Experts, I am deploying a wireless network with multiple SSID's - 1242 trunked to 3560. 3560 trunked to 2811 subifs. Native VLAN 99 set at every point. Wireless clients can connect to SSID fine, but do not get DHCP from the router. The switch can ping BVI interface on AP (VLAN 99), and its own VLAN 99 of course, but cannot reach router loopback, 99, or subifs. Phones and desktop PC's in their respective VLAN's work fine and connect with DHCP etc. I am stumped. Seeing as the switch can ping the AP, but clients on the AP cannot ping the switch or router, or get DHCP, I am assuming there is a problem with the switch rather than the AP. SWITCH vlan 21 name VLAN-21-WLAN ! vlan 22 name VLAN-22-GUEST-WLAN ! vlan 99 name VLAN-99-NETMGT ! interface Loopback0 description loopback ip address 192.102.10.2 255.255.255.255 no ip route-cache ! interface FastEthernet0/47 description to AP 1 switchport trunk encapsulation dot1q switchport trunk native vlan 99 switchport trunk allowed vlan 21,22,40,41,51,99 switchport mode trunk ! interface FastEthernet0/48 description to 2811 fa0/0 switchport trunk encapsulation dot1q switchport trunk native vlan 99 switchport trunk allowed vlan 12,20-22,30,40,41,50,51,60,99 switchport mode trunk ! ! interface Vlan99 ip address 192.102.99.2 255.255.255.192 no ip route-cache ROUTER ! ip dhcp pool VLAN-21-WLAN network 192.102.21.0 255.255.255.192 default-router 192.102.21.1 dns-server 61.88.88.88 192.102.21.1 8.8.8.8 lease 7 ! ip dhcp pool VLAN-22-GUEST-WLAN network 192.102.22.0 255.255.255.0 default-router 192.102.22.1 dns-server 61.88.88.88 192.102.21.1 8.8.8.8 ! interface Loopback0 description L,OP,Rothwell,4022 ip address 192.102.10.1 255.255.255.192 ! interface FastEthernet0/0 description to SW 0/48 no ip address no ip redirects ip flow ingress ip nat inside ip virtual-reassembly in duplex auto speed 100 ! interface FastEthernet0/0.21 description VLAN-21-WLAN encapsulation dot1Q 21 ip address 192.102.21.1 255.255.255.192 no ip redirects no ip proxy-arp ip flow ingress ip nat inside ip virtual-reassembly in ! interface FastEthernet0/0.22 description VLAN-22-GUEST-WLAN encapsulation dot1Q 22 ip address 192.102.22.1 255.255.255.0 no ip redirects no ip proxy-arp ip flow ingress ! interface FastEthernet0/0.99 description VLAN-99-NETMGT,OP,Rothwell,4022 encapsulation dot1Q 99 native no ip redirects no ip proxy-arp ip flow ingress AP dot11 ssid Guest Connect vlan 22 authentication open authentication key-management wpa guest-mode mbssid guest-mode wpa-psk ascii 7 XXXXX ! dot11 ssid Corporate Connect vlan 21 authentication open ! nterface Dot11Radio0 no ip address no ip route-cache ! encryption vlan 21 key 1 size 128bit 7 XXXX transmit-key encryption vlan 21 mode wep mandatory ! encryption mode ciphers tkip ! encryption vlan 22 mode ciphers tkip ! ssid Guest Connect ! ssid Corporate Connect ! mbssid station-role root bridge-group 1 bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio0.21 encapsulation dot1Q 21 no ip route-cache bridge-group 21 bridge-group 21 subscriber-loop-control bridge-group 21 block-unknown-source no bridge-group 21 source-learning no bridge-group 21 unicast-flooding bridge-group 21 spanning-disabled ! interface Dot11Radio0.22 encapsulation dot1Q 22 no ip route-cache bridge-group 2 bridge-group 2 subscriber-loop-control bridge-group 2 block-unknown-source no bridge-group 2 source-learning no bridge-group 2 unicast-flooding bridge-group 2 spanning-disabled ! ! interface FastEthernet0.21 encapsulation dot1Q 21 no ip route-cache ! interface FastEthernet0.22 encapsulation dot1Q 22 no ip route-cache ! interface FastEthernet0.99 encapsulation dot1Q 99 native no ip route-cache bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address 192.102.99.3 255.255.255.192 no ip route-cache ! ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag bridge 1 route ip
... View more