Client couldn't get DHCP IP address - WLC9800 settings

[eeebbunee]

Hello Professionals,

Could you please see and figure out my incorrect configurations?
I'm testing with WLC9800, but client device can't get IP address. 

DHCP - Cisco 9300L switch - SVI (ip dhcp pool for each VLAN)
 * VLAN14: 10.50.14.0/24 (SVI - 10.50.14.1)
Client> When I connect AP, it says connected (authenticated - macfiltering)

WLC9800>> 

I have configued correct VLAN - Profile and DHCP server IP. 

However, when I connect this SSID, I can't get IP address from DHCP Server.

What did I miss..?

I appreciate your comments.

[marce1000]

 - Have a checkup of the WLC9800 configuration with  the CLI command show tech wireless ; feed the output into :
                                https://cway.cisco.com/wireless-config-analyzer/

 M.

[balaji.bandi]

where is your vlan 14 SVI configured - check the SVI configuration and add IP helper address as example below :

interface Vlan14
description **SSID**
ip address x.x.x.x 255.255.255.0
ip helper-address a.a.a.a
ip helper-address b.b.b.b

[eeebbunee]

I have ip helper-address config.

interface Vlan14
description Corporate-WIRELESS
ip dhcp relay information trusted
ip address 10.50.14.254 255.255.255.0
ip helper-address 10.50.14.1

However, I got this errors from Cisco Switch (DHCP):

%DHCP_SNOOPING-5-DHCP_SNOOPING_NONZERO_GIADDR: DHCP_SNOOPING drop message with non-zero giaddr or option82 value on untrusted port, message type: DHCPDISCOVER, MAC sa:

Maybe that's why I can't get the IP address? Do you think if I configure dhcp snooping trusted port then it works?

Thank you so much.

[eeebbunee]

After I configured the port to be trusted, it works.

Thank you everyone!

[balaji.bandi]

ip dhcp relay information trusted - this should fix the issue for that error.

what DHCP Server (Microsoft - what DHCP Option 82 ?)

you can check  #show ip dhcp snooping statistics detail

some good document :

https://community.cisco.com/t5/switching/dhcp-snooping/td-p/1622877

you can use below options :

ip dhcp snooping information option allow-untrusted

no ip dhcp snooping verify no-relay-agent-address

no ip dhcp snooping information option

Suggest to run the Debug :

debug ip dhcp server packet