Clients cannot get IP from Flexconnect AP

[SiJian Bao]

Folks,

My wireless is deployed as flexconnect mode. I have 3 branches and each of them has their own VLAN, and the four SSIDs is the same. At my branch A, the vlan is 52. Vlan 52 is not reachable to my WLC but the AP at that branch can ping vlan 52 gateway. But the clients which connect the AP cannot gain their IP address from my DHCP server which is in VLAN 52, where did i do wrong? By the way, the dynamic interface I created in my WLC cannot ping the VLAN 52 gateway, either.                  

[SiJian Bao]

No, the AP's of the site which locates the WLC are also configured as FlexConnect Mode.

Sorry for my omission, vlan 53 does not work fine, either.

At my headquarter, vlan 8 is used for ChinaPnR-User and vlan 9 is used for the other three SSIDs. They both work fine.

At my branch, vlan 52 is used for ChinaPnR-User and vlan 53 is used for the other three, but neither of them work.

[Scott Fella]

Okay... well attach in a zip file the following:

show run-config from the WLC

show run interface of the FlexConnect AP connected to the switchport

show ip interface brief on the layer 3 from the remote site

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[Scott Fella]

What interface have you created for vlan 52 and 53 at the remote site?  You have created a dhcp scope for that subnet?

If you connect a laptop to vlan 52 and vlan 53 on the same switch the AP's are connected to, you get an ip address?

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[SiJian Bao]

Firstly thanks for your help, I will post that information tomorrow.

The interfaces of 52 and 53 are just SVI's. I created a dhcp scope for the subnet: 192.168.52.1/25 for vlan 52 and 192.168.52.129/25 for vlan 53

[SiJian Bao]

Hi Scott,

This is the info you need yesterday, any help?

[Scott Fella]

So if you connect a laptop to a switchport on the same switch that the FlexConnect AP's are connected to, you can get an ip address from dhcp on both vlan 52 and vlan 53.  I just want to make sure of that first.  This would be at the remote site.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[Scott Fella]

Your switchport should not be setup like what you have:

interface FastEthernet0/14

descriptions Connection to AP

switchport mode trunk

switchport trunk native vlan 52

switchport trunk allowed vlan 52,53

spanning-tree bpduguard enable

You vlan mapppings don't match up either.. you have vlan 8 and vlan 9 for your WLAN's and native vlan 1, whcih should be vlan 52 if that is the vlan your ap's are on.

FlexConnect Vlan mode :.......................... Enabled

        Native ID :..................................... 1

        WLAN 1 :........................................ 8

        WLAN 2 :........................................ 9

        WLAN 3 :........................................ 9

        WLAN 4 :........................................ 9

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[SiJian Bao]

So at my headquarter where locates my WLC, the port which connects the AP should be configured like this:

interface FastEthernet0/X

descriptions Connection to AP

switchport mode trunk

switchport trunk native vlan 8

switchport trunk allowed vlan 8,9

spanning-tree bpduguard enable

FlexConnect Vlan mode :.......................... Enabled

        Native ID :..................................... 8

        WLAN 1 :........................................ 8

        WLAN 2 :........................................ 9

        WLAN 3 :........................................ 9

        WLAN 4 :........................................ 9

And for my branch, it should be like:

interface FastEthernet0/X

descriptions Connection to AP

switchport mode trunk

switchport trunk native vlan 52

switchport trunk allowed vlan 52,53

spanning-tree bpduguard enable

FlexConnect Vlan mode :.......................... Enabled

        Native ID :..................................... 52

        WLAN 1 :........................................ 52

        WLAN 2 :........................................ 53

        WLAN 3 :........................................ 53

        WLAN 4 :........................................ 53

[Scott Fella]

Well at HQ, your AP's should be in local mode. That would mean that the switchport would be an access port.

If you want to keep them in FlexConnect mode, then yes the configuration what you show is correct.

Sent from Cisco Technical Support iPhone App

[SiJian Bao]

well, another question.

For the FlexConnect Mode AP's. There's no need to set up the dynamic interfaces and AP Groups, we just use the flexconnect vlan mapping to map clients to different VLAN's, right?

[Scott Fella]

That is correct. The WLAN to vlan mapping set on the access point itself is what's used.

Sent from Cisco Technical Support iPhone App

[Scott Fella]

Let me know if that solves your issue

Sent from Cisco Technical Support iPhone App

[SiJian Bao]

ok, i will try that tomorrow( that is about 12 hours later from now) and post my result here. THX!

[SiJian Bao]

Hi Scott,

What a strange sitution.

At branch A, after setting the native vlan and the right vlan mapping, clients sitll cannot get IP. But at another branch B, the access switch which connects the AP's is the third-part switch, after setting the native vlan, everything goes fine. The configuration is like this now at branch A.

interface FastEthernet0/32

switchport trunk native vlan 52

switchport mode trunk

spanning-tree portfast

end

FlexConnect Vlan mode :.......................... Enabled

        Native ID :..................................... 52

        WLAN 1 :........................................ 52

        WLAN 2 :........................................ 53

        WLAN 3 :........................................ 53

        WLAN 4 :........................................ 53

If I set the IP address manually after connecting the AP's without getting IP, I cannot ping my gateway or the AP i connect to.

[Scott Fella · Accepted solution]

I would make sure that vlan 52 and vlan 53 is configured on all the switches and being passed on the trunks between the switches also.

Sent from Cisco Technical Support iPhone App