DHCP problems using LEAP and ACS for wireless user

[abayo]

Scenario:

AP: 1100 Series

External Radius: ACS

Authentication type: LEAP

Problem: wireless user is authenticated correctly but it is not possible to get an IP address from the IP pool configured on the ACS.

[pradeepde]

If the wireless client is not getting a DHCP address with LEAP turned on, recheck the client/AP configurations to make sure they have the LEAP setup according to the docs at

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo1200/accsspts/ap120scg/bkscgc7.htm#xtocid8

One could also use a sniffer on the wire side of the AP to watch the DHCP request/response to help determine where the glitch is.

[pmpesha]

I was having a similar problem on my AP1200. The fix:- Under express security section delete the contents of the SSID Table, and reconfigure you security settings. Make sure to check the EAP Authentication if that is what you use. Hopefull the will help.

[gwcrook]

Please post your software version on the AP1100. There are some bugs with certian versions of IOS.

[abayo]

S.O. AP version:c1100-k9w7-tar.122-15.XR2

[curepipe1]

I am also having the same problem.

I am using a 1100 AP, with the following IOS.

(C1100-K9W7-M), Version 12.3(4)JA

I have the following setup.

ACS Server - Handles RADIUS authentication, IP Pools Configured. I have multiple users set for IP pools in group settings as well as individual users with static IP`s.

Cisco 1100 AP - For testing is plugged into the ACS server through a cross over cable.

Cisco Air-CB21G - Using WinClient-802.11a-b-g-Ins-Wizard-v1204 drivers. Configured for LEAP using username/password as set in ACS.

The client authenticates fine, although all ways times out when it comes to DHCP. Are there any additional settings you have to configure on the AP for DHCP passthrough from ACS???

[craig.gleason]

I am having a similar problem with wireless clients connected to a 1131AG access point. When clients are connected to an SSID using LEAP authentication, they cannot pull a DHCP address. If i set a static address, I can browse the network just fine from the client.