topic Re: DHCP relay agent on 1941w in Wireless

DHCP relay agent on 1941w

leonard.otieno.ondeyo — Sun, 04 Jul 2021 07:11:57 GMT

I have a 1941W and an external DHCP server. Wireless clients should get their IPs the same way when they are wired. I have checked the documentation but no help. Someone share such a document or help on how it can be done.

Re: DHCP relay agent on 1941w

Stephen Rodriguez — Fri, 07 Jun 2013 11:22:31 GMT

You just need to out an ip helper address under the L3 interface that points to your DHCP server. If its not wiring please lost the config from the router as well as the AP

Steve

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

Abhishek Abhishek — Sat, 08 Jun 2013 19:41:30 GMT

Hello Leonard,

As per your query i can suggest you the following solution-

Please configure ip helper address to resolve this issue.To configure an IP helper address you’ll use the ip helper-address a.b.c.d in interface configuration mode on the interface that is connected to the broadcast domain in which you wish to provide DHCP IP addresses. For example, a VLAN interface or an Ethernet interface on a router connected to a Cisco switch or segregated by a layer 2 VLAN.

Command-

ip helper-address a.b.c.d

This command is executed in interface configuration mode to enable a Layer 3 interface to receive BOOTP DHCP Request and forward them to a specified DHCP server.

Hope this will help you.

Re: DHCP relay agent on 1941w

leonard.otieno.ondeyo — Tue, 11 Jun 2013 09:36:01 GMT

I can reach the dhcp server from 1941w. I have configured a trunk on the switch. i have configured the router as below:

interface GigabitEthernet0/0

description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

duplex auto

speed auto

no mop enabled

interface GigabitEthernet0/0.100

encapsulation dot1Q 100

ip address 10.58.194.2 255.255.255.224

ip helper-address 10.58.193.33

interface GigabitEthernet0/0.101

encapsulation dot1Q 101

ip address 10.58.194.66 255.255.255.224

ip helper-address 10.58.193.33

interface GigabitEthernet0/0.104

encapsulation dot1Q 104

ip address 10.58.193.2 255.255.255.192

ip helper-address 10.58.193.33

on the ap as below:

dot11 ssid LAFARGE-ADMIN

vlan 100

authentication open

authentication key-management wpa

guest-mode

mbssid guest-mode

wpa-psk ascii 0 l@farg34dm1n

information-element ssidl

username Cisco password 7 02250D480809

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

encryption vlan 1 mode ciphers aes-ccm tkip

encryption vlan 101 mode ciphers aes-ccm tkip

encryption vlan 100 mode ciphers aes-ccm tkip

ssid LAFARGE-ADMIN

antenna gain 0

mbssid

station-role root

interface Dot11Radio0.1

encapsulation dot1Q 1

no ip route-cache

interface Dot11Radio0.100

encapsulation dot1Q 100 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

We have this configured on the 4507 switch:

interface Vlan100

description finance vlan gateway

ip address 10.58.194.30 255.255.255.224 secondary

ip address 10.58.193.93 255.255.255.224

ip helper-address 10.58.193.33

no ip redirects

standby 2 ip 10.58.193.94

standby 2 timers 5 15

standby 2 preempt

interface Vlan101

description Admin Vlan Gateway

ip address 10.58.194.94 255.255.255.224 secondary

ip address 10.58.193.125 255.255.255.240

ip helper-address 10.58.193.33

no ip redirects

standby 2 ip 10.58.193.126

standby 2 timers 5 15

standby 2 preempt

interface Vlan102

description sales vlan gateway

ip address 10.58.193.109 255.255.255.240

ip helper-address 10.58.193.33

standby 2 ip 10.58.193.110

standby 2 timers 5 15

standby 2 preempt

interface Vlan103

description IT vlan gateway

ip address 10.58.193.141 255.255.255.240

ip helper-address 10.58.193.33

standby 2 ip 10.58.193.142

standby 2 timers 5 15

standby 2 preempt

interface Vlan104

description servers vlan gateway

ip address 10.58.193.61 255.255.255.192

ip helper-address 10.58.193.33

no ip redirects

standby 2 ip 10.58.193.62

standby 2 timers 5 15

standby 2 preempt

i am able to ping the dhcp server from the router and also this IPs for the respective vlans that i have assigned.

I will have multiple ssid for the different vlans on ap.
i have tried to assign myself an IP on the vlan 100 scope, ping failed.

