Good morning community!
We are migrating our offices to standard VLAN (2000-2009), 2000 is the management vlan where switches/APs etc have their IPs. It was going well until yesterday when we migrated one office (CKE) that has the same hop as SES (a previously migrated office that was working fine before yesterday)
They all use the same DHCP Server that has different pools for each office and is behind the ICT RTR in a data centre.
We migrated SES last week, everything went well. Yesterday after migrating CKE to standard VLANs, APs in both CKE and SES start having IPs in the other school DHCP pool (Some CKE APs receiving SES Infrastructure IPs 10.65.200 and SES APs receiving CKE Ips on 10.65.10.). So they can’t forward traffic properly.
CKE RTR has an interface on FHC VLAN 2101 and SES RTR has an interface on FHC VLAN 2100.
We think that the DHCP server or a router (FHC or ICT) is being confused about receiving traffic from VLAN 2000 sometimes on 10.65.10 and sometimes on 10.65.200 and thus the lease ends up in the wrong pool.
Upon doing some research, we think we have to set up a layer 3 link between those routers. Would that be a good solution? One issue might be that the next device in line between the FHC RTR and the offices is a layer 2 2960X stack that doesn’t do routing.
CKE RTR CONFIG (edited to remove useless information);
[Also, since the duplicated 2000 vlan was causing issue, we switch it to 1999]
CKE-RTR#sh run br
Building configuration...
Current configuration : 15405 bytes
!
! Last configuration change at 20:49:11 PST Tue Nov 1 2022 by itss
!
hostname CKE-RTR
!
!
aaa session-id common
boot system switch all cat9k_lite_iosxe.17.03.01.SPA.bin
clock timezone PST -7 0
switch 1 provision c9200-48p
!
!
!
!
vtp mode transparent
!
ip routing
!
ip name-server 10.71.251.8 10.71.251.24
ip domain list yesnet.yk.ca
ip domain name yesnet.yk.ca
!
vlan 1999
name temp
!
vlan 2000
name Yesnet_Infrastructure
!
vlan 2001
name Yesnet_Wired
!
vlan 2002
name Yesnet_Wireless
!
vlan 2003
name Tc_Wireless
!
vlan 2004
name St_Wireless
!
vlan 2005
name Guest_Wireless
!
vlan 2006
name IOT
!
vlan 2007
name VOIP_&_BPI
!
vlan 2008
name SPARE
!
vlan 2009
name SPARE2
!
vlan 2100
name FHC
!
vlan 2101
name FHC2
!
vlan 2271
!
interface Port-channel1
switchport mode trunk
!
interface Port-channel2
!
interface Port-channel3
switchport mode trunk
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet1/0/1
description link to CKE-DHCP1
switchport access vlan 2271
switchport mode trunk
channel-group 1 mode desirable
!
interface GigabitEthernet1/0/2
description link to CKE-DHCP1
switchport access vlan 2271
switchport mode trunk
channel-group 1 mode desirable
!
interface GigabitEthernet1/0/3
switchport access vlan 2271
switchport mode access
channel-group 2 mode active
spanning-tree portfast
!
interface GigabitEthernet1/0/4
switchport access vlan 2271
switchport mode access
channel-group 2 mode active
spanning-tree portfast
!
interface GigabitEthernet1/0/36
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/37
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/38
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/39
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/40
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/41
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/42
description Access Points
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/43
description CKE-Room127-AP
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/44
description CKE-Room126-AP
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/45
description CKE-Room128-AP
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/46
description CKE-Room123-AP
switchport trunk native vlan 1999
switchport trunk allowed vlan 1999,2002-2005
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/47
description Uplink to Backbone
switchport mode trunk
channel-group 1 mode desirable non-silent
spanning-tree portfast
!
interface GigabitEthernet1/0/48
description Uplink to Backbone
switchport mode trunk
channel-group 1 mode desirable non-silent
spanning-tree portfast
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface Vlan1
no ip address
shutdown
!
interface Vlan200
no ip address
!
interface Vlan1999
ip address 10.65.10.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2000
description CKE Infrastructure
no ip address
ip helper-address 10.71.250.3
!
interface Vlan2001
description CKE Wired DHCP
ip address 10.65.11.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2002
description CKE Yesnet Wireless
ip address 10.65.13.254 255.255.254.0
ip helper-address 10.71.250.3
!
interface Vlan2003
description CKE tc Wireless
ip address 10.65.14.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2004
description CKE st Wireless
ip address 10.65.15.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2005
description CKE Guest Wireless
ip address 10.65.16.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2006
description CKE IOT
ip address 10.65.17.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2007
description CKE VOIP_BPI
ip address 10.65.18.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2008
description CKE Reserved
ip address 10.65.19.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2009
description CKE Reserved
ip address 10.65.20.254 255.255.255.0
ip helper-address 10.71.250.3
!
interface Vlan2101
ip address 10.64.101.252 255.255.255.0
!
router ospf 841
network 10.64.100.0 0.0.0.255 area 0.0.0.0
network 10.64.101.0 0.0.0.255 area 0.0.0.0
network 10.65.10.0 0.0.0.255 area 0.0.0.0
network 10.65.11.0 0.0.0.255 area 0.0.0.0
network 10.65.12.0 0.0.1.255 area 0.0.0.0
network 10.65.14.0 0.0.0.255 area 0.0.0.0
network 10.65.15.0 0.0.0.255 area 0.0.0.0
network 10.65.16.0 0.0.0.255 area 0.0.0.0
network 10.65.17.0 0.0.0.255 area 0.0.0.0
network 10.65.18.0 0.0.0.255 area 0.0.0.0
network 10.65.19.0 0.0.0.255 area 0.0.0.0
network 10.65.20.0 0.0.0.255 area 0.0.0.0
network 10.70.254.0 0.0.0.255 area 0.0.0.0
!
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.70.254.254
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
ip ssh client algorithm encryption aes128-cbc aes128-ctr aes192-cbc aes192-ctr aes256-cbc aes256-ctr
!
end
