Wireless Access

Reply
Occasional Contributor I

RAP as SOHO VPN Gateway

 

Hi community,

 

i want to use a RAP as as small SOHO VPN Gateway.

 

RAP is setup with wired-AP set to split-tunnel. 

 

In case of connection-loss to the Controller the RAP can act as DHCP-Server and Router so the clients can continue to work locally and can get access to the internet.

 

This works fine, but i want to finetune:

If the failover-mode comes up the network range changes, all clients (Small Office, so we have just 6 Clients) must renew their IP-Adresses.

 

If one single Client is connected directly with copper to RAP it gets an down/up event on the network link and does the DHCP-renew. But we have 6 clients - so they are behind a small switch and they are keeping their old config (DHCP Lease is still valid for hours...).

 

So my Idea was to use the same IP network-range with 192.168.100.0/24 in both modes,  with 192.168.100.1 as Gateway, configured on the WLAN-Controller AND ALSO configured as  DHCP-Server-IP and Default-GW on the RAP for backup mode. rap-dhcp-server-vlan is set to VLAN 999, so this differs from the normal VLAN.

 

BUT: This does not seem to work. 

 

The rap-dhcp-server-id seems to conflict if the same IP is configured on Mainoffice-side at any time.

Using the same network is ok, but rap-dhcp-server-id and rap-dhcp-default-router must be set to a non-conflicting IP, which is bad, because the clients keep sending  Traffic to the not longer existant default-gateway as long as they do a dhcp-renew (which can be a very long period).


Any Ideas? bug or feature? Any workaround possible?

 

Config Excerpts:

 

interface vlan 100
ip address 192.168.100.1 255.255.255.0
!


ap wired-ap-profile "RAP-Wire-Test1"
wired-ap-enable
forward-mode split-tunnel
switchport access vlan 100
!

 

rap-dap system-profile "RAP-Folketest"

rap-dhcp-server-vlan 999
rap-dhcp-server-id 192.168.100.1
rap-dhcp-default-router 192.168.100.1
rap-dhcp-dns-server 8.8.8.8
rap-dhcp-pool-start 192.168.100.100
rap-dhcp-lease 3

!

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: