defined on 10.10.10.1 as well?
If my post addresses your query, give kudos:)
06-18-2017 01:15 PM
Yes, you are right, although the IAP did accept the configuration. Then, you think if the segment between the IAP and the router is in the 172.16.2.0/24 subnet and the default gateway is 172.16.2.1 (the router interface) the scenario would work, don't you?
06-19-2017 10:53 AM
After changing the segment between the IAP and the router to subnet 172.16.2.0/24 and the default gateway to 172.16.2.1 (the router interface), the WLAN works. The only thing I don't understand is it works if the VLAN of the DHCP server is 1, but if the VLAN of the DHCP server is other than 1 (2, 3, ...) it doesn't work. The IAP is directly connected to the router interface. Do you know the reason?
06-20-2017 09:11 AM - edited 06-20-2017 09:14 AM
I think it is, because I have been able to test the DCHP Local and DHCP Local L3 with VLANs other than 1.
On the other hand, I wanted to exclude some addresses as show below
but I don't understant the red message. It seems you only can exclude the entire address range, which makes no sense. If a try to exclude the addresses separately like this
I test and the client is not able to obtain IP address, again it seems the Instant exclude the entire address range. And also I don't understand the help message. Do you know anything about this or why the client can't get an IP address when I exclude these two IP addresses?