Re: DHCP relay agent on 1941w

Scott Fella — Tue, 11 Jun 2013 10:50:25 GMT

Are the clients even associating? I would use WPA version 2 since your using AES. I would also remove information-element ssidl. When using WPA you would enable TKIP and WPA2 you use AES.

Sent from Cisco Technical Support iPhone App

DHCP relay agent on 1941w

leonard.otieno.ondeyo — Tue, 11 Jun 2013 12:02:03 GMT

my laptop was able to associate...as below

*Mar 1 17:00:52.175: %DOT11-6-ASSOC: Interface Dot11Radio0, Station ap 0022.fa2c.2f4e Associated KEY_MGMT[WPAv2 PSK]

*Mar 1 17:01:57.559: %DOT11-4-MAXRETRIES: Packet to client 0022.fa2c.2f4e reached max retries, removing the client

*Mar 1 17:01:57.559: %DOT11-6-DISASSOC: Interface Dot11Radio0, Deauthenticating Station 0022.fa2c.2f4e Reason: Previous authentication no longer valid

*Mar 1 17:01:57.563: %DOT11-4-MAXRETRIES: Packet to client 0022.fa2c.2f4e reached max retries, removing the client

Re: DHCP relay agent on 1941w

Scott Fella — Tue, 11 Jun 2013 12:04:28 GMT

Yeah but it fails after a minute.

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

Scott Fella — Tue, 11 Jun 2013 12:06:06 GMT

If you look, the log shows WPA2 but your SSID is only setup for WPA.

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

Scott Fella — Tue, 11 Jun 2013 12:08:51 GMT

Make the two changes I posted earlier and see if it helps.

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

leonard.otieno.ondeyo — Fri, 14 Jun 2013 08:16:34 GMT

I have made the changes but still no luck

on ap:

dot11 ssid ADMIN

vlan 100

authentication open

authentication key-management wpa version 2

guest-mode

mbssid guest-mode

wpa-psk ascii 0 l@farg34dm1n

username Cisco password 7 02250D480809

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

encryption vlan 1 mode ciphers aes-ccm

encryption vlan 100 mode ciphers aes-ccm

ssid ADMIN

antenna gain 0

mbssid

station-role root

interface Dot11Radio0.1

encapsulation dot1Q 1

no ip route-cache

interface Dot11Radio0.100

encapsulation dot1Q 100 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

Re: DHCP relay agent on 1941w

Scott Fella — Fri, 14 Jun 2013 09:03:34 GMT

Can you ssh or telnet from the wired side to your AP without having to session into the AP itself. So this is the config on the AP, but are you trunking and allowing the vlan from the router to the AP?

Sent from Cisco Technical Support iPhone App

DHCP relay agent on 1941w

leonard.otieno.ondeyo — Fri, 14 Jun 2013 09:17:20 GMT

i have done a simple test...i can ping the wlan-ap0 but i cant ping the bvi. This is when am connected via a lan cable

DHCP relay agent on 1941w

leonard.otieno.ondeyo — Fri, 14 Jun 2013 09:18:08 GMT

interface wlan-ap0

description Service module interface to manage the embedded AP

ip address 10.10.10.2 255.255.255.0

C:\Users\BT>ping 10.10.10.2

Pinging 10.10.10.2 with 32 bytes of data:

Reply from 10.10.10.2: bytes=32 time<1ms TTL=255

Ping statistics for 10.10.10.2:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Users\BT>ping 10.10.10.1

Pinging 10.10.10.1 with 32 bytes of data:

Request timed out.

DHCP relay agent on 1941w

leonard.otieno.ondeyo — Fri, 14 Jun 2013 09:19:32 GMT

interface BVI1

ip address 10.10.10.1 255.255.255.0

no ip route-cache

Re: DHCP relay agent on 1941w

Scott Fella — Fri, 14 Jun 2013 09:20:11 GMT

Can you post the while config of your ap.

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

Scott Fella — Fri, 14 Jun 2013 09:24:41 GMT

That interface is for your session. You need to configure the gigabit interface to the AP and that has to be a trunk with native vlan 100

interface Wlan-GigabitEthernet0/0
description CONNECTION_TO_AP
switchport trunk native vlan 100
switchport mode trunk
no ip address
spanning-tree portfast
!

