Controllerless Networks

Hi!

New airhead here.

I've set up an IAP-225 as a standalone AP with wifi-uplink. 

This works fine, it connects and all. But when i try to connect clients to it, they won't get any IP! Is this by design? I have a remote DHCP server which i wanted to use, but i think i might need to add one in the AP instead? And how would i setup this and get my clients to communicate with the rest of the network?

So i have a router---wifiap(netgear with dhcp) *** iap225 *** clients

***= wireless.

Thanks!

What is the client VLAN configuration within your Virtual Controller? Is this controller assigned (e.g hidden behind the IAP) or static and tagging the VLANs accordingly? Does the router---wifiap(netgear with dhcp)  support VLANs?

Thanks for getting back to me!

client VLAN configuration isjust default meaning i haven't set anything up. 

I guess this means it's hidden behind the AP? What i think is weird is hat it works perfectly fine with ethernet uplink but not wifi. However the docs say that i need to setup a dhcp server on the ap. Is this correct?

Edit: It seems wifi uplink is stuck at probing. And eventually the AP drops the connection (both leds goes off on 2.4/5ghz)

Sounds like the IAP uplink is the issue. Do you see the IAP as a client? What is the WiFi uplink priority configured within the IAP? Is it at the top?

Well here is my config, if you spot anything wrong please correct me

Anything else i should look out for?

version 8.6.0.0-8.6.0
virtual-controller-country US
virtual-controller-key #######
name Aruba-225
terminal-access
clock timezone none 00 00
rf-band all

allow-new-aps

allowed-ap 18:64:72:cc:####



arm
 wide-bands 5ghz
 80mhz-support
 min-tx-power 9
 max-tx-power 127
 band-steering-mode prefer-5ghz
 air-time-fairness-mode default-access
 channel-quality-aware-arm-disable
 client-aware
 scanning

rf dot11g-radio-profile
 max-distance 0
 max-tx-power 9
 min-tx-power 6
 disable-arm-wids-functions off
 free-channel-index 40

rf dot11a-radio-profile
 max-distance 0
 max-tx-power 18
 min-tx-power 12
 disable-arm-wids-functions off

ip dhcp pool
 subnet 192.168.2.0
 subnet-mask 255.255.255.0
 dns-server 192.168.1.1
 domain-name ArubaDHCP
 lease-time 2880


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 
















hash-mgmt-password
hash-mgmt-user admin password hash 103310ea020c8c9c67e1b85a70002d1f4b7b7e99e97eb4cd9340c37c1de#####91



wlan access-rule default_wired_port_profile
 index 0
 rule any any match any any any permit

wlan access-rule wired-SetMeUp
 index 1
 rule masterip 0.0.0.0 match tcp 80 80 permit
 rule masterip 0.0.0.0 match tcp 4343 4343 permit
 rule any any match udp 67 68 permit
 rule any any match udp 53 53 permit

wlan access-rule Aruba
 index 2
 rule any any match any any any permit

wlan ssid-profile Aruba
 enable
 index 0
 type employee
 essid Aruba
 wpa-passphrase 8aa7c0f52ee9dedd89d875f18c#####fa25d2189
 opmode wpa2-psk-aes
 max-authentication-failures 0
 rf-band all
 captive-portal disable
 dtim-period 1
 broadcast-filter arp
 dmo-channel-utilization-threshold 90
 local-probe-req-thresh 0
 max-clients-threshold 64

auth-survivability cache-time-out 24



wlan external-captive-portal
 server localhost
 port 80
 url "/"
 auth-text "Authenticated"
 auto-whitelist-disable
 https


blacklist-time 3600
auth-failure-blacklist-time 3600


ids
 wireless-containment none


wired-port-profile wired-SetMeUp
 switchport-mode access
 allowed-vlan all
 native-vlan guest
 no shutdown
 access-rule-name wired-SetMeUp
 speed auto
 duplex auto
 no poe
 type guest
 captive-portal disable
 no dot1x

wired-port-profile default_wired_port_profile
 switchport-mode trunk
 allowed-vlan all
 native-vlan 1
 shutdown
 access-rule-name default_wired_port_profile
 speed auto
 duplex full
 no poe
 type employee
 captive-portal disable
 no dot1x


enet0-port-profile default_wired_port_profile

wlan sta-profile
 essid NETGEAR16
 cipher-suite wpa2-ccmp-psk
 wpa-passphrase f8077c5eaa4eb1db5517####789e134ce8b768cfca2cb
 uplink-band dot11g

uplink
 preemption
 enforce wifi
 failover-internet-pkt-lost-cnt 10
 failover-internet-pkt-send-freq 30
 failover-vpn-timeout 180
 uplink-priority ethernet 9
 uplink-priority wifi 8
 uplink-priority cellular 10



airgroup
 disable

airgroupservice airplay
 disable
 description AirPlay

airgroupservice airprint
 disable
 description AirPrint





cluster-security
 allow-low-assurance-devices

I cannot see the ap as a client, should I?

Thanks!