Controllerless Networks

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.


The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:


------------------------------
Tobias
------------------------------

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Hi Leon,

VLAN 23 will need to be accessible (trunked/tagged) to all the Access Points in the cluster as the Virtual Controller (VC) acts as the DHCP server and gateway for clients in Local mode. It's likely that you are connecting to an AP that is not the VC and therefore not receiving an IP address if the VLAN is not tagged through appropriately to your local AP.

You could also use Local,L2 mode where an upstream switch or router is the gateway device for the subnet. 

Hopefully this solves your issue.
Original Message:
Sent: Jul 11, 2022 05:26 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:

in the client tap it shows only connecting, the clients says, connected but no internet (get no ip-adress):

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Original Message:
Sent: 7/11/2022 5:27:00 AM
From: Leon123
Subject: RE: Central managed IAP dhcp scope problem

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:

in the client tap it shows only connecting, the clients says, connected but no internet (get no ip-adress):

------------------------------
Tobias
------------------------------

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Hi,
at the moment in my lab there is only 1 IAP, the vlan 23 is tagged on the switchport, a wired Client doesn´t also get an IP-address on an untagged vlan 23 port.

@Ewan
​

------------------------------
Tobias
------------------------------

Original Message:
Sent: Jul 11, 2022 06:07 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,

 

Would you mind sending me the screenshot with the role please.

GroupàConfigàDevicesàSecurityàselect role.

 

Cheers,

Ewan.

 

Original Message:
Sent: 7/11/2022 5:27:00 AM
From: Leon123
Subject: RE: Central managed IAP dhcp scope problem

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:

in the client tap it shows only connecting, the clients says, connected but no internet (get no ip-adress):

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Hi Tobias,

it certainly looks like the problem in with DHCP.
Set the Client VLAN assignment to Internal VLAN instead of Custom and see if Clients get a IP address then - although it won't be on your desired VAN 23.
Original Message:
Sent: Jul 11, 2022 07:36 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi,
at the moment in my lab there is only 1 IAP, the vlan 23 is tagged on the switchport, a wired Client doesn´t also get an IP-address on an untagged vlan 23 port.

@Ewan

​

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 06:07 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,

 

Would you mind sending me the screenshot with the role please.

GroupàConfigàDevicesàSecurityàselect role.

 

Cheers,

Ewan.

 

Original Message:
Sent: 7/11/2022 5:27:00 AM
From: Leon123
Subject: RE: Central managed IAP dhcp scope problem

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:

in the client tap it shows only connecting, the clients says, connected but no internet (get no ip-adress):

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Hi Ewan,

yes, this works, but I need more than one dhcp scope on the instant ap.
internal vlan is desired vor guest network.
VLAN23 is for special clients.

------------------------------
Tobias
------------------------------

Original Message:
Sent: Jul 11, 2022 09:14 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

Hi Tobias,

it certainly looks like the problem in with DHCP.
Set the Client VLAN assignment to Internal VLAN instead of Custom and see if Clients get a IP address then - although it won't be on your desired VAN 23.
Original Message:
Sent: Jul 11, 2022 07:36 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi,
at the moment in my lab there is only 1 IAP, the vlan 23 is tagged on the switchport, a wired Client doesn´t also get an IP-address on an untagged vlan 23 port.

@Ewan

​

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 06:07 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,

 

Would you mind sending me the screenshot with the role please.

GroupàConfigàDevicesàSecurityàselect role.

 

Cheers,

Ewan.

 

Original Message:
Sent: 7/11/2022 5:27:00 AM
From: Leon123
Subject: RE: Central managed IAP dhcp scope problem

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:

in the client tap it shows only connecting, the clients says, connected but no internet (get no ip-adress):

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------

Hi Tobias,

in that case you will PROBABLY need to drop the traffic onto a different VLAN
Regards,
 Ewan.,
Original Message:
Sent: Jul 11, 2022 09:19 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi Ewan,

yes, this works, but I need more than one dhcp scope on the instant ap.
internal vlan is desired vor guest network.
VLAN23 is for special clients.

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 09:14 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

Hi Tobias,

it certainly looks like the problem in with DHCP.
Set the Client VLAN assignment to Internal VLAN instead of Custom and see if Clients get a IP address then - although it won't be on your desired VAN 23.
Original Message:
Sent: Jul 11, 2022 07:36 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi,
at the moment in my lab there is only 1 IAP, the vlan 23 is tagged on the switchport, a wired Client doesn´t also get an IP-address on an untagged vlan 23 port.

@Ewan

​

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 06:07 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,

 

Would you mind sending me the screenshot with the role please.

GroupàConfigàDevicesàSecurityàselect role.

 

Cheers,

Ewan.

 

Original Message:
Sent: 7/11/2022 5:27:00 AM
From: Leon123
Subject: RE: Central managed IAP dhcp scope problem

Hi Ewan,

here are the detailed ssid informations:

the ssid is with PSK, the network profile is unrestricted:

in the client tap it shows only connecting, the clients says, connected but no internet (get no ip-adress):

------------------------------
Tobias

Original Message:
Sent: Jul 11, 2022 03:47 AM
From: Ewan McCabe
Subject: Central managed IAP dhcp scope problem

HI Tobias,
I can only see VLAN 23 info on the screen shots.

What type of SSID is it ?
  Is it PSK/Dot1X  or web ?
With Web the client will get an IP address regardless of whether they have authenticated, with PSK or 802.1x Private/Public, the device will only get an IP address after they successfully authenticate.
What Role are your clients getting ?
Regards,
 Ewan.

Original Message:
Sent: Jul 08, 2022 05:52 AM
From: Tobias Gabriel
Subject: Central managed IAP dhcp scope problem

Hi community,

we have an IAP515 cluster running central managed. For the guest-ssid we have selected assigned Instant AP and Internal VLAN, the guest clients get the VLAN 3333 on the Instant and get the IP address.
We would like to configure a second SSID with the instant as dhcp, if we create a new scope under System, dhcp local scpore, and then select it for the ssid under assigned ap and costum, no client gets an IP address from the instant.

The vlan exists on the switch.
Does anyone have any idea what I am doing wrong?


------------------------------
Tobias
------------------------------