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

leonard.otieno.ondeyo — Fri, 14 Jun 2013 09:25:01 GMT

hostname ap

enable secret 5 $1$/D4n$t7QvE9mj5J9yQ06.q6ZRK0

no aaa new-model

dot11 syslog

dot11 ssid TEST

vlan 1

authentication open

authentication key-management wpa version 2

guest-mode

mbssid guest-mode

wpa-psk ascii 0 fortest1

username Cisco password 7 02250D480809

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

encryption vlan 100 mode ciphers aes-ccm

encryption vlan 600 mode ciphers aes-ccm

encryption vlan 1 mode ciphers aes-ccm

ssid TEST

antenna gain 0

mbssid

station-role root

interface Dot11Radio0.1

encapsulation dot1Q 1

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.100

encapsulation dot1Q 100 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio0.101

encapsulation dot1Q 101

no ip route-cache

interface Dot11Radio0.600

encapsulation dot1Q 600

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio1

no ip address

no ip route-cache

shutdown

antenna gain 0

no dfs band block

channel dfs

station-role root

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface GigabitEthernet0

description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router

no ip address

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface BVI1

ip address 10.10.10.1 255.255.255.0

no ip route-cache

Re: DHCP relay agent on 1941w

Scott Fella — Fri, 14 Jun 2013 09:28:01 GMT

So the interface in your router should look like this

interface Wlan-GigabitEthernet0/0
description CONNECTION_TO_AP
switchport trunk native vlan 100
switchport mode trunk
switchport trunk allowed vlan 1.100, 600
no ip address
spanning-tree portfast
!

Sent from Cisco Technical Support iPhone App

Re: DHCP relay agent on 1941w

Scott Fella — Fri, 14 Jun 2013 09:37:07 GMT

Take a look at this link. Has a video on the initial setup. Might help

http://www.cisco.com/en/US/products/ps10538/products_configuration_example09186a0080becd3a.shtml

Sent from Cisco Technical Support iPhone App

DHCP relay agent on 1941w

leonard.otieno.ondeyo — Fri, 14 Jun 2013 10:59:14 GMT

still no luck

Thanks for the video..lets me check it out.

on the ap:

dot11 syslog

dot11 ssid TEST

vlan 600

authentication open

authentication key-management wpa version 2

guest-mode

mbssid guest-mode

wpa-psk ascii 0 fortest1

username Cisco password 7 02250D480809

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

encryption vlan 600 mode ciphers aes-ccm

ssid TEST

antenna gain 0

mbssid

station-role root

interface Dot11Radio0.1

encapsulation dot1Q 1

no ip route-cache

interface Dot11Radio0.100

encapsulation dot1Q 100

no ip route-cache

interface Dot11Radio0.101

encapsulation dot1Q 101

no ip route-cache

interface Dot11Radio0.600

encapsulation dot1Q 600 native

no ip route-cache

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface Dot11Radio1

no ip address

no ip route-cache

shutdown

antenna gain 0

no dfs band block

channel dfs

station-role root

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

bridge-group 1 spanning-disabled

interface GigabitEthernet0

description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router

no ip address

no ip route-cache

bridge-group 1

no bridge-group 1 source-learning

bridge-group 1 spanning-disabled

interface BVI1

ip address 10.60.60.10 255.255.255.0

no ip route-cache

on the router

interface Embedded-Service-Engine0/0

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

interface GigabitEthernet0/0

description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

duplex auto

speed auto

no mop enabled

interface GigabitEthernet0/0.100

encapsulation dot1Q 100

ip address 10.58.194.2 255.255.255.224

ip helper-address 10.58.193.33

interface GigabitEthernet0/0.101

encapsulation dot1Q 101

ip address 10.58.194.66 255.255.255.224

ip helper-address 10.58.193.33

interface GigabitEthernet0/0.104

encapsulation dot1Q 104

ip address 10.58.193.2 255.255.255.192

ip helper-address 10.58.193.33

interface GigabitEthernet0/0.600

encapsulation dot1Q 600

ip address 10.60.60.2 255.255.255.0

ip helper-address 10.60.60.1

interface wlan-ap0

description Service module interface to manage the embedded AP

ip unnumbered GigabitEthernet0/0.600

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

arp timeout 0

no mop enabled

no mop sysid

interface GigabitEthernet0/1

ip address dhcp

no ip redirects

no ip unreachables

no ip proxy-arp

ip flow ingress

duplex auto

speed auto

no mop enabled

interface Wlan-GigabitEthernet0/0

description CONNECTION_TO_AP

switchport mode trunk

no ip address

interface Vlan1

no ip add