Can connect to SSID but can't access internet

[AMcGlade]

Hi everyone,

This is my first post here and I'm still learning the ins and outs of the network as it was set up before I arrived.

So currently I have 3 SSID's set up for the school, SGC, Staff, and Student. I have a specific AP, a AIR-CAP3702I-Z-K9, which transmits all 3 SSID's however when you connect to either SGC or Staff it connects to the network, but you are unable to load up any webpages, however I can access our WLC. To make it more odd, when you connect to Student it works fine and staff and students can load pages.

Other AP's are configured to all follow the same set up process and configuration (vlan 2199 being our wireless):

interface Gi2/0/35
switchport mode trunk
switchport trunk native vlan 2199
exit

I've tried reconfiguring it to a new port, both on the switch and in a new location, resetting it to factory default, and clearing the config but it refuses to work correctly.

If anyone has any ideas please let me know as I've been racking my brain and keep coming up empty.

Thanks

[marce1000]

 - Basically the ssid's you provide are matched to a lan/vlan network which you decide when the ssid is configured.                                      Make sure these vlans  have  internet access

 M.

[AMcGlade]

All 3 have SSIDs have internet access as when your connection jumps to a different AP on the same switch with the same configuration all 3 work and allow people to browse.

I forgot to add the details that when connected to SGC you connect to the network and can browse anything internal, but external things like youtube never load. When connected to Staff it gives a 169.x ip address.

Thanks.

[marce1000]

 - If the access points are controller based, then make sure that all intended access points for use, show up in the controller.

 M.

[AMcGlade]

The AP does come up in our WLC (J204) and matches the settings of other APs in there.

Thanks.

[marce1000]

  - It is very difficult to tell what is going on. 1) Make sure all configured ssid's are configured with a valid dhcp server/service. This can be verified , for instance, when a wireless-client connects with a specific known mac address , then lookup the mac address in the dhcp server's logs and verify whether it got  a valid ip address assigned. 2) You need to have more insights into your perimeter-internet infrastructure and how it  connects to the wireless controller, is there a router or is there a firewall (e.g.) Is the routing correct or does the firewall allow access for the wireless (lans), etc. 

 M.

[paul driver]

Hello
If this is a lightweight AP (LAP) then you don't require the port connecting the AP to the switch as a trunk it just needs to be an access-port, only autonomous APs require a trunk as no CAPWAP tunnel created.

As for client connectivity ,As they receiving the correct  ip settings (DNS,D/G etc..)

[Richard Burts]

This comment

When connected to Staff it gives a 169.x ip address.

certainly indicates that there is a problem with address assignment for Staff which explains why these do not work. 

And this comment

when connected to SGC you connect to the network and can browse anything internal, but external things like youtube never load

seems to indicate that address assignment and internal routing are correctly configured. But suggest that there is a problem with the configuration of address translation for this SSID to reach external resources.