User is unable to get an IP address from DHCP for the repeater AP and the clients that associate to the repeater AP
Mismatch in the native VLAN configuration on the Switch port, root AP and the repeater AP.
In a WLAN network which uses different VLANs and an external DHCP server connected to a Switch for assigning IP addresses, the native VLAN configuration on the root AP, repeater AP and the switch port to which the root APs are connected to must match. If there is a mismatch in the native VLAN configuration then traffic does not pass outside of the Switch Port, and the DHCP leases are not passed on. This is the reason why the repeater AP and the clients associated with the repeater AP do not get an IP address from the DHCP server.
Note : You cannot configure multiple VLANs on repeater access points. Repeater access points support only the native VLAN.
Significance of Native VLAN
When you use an IEEE 802.1Q trunk port, all frames are tagged except those on the VLAN configured as the "native VLAN" for the port. Frames on the native VLAN are always transmitted untagged and are normally received untagged. Therefore, when an AP is connected to the switchport, the native VLAN configured on the AP must match the native VLAN configured on the switchport.
If there is a mismatch in the native VLANs, the frames are dropped.
This scenario is better explained with an example. If the native VLAN on the switchport is configured as VLAN 12 and on the AP, the native VLAN is configured as VLAN 1, then when the AP sends a frame on its native VLAN to the switch, the switch considers the frame as belonging to VLAN 12 since the frames from the native VLAN of the AP are untagged. This causes confusion in the network and results in connectivity problems. The same happens when the switchport forwards a frame from its native VLAN to the AP.
The configuration of native VLAN becomes even more important when you have a Repeater AP setup in your wireless network. You cannot configure multiple VLANs on the Repeater APs. Repeater APs support only the native VLAN. Therefore, the native VLAN configuration on the root AP, the switch port to which the AP is connected, and the Repeater AP, must be the same. Otherwise traffic through the switch does not pass to and from the Repeater AP.
An example for the scenario where the mismatch in the Repeater AP's native VLAN configuration can create problems is when there is a DHCP server behind the switch to which the root AP is connected. In this case the clients associated with the Repeater AP do not receive an IP address from the DHCP server because the frames (DHCP requests in our case) from the Repeater AP's native VLAN (which is not the same as root AP and the switch) are dropped.
Also, when you configure the switch port, ensure that all the VLANs that are configured on the APs are allowed on the switchport. For example, if VLANs 6, 7, and 8 exist on the AP (Wireless Network) the VLANs have to be allowed on the switchport. This can be done using this command in the switch:
switchport trunk allowed vlan add 6,7,8
By default, a switchport configured as a trunk allows all VLANs to pass through the trunk port. Refer to Interaction with Related Switches for more information on how to configure the switchport.
Allowing all VLANs on the AP can also become a problem in some cases, specifically if it is a large network. This can result in high CPU utilization on the APs. Prune the VLANs at the switch so that only the VLAN traffic that the AP is interested in passes through the AP to avoid high CPU.
Concepts with Access Points
This section discusses concepts about how to deploy VLANs on access points and refers to this network diagram.
In this sample network, VLAN 1 is the Native VLAN, and VLANs 10, 20, 30 and 40 exist, and are trunked to another switch chassis. Only VLANs 10 and 30 are extended into the wireless domain. The Native VLAN is required to provide management capability and client authentications.
Hi All, A quick question: We have 2 WLCs in HA SSO.On Primary, LAG is configured and all the ports are being used.On Secondary WLC, only 1 port is being used.We would like to use all the ports on the Secondary WLC, what's the best way to go about it?...
Hello. Have IW3702-2E with x4 AIR-ANT2568VG-N 2.5/5.0Ghz 6/8 dBi Omni antennas.AP is in autonomous mode ap3g2-k9w7-tar.153-3.JI4.tar. I have run several copy test`s;2.4ghz I can connect 144Mbit only, cause there is only 20Mhz mode avai...
Hello everybody,I have an issue where the captive portale won"t work properly, the problem is that I have control over the WLC only and not adipsys platform I think I did what should be done in the WLC following the official guide provided by adipsys...
I am a student at Pioneer Technology Center, Ponca City, Oklahoma. We have a Cisco 1950 Series wireless router that we wish to configure as a wireless hotspot. I am interested in how the router manages wireless connections and I would like to see a diagra...
Hello All, Having a very difficult time getting my 1702i AP to join WLC 2504. This is working fine when direct connected to PoE port on device, but when I attempt to connect to edge switchport (configured for same VLAN as AP-manager) the connec...