DHCP snooping miltiple switches AP authonomous

rparrat666 · ‎05-08-2013

Hi,

I have a problema with DHCP. I have two 2960 connected with a port channel on ports 47 and 48 as trunk with native vlan 10. I only have this one vlan. In port 1 of sw 1, I have a C800 as DHCP server.

I have an AP autonomous witrh single ssid on vlan 10.

When I connect the AP to sw1, I receive dhcp with no problems.

When I connect the AP to sw 2, I’m not getting IP by DHCP.

I have DHCP snooping working on vlan 10 on both devices.

The ports where I connect the AP are access ports on vlan 10 config as trusted.

The trunk ports are also configured as trusted.

The port 1 of ws 1 that goes to the C800 is also configured as trusted.

I need some help to figure out why I’m not getting IP by DHCP when I connect the AP to the SW 2.

The only I notice is that when I connect the AP to sw 2, I get on SW 1 the message of packet drop by option 82, but even after configuring ip dhcp snooping information option allow-untrusted on both switches, the problem persists.

thanks

paul driver · ‎05-09-2013

Hello
Do you have connecrivity from this port?

Can you receive an ip address from dhcp if you plug a pc into it? - Have you tried static addressing ?

On switch 2 have you defined L2 vlan for vlan 10?

res
Paul

Sent from Cisco Technical Support Android App

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

rparrat666 · ‎05-09-2013

Vlan 10 is configured as access on all ports, and is passing tru the tunk port.

If I’m connected tp the sw 2 with a wired, I get IP by DHCP without any problem and have full connectivity.

If I configure a static ip address on my wireless interface, I have full connectivity tru the SSID.

Thanks

paul driver · ‎05-09-2013

Hello

Can you post the config of the wlan ap

res

Paul

Please don't forget to rate any posts that have been helpful.

Thanks.

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

rparrat666 · ‎05-09-2013

!

! Last configuration change at 18:10:56 GMT Sun Feb 28 1993 by admin

version 15.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname AP

!

logging rate-limit console 9

!

aaa new-model

!

aaa authentication login default local

aaa authorization exec default local

!

aaa session-id common

clock timezone GMT -6 0

ip cef

!

ip dhcp-server 10.69.32.1

dot11 syslog

!

dot11 ssid xtndsyses

authentication open

authentication key-management wpa

guest-mode

wpa-psk ascii 7 03227D2D202A04696B2D3D213330292E260B0A05096365

!

dot11 network-map

crypto pki token default removal timeout 0

!

username --- privilege 15 secret 5

!

bridge irb

!

interface Dot11Radio0

no ip address

!

encryption mode ciphers tkip

!

ssid xtndsyses

!

antenna gain 0

stbc

station-role root

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 spanning-disabled

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

!

interface Dot11Radio1

no ip address

!

encryption mode ciphers tkip

!

ssid ssidap

!

antenna gain 0

dfs band 3 block

stbc

channel dfs

station-role root

bridge-group 1

bridge-group 1 subscriber-loop-control

bridge-group 1 spanning-disabled

bridge-group 1 block-unknown-source

no bridge-group 1 source-learning

no bridge-group 1 unicast-flooding

!

interface GigabitEthernet0

no ip address

duplex auto

speed auto

bridge-group 1

bridge-group 1 spanning-disabled

no bridge-group 1 source-learning

!

interface BVI1

ip address 10.69.32.7 255.255.255.0

ip helper-address 10.69.32.1

!

ip default-gateway 10.69.32.1

ip forward-protocol nd

ip http server

ip http authentication aaa

no ip http secure-server

ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag

ip route 0.0.0.0 0.0.0.0 10.69.32.1

!

snmp-server community ro RO

snmp-server community rw RW

!

bridge 1 route ip

!

line con 0

line vty 0 4

transport input all

!

end

paul driver · ‎05-09-2013

Hello,

Are you trying to obtain dhcp for clients connecting to this AP or for the AP to obtain a dynamic ip address?

Please don't forget to rate any posts that have been helpful.

Thanks.

Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul