flexconnect wifi clients get IP scope from another SSID

[Andrey128]

access point Cisco_AIR-AP2802I (Cisco AP Software, ap3g3-k9w8 Version: 17.9.5.205) is configured to offer two flexconnect SSID , e.g. "Office" (VALN10) and "Factory" (VLAN20).  On VLAN20 ACLs have been applied which is currently filtering DHCP traffic, so somehow clients connecting towards SSID "Factory" get IP from SSID "Office" VLAN10. Is this a bug or feature ...

[JPavonM · Accepted solution]

Check the VLAN assignment under the Flexprofile, and also check the VLAN assignment under the policy profile that the SSID "Factory" uses.

[marce1000]

  - Besides what has been mentioned ; also have a checkup of the 9800 controller's configuration with the CLI command show tech wireless and feed the output from that into Wireless Config Analyzer
   Use the full command above , do not use a simple show tech for this procedure

 M.

[Simon Blomqvist]

Could potentially be that the client just retains the IP from VLAN 10 if you're jumping between SSIDs. Make sure that the VLAN exist on the trunk to the AP. And what do you mean with an ACL that filters DHCP traffic? Do you mean that you're allowing DCHP traffic through? Make sure that you have an ACL entry for both directions since it's stateless.

[MHM Cisco World]

Are the non correct vlan is native vlan?

Are this vlan is ap vlan?

MHM

[Rich R]

> Is this a bug or feature

It's not a bug and it's not a feature.  It simply means you have misconfigured the WLAN/AP/switch.
Flexconnect local switching simply tags the client traffic with the configured 802.1q VLAN tag which gets handled by the local AP switch trunk port.

Further to what @JPavonM said: if you use VLAN name assignment but haven't defined that name in the flex profile then the AP won't know what VLAN ID that name is.  So either use VLAN number/ID or make sure the VLAN name(s) are defined in the flex profile assigned to the AP. 

[Andrey128]

flexconnect profile name was wrongly written in config, which caused such problem.

standard guide for flexconnect https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213945-understand-flexconnect-on-9800-wireless.html describes well config steps.