topic Re: Wireless AP issues in Wireless

Wireless AP issues

Artezys79 — Tue, 29 Oct 2024 22:26:10 GMT

Hi All,

I am trying to replace my Meraki switch with C9300 but keep Meraki AP.

First step was to replicate settings and apply to the C9300, however Meraki AP isn't able to resolve dnslookup on tagged traffic but all is fine on untagged traffic. DHCP server resides on the switch with two number Vlan's linked to the AP with different SSID.

From the VLAN's gateway, which belongs to SSID's I am able to ping 8.8.8.8 but from the client on the same subnet only up to the uplink.

Re: Wireless AP issues

Brash — Wed, 30 Oct 2024 02:27:32 GMT

Sounds likely to be an issue with VLAN tagging somewhere along the line (double tagging, native tagging etc).
What's the VLAN config on the switchports between the AP and the gateway?

Are you tagging the management VLAN on the Meraki AP or is it untagged?

Re: Wireless AP issues

Artezys79 — Wed, 30 Oct 2024 07:39:59 GMT

My gateway resides on the router, then via uplink onto the switch with vlan's allow all and the onto the switch port with native vlan 1, then allowed vlan's list is 1,1515 (represents SSID),2020 (and another SSID).

Management is untagged on meraki AP.

Re: Wireless AP issues

Philip D'Ath — Wed, 30 Oct 2024 09:38:40 GMT

What VLAN tag is the SSID using?

Is the switch port that the AP plugs into configured as a trunk port, using a native VLAN that is not the same as the tag, and is the tag allowed on that port?

What is te default gateway for that VLAN? If it is the switch, does the MX have a static route pointing to the switch for that VLAN subnet?

Re: Wireless AP issues

Artezys79 — Wed, 30 Oct 2024 13:20:14 GMT

I am using VLAN 1515 and VLAN 2020 for two different SSID's

The port where AP is plugged in is in trunk mode with the following VLAN's, 1,1515, 2020 along with native VLAN 1. Below is the extract from my switch config.

Default gateway is .1 address on the switch where switch provide DHCP services to the AP. In my case, I have static routes for VLAN 1515 and 2020 assigned on the Cisco NGFW device and pointing to the uplink address on the switch.

Just spotted that in my config VLAN 1 doesn't have any IP assignment, but not sure what has to be there. On my Cisco NGFW I have VLAN 1 with the subnet which is used for Meraki AP.

Spoiler

Config

!
!
no ip domain lookup
ip dhcp excluded-address 192.20.20.0 192.20.20.1
ip dhcp excluded-address 192.15.15.0 192.15.15.1
!
ip dhcp pool WIFI
network 192.15.15.0 255.255.255.0
default-router 192.15.15.1
dns-server 8.8.8.8 8.8.4.4
lease infinite
!
ip dhcp pool WIFI-S
network 192.20.20.0 255.255.255.0
default-router 192.20.20.1
dns-server 8.8.8.8 8.8.4.4
lease infinite
!
!
!
no ip igmp snooping vlan 1011
login on-success log
ipv6 nd raguard policy HOST_POLICY
!
udld enable

!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 10.66.102.2 255.255.255.0
negotiation auto
!
interface TenGigabitEthernet1/0/1
description Uplink
switchport mode trunk
ip arp inspection trust
logging event trunk-status
load-interval 30
ip dhcp snooping trust
!
interface TenGigabitEthernet1/0/2
switchport trunk allowed vlan 1,1011,1515,2020
switchport mode trunk
speed auto 5000
ip dhcp snooping trust
!
!
interface Vlan1
no ip address
!
interface Vlan5
description In-band Management
ip address 192.168.5.10 255.255.255.0
!
interface Vlan35
description Uplink
ip address 175.35.69.2 255.255.255.248
!
interface Vlan100
description Data
ip address 192.168.100.10 255.255.255.0
!
interface Vlan1515
description WIFI
ip address pool WIFI
!
interface Vlan2020
description WIFI-S
ip address pool WIFI-S
!

Config!!no ip domain lookupip dhcp excluded-address 192.20.20.0 192.20.20.1ip dhcp excluded-address 192.15.15.0 192.15.15.1!ip dhcp pool WIFInetwork 192.15.15.0 255.255.255.0default-router 192.15.15.1dns-server 8.8.8.8 8.8.4.4lease infinite!ip dhcp pool WIFI-Snetwork 192.20.20.0 255.255.255.0default-router 192.20.20.1dns-server 8.8.8.8 8.8.4.4lease infinite!!!no ip igmp snooping vlan 1011login on-success logipv6 nd raguard policy HOST_POLICY!udld enable!interface GigabitEthernet0/0vrf forwarding Mgmt-vrfip address 10.66.102.2 255.255.255.0negotiation auto!interface TenGigabitEthernet1/0/1description Uplinkswitchport mode trunkip arp inspection trustlogging event trunk-statusload-interval 30ip dhcp snooping trust!interface TenGigabitEthernet1/0/2switchport trunk allowed vlan 1,1011,1515,2020switchport mode trunkspeed auto 5000ip dhcp snooping trust!!interface Vlan1no ip address!interface Vlan5description In-band Managementip address 192.168.5.10 255.255.255.0!interface Vlan35description Uplinkip address 175.35.69.2 255.255.255.248!interface Vlan100description Dataip address 192.168.100.10 255.255.255.0!interface Vlan1515description WIFIip address pool WIFI!interface Vlan2020description WIFI-Sip address pool WIFI-S!

Re: Wireless AP issues

Philip D'Ath — Wed, 30 Oct 2024 19:15:37 GMT

What happens if you give the switch a static IP address in VLAN1515 and 2020?

Re: Wireless AP issues

Artezys79 — Wed, 30 Oct 2024 19:39:32 GMT

Thank you for your advise.

It appears that issues was with the switch, as ip routing wasn't enabled, and after enabling it routing start working as expected.