topic Re: Wifi Connected no internet access in Wireless

Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 14:44:07 GMT

Hi i have a problem that some of the users connected to wifi but no internet access

when i checked on policy manager state it stuck on DHCP_REQD

the wlc connected to core switch on trunk port where core switch act as dhcp server, the management wlc and access point using vlan 1, and AP connected to switch are using mode access only

the dhcp using /22 and lease time for 1 day

wlc using 8.5.140

here i attached debug client

need your advice

thank you

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 14:58:45 GMT

Can you share the 'show run' of the switch?

As per the logs, it seems to that all the process went correctly but the client did not received an IP address. The WLC does not logs the reason but I believe the core did not relivered the IP address.

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 15:33:22 GMT

Hello

here i attached show run on switch

Re: Wifi Connected no internet access

Mark Elsen — Mon, 06 Jun 2022 15:35:34 GMT

- This analysis seems to be confirmed with : https://cway.cisco.com/tools/WirelessDebugAnalyzer/ , when processing tshoot.txt (second mac address selected) : - it seems no ip address can get 'delivered'

Show Time

Show Task

Show Translated

Show Original

Show Prior First Connection

Show All

TimeTaskTranslated

Jun 06 16:48:37.383	*apfMsConnTask_1	Client roamed to AP/BSSID BSSID a4:b2:39:11:af:8f AP LT25-AP05
Jun 06 16:48:37.384	*apfMsConnTask_1	The WLC/AP has found from client association request Information Element that claims PMKID Caching support
Jun 06 16:48:37.384	*apfMsConnTask_1	The Reassociation Request from the client comes with 0 PMKID
Jun 06 16:48:37.384	*apfMsConnTask_1	Client is entering the 802.1x or PSK Authentication state
Jun 06 16:48:37.384	*apfMsConnTask_1	Client has successfully cleared AP association phase
Jun 06 16:48:37.384	*apfMsConnTask_1	Client is entering PSK Dot1x or WEP authentication phase
Jun 06 16:48:37.384	*apfMsConnTask_1	WLC/AP is sending an Association Response to the client with status code 0 = Successful association
Jun 06 16:48:37.394	*Dot1x_NW_MsgTask_5	4-Way PTK Handshake, Sending M1
Jun 06 16:48:37.397	*Dot1x_NW_MsgTask_5	4-Way PTK Handshake, Received M2
Jun 06 16:48:37.397	*Dot1x_NW_MsgTask_5	4-Way PTK Handshake, Sending M3
Jun 06 16:48:37.400	*Dot1x_NW_MsgTask_5	4-Way PTK Handshake, Received M4
Jun 06 16:48:37.400	*Dot1x_NW_MsgTask_5	Client has completed PSK Dot1x or WEP authentication phase
Jun 06 16:48:37.400	*Dot1x_NW_MsgTask_5	Client has entered DHCP Required state
Jun 06 16:48:37.404	*DHCP Socket Task	Received DHCP request from client
Jun 06 16:48:41.162	*DHCP Socket Task	Received DHCP request from client
Jun 06 16:48:44.388	*DHCP Socket Task	Received DHCP request from client
Jun 06 16:48:52.735	*DHCP Socket Task	Received DHCP request from client
Jun 06 16:49:08.740	*DHCP Socket Task	Received DHCP request from client

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 15:40:56 GMT

Sorry man, I was reffering to the core switch, where the DHCP scope is configure? Is it possible?

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 15:46:13 GMT

on core dhcp configure just like this

ip dhcp pool WIFI-STAFF
network 172.1.32.0 255.255.252.0
default-router 172.1.32.1
dns-server 172.28.201.234 172.28.101.234

interface Vlan32
description "WIFI-STAFF"
ip address 172.1.32.1 255.255.252.0
end

ip dhcp excluded-address 172.1.32.1 172.1.32.10
ip dhcp excluded-address 172.1.32.254

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 15:48:11 GMT

And if you run 'show ip dhcp bindings' you see this scope being used?

debug ip dhcp ?

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 15:53:17 GMT

Also, the vlan on the access switch is 99. On the layer 3 of vlan 99, do you have ip helper-address

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 15:55:56 GMT

yes when i check dhcp binding the scope is being used

i have not yet run debug ip dhcp

which debug ip dhcp should i run ?

the vlan 99 on access is for voice vlan, i think thats not related to the case

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 16:00:47 GMT

I mean 25.

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 16:05:27 GMT

25 is for DHCP LAN, on layer 3 for vlan 25 we dont have ip helper-address

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 16:12:23 GMT

Then you are not using flexconnect. The DHCP is asked by the WLC.

The WLC is connected to the Core? Which vlans does it use? 32 probably..

*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP (encap type 0xec03) mstype 0ff:ff:ff:ff:ff:ff
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP processing DHCP DISCOVER (1)
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP xid: 0x68c52066 (1757749350), secs: 0, flags: 0
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP chaddr: 40:1c:83:e1:66:85
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP Opt82 bridge mode insertion enabled, inserts opt82 if opt82 is enabled vlan=32, datalen =18, optlen=64
*DHCP Socket Task: Jun 06 16:49:33.044: 40:1c:83:e1:66:85 DHCP successfully bridged packet to DS

giaddr: 0.0.0.0 - this should be filled but the wlc with information from dhcp server

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 16:16:12 GMT

yes the AP are on Local Mode

thats correct for the vlan wifi we use vlan 32

am i missing configuration ?

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 16:27:01 GMT

interface Vlan32
description "WIFI-STAFF"
ip address 172.1.32.1 255.255.252.0

ip help-address "ip dhcp server"
end

It seems to me that we are missing it.

The DHCP request will bet to the wlc through the capwap tunnel on the management vlan. The wlc will use the vlan 32 to forward the DHCP request to the switch. This DHCP broadcast will get to the vlan 32 on the core.

The vlan 32 need to know how to send the dhcp request to the DHCP server ip address.

You can compare with another vlan on the same Core.

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 16:36:18 GMT

but do we need ip helper-address if the dhcp server and interface vlan 32 are on the same core ?

the wlc directly connected to the core

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 17:02:15 GMT

You are right, you dont. but on the WLC dynamic inteface you need to add the DHCP server.

DHCP information:

Primary DHCP.

Re: Wifi Connected no internet access

reylite — Mon, 06 Jun 2022 22:47:09 GMT

already add dhcp server on wlc interface, because the problem on some users, is it because the driver issue ?

Re: Wifi Connected no internet access

Flavio Miranda — Mon, 06 Jun 2022 22:56:26 GMT

Thats can be, most of time is client problem. But, I was check-in

Apparently, you have everyting in place so far.