3850 Anchor Controller DHCP

[Patrick McDonnell]

Hi all

We have a scenario where we have a Cisco 3850 (WS-C3850-48P-S) switch stack configured with a WLC. 
This is used for the corporate wireless connectivity. This is on the inside of a firewall pair.

On the other side of the firewall we have a 3850 switch creating a DMZ environment.

This DMZ 3850 (WS-C3850-48P-S) switch is acting as an Anchor Controller for the Guest SSID.

The two are connected via an EoIP tunnel.

The tunnel gets established as expected, however, when a wireless guest user connects they are unable to get an IP address allocated through DHCP on the anchor controller. 

We compared our environment to one we know works and the only difference is that the other environment has a physical WLC appliance as anchor WLC.

I am looking clarity if this environment should work or do we need the anchor controller to be a physical WLC?

Has anyone else experience this problem, if so what was the fix?

Thanks

[Patrick McDonnell]

Additional information, the DMZ Switch is running

Switch Ports Model              SW Version        SW Image              Mode  

------ ----- -----              ----------        ----------            ----  

*    1 32    WS-C3850-24P       03.06.00E         cat3k_caa-universalk9 INSTALL

And the Switch stack is running, 
 

Switch Ports Model              SW Version        SW Image              Mode  

------ ----- -----              ----------        ----------            ----  

     1 56    WS-C3850-48P       03.06.00E         cat3k_caa-universalk9 INSTALL

*    2 56    WS-C3850-48P       03.06.00E         cat3k_caa-universalk9 INSTALL

     3 56    WS-C3850-48P       03.06.00E         cat3k_caa-universalk9 INSTALL

[Rasika Nayanajith]

3850 does not support guest anchor functionality. It has to be 5508,WiSM2 or 5760.

"On the guest controller WLAN, which can be Cisco 5500 Series WLC, Cisco WiSM2, or Cisco 5700 Series WLC, configure the IP address of the mobility anchor as its own IP address. This allows the traffic to be tunneled to the guest controller from the mobility agent."

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3e/mobility/configuration_guide/b_mobility_3e_3850_cg/b_mobility_3e_3850_cg_chapter_0110.html#task_3414BB04B4EA4FCF8D53609AAECCC861

HTH

Rasika

**** Pls rate all useful responses ****

[Patrick McDonnell]

Thanks Rasika