Controllerless Networks

 View Only
Expand all | Collapse all

Local DHCP Scope

This thread has been viewed 20 times
  • 1.  Local DHCP Scope

    Posted Feb 02, 2015 11:05 AM

    Hi all,

    I have created one SSID with "Client IP Assignment = Virtual Controller assigned" and "Client VLAN Configuration = Custom"; I have assigned the DHCP LOCAL Pool 101 dedicated on VLAN 101 (92.168.101/24).

    If a client connect to this SSID it doesn't obtain an IP address; it only works fine if I create the VLAN 101 on the switch and tag it on the interface where my IAP is connected.

     

    I would know if this is the normal behaviour or if normally the VLAN doesn't have to propagate on the LAN.

     

    The firmware version on my IAP is 6.4.2.3-4.1.1.2_48114

     

    Thanks,

    Massimo

     



  • 2.  RE: Local DHCP Scope

    Posted Feb 02, 2015 11:33 AM
    Try using network assign and use a static VLAN assignment of VLAN 101 and see if that works


  • 3.  RE: Local DHCP Scope

    Posted Feb 02, 2015 11:45 AM

    I have just tried your suggestion, but if i make this change and then watch again the configuration of my SSID, it is not changed: Client IP Assignment = Virtual Controller assigned" and "Client VLAN Configuration = Custom (POOL 101)".

    It seems like the IAP doesn't see any difference between the two configurations.



  • 4.  RE: Local DHCP Scope

    Posted Feb 02, 2015 11:51 AM
    It will do that after you apply the change.

    I tried it in my lab and it worked.

    Are you allowing DHCP in the access rules ?


  • 5.  RE: Local DHCP Scope

    Posted Feb 02, 2015 11:53 AM

    EDIT: You already stated the version of IAP

     

    I am using the same version

     

    2015-02-02 11_51_23-Instant.png

     

    2015-02-02 11_52_03-Instant.png

     

    2015-02-02 11_52_43-Instant.png



  • 6.  RE: Local DHCP Scope

    Posted Feb 02, 2015 12:00 PM

    Thanks Victor! Yes, this is my same configuration...... but my clients obtain a correct IP address only if I tag the VLAN101 on the switch interface. I tried this many times.

    My IAP is 103.

     

    My access rule is PERMIT ALL



  • 7.  RE: Local DHCP Scope

    Posted Feb 02, 2015 12:11 PM
    Interesting.

    You shouldn't have to add that VLAN to your wired profile since this VLAN will be handled internally by the IAP VC

    You may need to open a TAC case.


  • 8.  RE: Local DHCP Scope

    Posted Jul 28, 2015 05:02 AM

    Hello,

    I have same issue like Massimo.

    Local dhcp and virtual controller  managed IP assigment works after tagging wired port on switch. If you try to connect to access point that is not VC and you don't tag APs wired port it dosn't work.

    Without tagging port on switch if client connect to AP that is not VC can't find DHCP server in VLAN 101. Is it correct behaviour?? 

     

    Rafal



  • 9.  RE: Local DHCP Scope

    Posted Jul 29, 2015 04:45 PM
    Same thing here. Just starting to try and start up a group of Instant AP's (ideally want to use zones and VLANs etc) and unless I'm connecting to the AP that is elected as the VC the local DHCP doesn't work (can't obtain an IP). Do I really need to use an outside DHCP for this somehow. I want the SSID's to be on NAT'ed local VLAN's (actually I wish I could do VLAN pools like with the classic controller model) but apparently this doesn't work with Instant even though it sure seems like it is designed that way. I mean, if you are going to setup all that DHCP functionality shouldn't it work on any AP? So, what are we missing? Steve


  • 10.  RE: Local DHCP Scope

    Posted Jul 30, 2015 09:20 AM

    I spoke with one of colegue and he adviced to use "bulti in" dhcp settings that use magic vlan 3333

    IAP_DHCP.png

     

    With that configuration everyhing works fine without tagging port on switch. 

    Only limitation of that is that you can't use multiple scope for different SSID and different vlans.

    Rafal



  • 11.  RE: Local DHCP Scope

    Posted Jul 30, 2015 04:19 PM

    thanks although I was hoping to use multiple VLANs since the broadcast domain will get too big (I guess I'll rely on the broadcast mitigation stuff and see how it goes).

