Catalyst WLC 9800 clients do not receive DHCP address from DHCP server

[aastes]

Hello all,

I'm setting up a new Catalyst 9115AXI-B with an embedded wireless controller C9800 and am having some trouble getting my wireless clients to get any DHCP information from my external DHCP server. The server is a Windows Server 2019 domain controller. The WLC can reach the domain controller and even synch with the server for DNS and NTP information, but not DHCP.

The switchport that the Catalyst is connected to is configured to be a trunk port with the correct VLAN permitted and set as its PVID (non-cisco switch if that matters).

Below are the configuration settings for the GigabitEthernet0 interface:

interface GigabitEthernet0
mac-address 0000.5e00.0101
ip dhcp relay information trusted
ip dhcp client client-id GigabitEthernet0
ip dhcp client broadcast-flag clear
ip address 10.57.252.250 255.255.255.0
ip helper-address 10.57.252.10
no negotiation auto
ipv6 traffic-filter implicit_deny_v6 in
ipv6 traffic-filter implicit_deny_v6 out

As well as the ip dhcp-server commands entered in global config mode:

ip name-server 10.57.252.10 10.57.252.3
ip dhcp-server 10.57.252.10
ip dhcp-server 10.57.252.3

Any help would be appreciated. Thanks. 

[marce1000]

 - Consider this best practice(s) for wireless client dhcp servicing  : https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/guide-c07-743627.html#DHCPbridgingandDHCPrelay

    Also have a checkup of the  embedded wireless controller configuration with the CLI command show tech wireless ; feed the output into Wireless Config Analyzer

 M.

[aastes]

So the best practices say to use DHCP Bridging if the external DHCP server and WLC are on the same VLAN and then does not explain how to configure it at all. My DHCP server and WLC are on the same VLAN and clients cannot get DHCP addresses. 

[MHM Cisco World]

Remove

Ip dhcp-server x.xx.x.

And check again

[David Ritter]

so you are saying that your client ssid(s) is/are on the same segment at your machine management and WMI? 

[marce1000]

                  >...My DHCP server and WLC are on the same VLAN and clients cannot get DHCP addresses. 
 As other poster hints , the current  dhcp settings are probably incorrect and irrelevant because they don't relate to WLAN/VLAN pairs typically configured on a wireless controller. Run the wirelessanalyzer from my initial reply too , 

 M.
,

[aastes]

I've run the show tech wireless output through the Wireless Config Analyzer and it came back with 2 Errors and 18 Warnings.

Error 1: WCAE: Parsing: missing configuration file section(s), checks may not be executed properly:Interface Config,RF Profile Conversion,Policy Profiles

I don't know if this is because I've configured something incorrectly or just simply because I haven't even made it that far into configuring this device yet.

Error 2: Authentication: Profile(s) with AAA Policy pointing to non-existing value. Profile: stes-policy-profile

I can't find where in my "stes-policy-profile" that is pointing to any AAA policy.

[marce1000]

                            -  You may try show run  | inc stes-policy-profile  ;
     But in essence take note of the later posts that I wrote on correct  DHCP setup(s) too.

 M.

[aastes]

And how do I correctly setup DHCP? Using the configuration guide below is obviously leading me astray.

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Cupertino 17.9.x - VLAN Groups [Cisco Catalyst 9800 Series Wireless Controllers] - Cisco

[marce1000]

                                   >...And how do I correctly setup DHCP? 
 - In essence and as per earlier replies you do nothing on the controller but make sure that or each the WLAN/VLAN has an available DHCP server either direct or else through dhcp relay settings.
                                         So remove those initial settings you had, because it may lock things up , 

 M.

[David Ritter]

what is this 9800?  I have a stack of 9800-40's and G0 is the service port and not provide expected services that are provided on Te0-4

My 'management' network/segment does not provide DHCP,  only my interface vlans to which the ssids are attached.  no ssids are attached to management interface/segment.

[Luke Keeny]

I'm late to the party here, but just wanted to say thank you for posting the DHCP best practices document.  Currently migrating from a 5520 to C9800-CL.  Took me a little while to figure out, but got it not too long ago.  I now have clients with IP addresses using dhcp relay on the 9800.

[marce1000]

 @Luke Keeny  Great work ; reminder to  have a checkup of the  C9800-CL controller's configuration with the CLI command 
show tech wireless ;  (not show tech) and feed the output into Wireless Config Analyzer
                                   You will get lots of advisories to look into and to be considered for further optimizing and improvements!

 M.

[Luke Keeny]

Much appreciated, thank you.

[marce1000]

  - (Added reply) Ref : https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/17-3/config-guide/ewc_cg_17_3/dhcp_for_wlans.html
 >DHCP packets sent by the wireless clients are released in their respective VLANs as broadcast by the AP and relies on the fact that the network gateway of that VLAN forwards the requests to the DHCP server.

Note	Internal DHCP server is not supported in EWC.

 M.