    Seems like a clear bug to me

    Steve



  • 12.  RE: Local DHCP Scope

    Posted Sep 08, 2015 12:41 PM

    i just did this with a local scope and it worked fine without tagging it on the switch side.

     

    if people have this issue, which instant OS version? which AP type?



  • 13.  RE: Local DHCP Scope

    Posted Sep 08, 2015 12:45 PM
    I'm using 205H AP's in Instant mode with version 6.4.3.0-4.2.0.0_49453 I've tried ever which way to get this to work and no matter what it only works from whichever AP has been elected the Virtual Controller. If I'm connected to any other AP in the group it doesn't work. Are you using just one AP to test (which would make it the VC automatically) or do you happen to be connected to the VC? Steve


  • 14.  RE: Local DHCP Scope

    Posted Sep 08, 2015 03:22 PM

    interesting, just one AP where i tried this and then it is of course the VC.



  • 15.  RE: Local DHCP Scope

    Posted Sep 09, 2015 11:40 PM
      |   view attached

    I can't tell if I have the same issue but I have three IAPs, the VC is a 215 and the other two are 205s. I can only get IP addresses from the VC, and it times out on all others. I've tried from multiple devices.

     

    In order to test I forced each WLAN into Zones to specific IAPs. I can only get connected to the VC (the IAP-215).

     

    I'm running 6.4.2.6-4.1.1.8_50989 on all three IAPs, and each WLAN has it's own VLAN assigned as well.

     

    DHCP_fail.jpg

    Attachment(s)

    txt
    instant.txt   4 KB 1 version


  • 16.  RE: Local DHCP Scope

    Posted Sep 09, 2015 11:43 PM
    Yep, sounds like exactly the same bug to me.
    Steve


  • 17.  RE: Local DHCP Scope

    Posted Sep 09, 2015 11:53 PM

    If anyone has a last-known-good firmware that seems to work that would be great, I'm going into production very soon and this is obviously a blocker if confirmed.



  • 18.  RE: Local DHCP Scope

    Posted Sep 10, 2015 02:05 AM

    What exactly are you trying to get to work?

     

    Do you want the IAP to provide dhcp and the IAP to nat the traffic so that no trunking is done?

    Is this a guest network or an internal network?

     



  • 19.  RE: Local DHCP Scope

    Posted Sep 10, 2015 01:13 PM
    yes, ideally (although I could live without NAT if necessary). I want the IAP's to provide DHCP (all the options are there to do just that and connect them to VLANs and zones etc so you would think ....) but I can set them up many different ways (mostly with no ACL's of any kind to start) and as long as I'm directly connected to the IAP that is the VC at that time all works beautifully. If I move to an IAP that isn't the VC then nothing (no DHCP traffic at all and if I give a static IP in the range still nothing routes anywhere). If I turn off the original VC so that the IAP I'm on becomes the VC (assuming just two IAP's) then voila, all starts to work (so it clearly has nothing to do with the VLAN's or zones or IP ranges or DHCP but is purely about VC or not VC). Steve


  • 20.  RE: Local DHCP Scope

    Posted Sep 10, 2015 06:18 PM

    Same here. My non-VC IAPs aren't giving out any DHCP addresses. Only the VC is. I would expect all the IAPs to work in harmony by default, especially when they are all setup similarly. The only difference I did was to force my beefiest IAP as the VC in the network. Below are my DHCP scope settings.

     

    dhcp_scopes.jpg



  • 21.  RE: Local DHCP Scope

    Posted Sep 10, 2015 06:20 PM
    Only a single ap (the vc) will give out iPhone addresses at a time.


  • 22.  RE: Local DHCP Scope

    Posted Sep 10, 2015 06:29 PM

    Thanks! So shouldn't the non-VC IAPs ping the VC for the DHCP then? Does that need to be configured, and not automatic?

     

    Thank you!



  • 23.  RE: Local DHCP Scope

    Posted Sep 10, 2015 08:24 PM

    Upgraded all three IAPs to 6.4.2.6-4.1.1.9_51442 and now I can't connect to any of the WLANs. I got lucky and connected once to a network on the VC but that was it. No DHCP from any of them now.



  • 24.  RE: Local DHCP Scope