Guest vlan dhcp not working from anchor controller

[carl_townshend]

Hi All

I have set up my foreign and anchor WLC, however for some reason im not getting any DHCP addresses from my anchor controller even though the scope is setup etc.

any ideas why not ?

cheers

Carl

[Scott Fella]

Do you have your mobility up between the foreign and your anchor?  Did you configure your foreing wlc guest ssid to point to the anchor wlc and then the anchor wlc ssid should point to itself?  Make sure that all the ssid configurations match exactly with exception on the interface, or else it will not work.... so check evey little checkbox in the ssid.

[carl_townshend]

what do you mean the anchor ssid shoudl point to itself ?

[Scott Fella]

The guest anchor wlc guest ssid... you need to point to itself (Local).

[carl_townshend]

Hi there

Would I need to configure dhcp snooping trust ports on my core switch where the wlc plugs in? or is it all tunnelled back to the wlc and so wont need it ?

[Scott Fella]

You don't need dhcp snooping.

Thanks,

Scott Fella

Sent from my iPhone

[Scott Fella]

Take a look at this guide. This explains how to setup your foreign and guest anchor wlc.

http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html

http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html

Sent from Cisco Technical Support iPhone App

[carl_townshend]

hi there

thanks for that

just to clarify, 

we anchor the foreign wlc to the dmz guest ssid wlc, then the dmz wlc anchors to itself for the the guest ssid ?

[Scott Fella]

Yes that is correct. I the dmz wlc is doing dhcp, then make sure on the SSID on the guest anchor that you specify the management ip address of that guest anchor in the primary dhcp entry.

Thanks,

Scott Fella

Sent from my iPhone

[carl_townshend]

Hi Scott

on my controller, I have created a guest vlan interface and mapped the ssid to that, however I believe its ok not to create this vlan on my switches as it effectively is a dummy interface, is that correct?

cheers

Carl

[Scott Fella]

If you have a guest anchor, only the switch that the guest anchor is connected to needs the guest vlan the guest SSID is mapped to not the internal wlc.

Thanks,

Scott Fella

Sent from my iPhone

[Roger Alderman · Accepted solution]

Carl

Keep things simple - as always.

Set up the foreign controller with the Guest SSID.

Point this SSID to the management interface.

Create a mobility group and add the anchor controller to the group.

On the SSID - set it to point to the anchor controller.

On the anchor controller set up an interface for the Guest SSID.

Point the interface to a DHCP server, be it external or the controller itself.

Set up the Guest SSID and point it at the interface.

Create the mobility group and add the foreign controller to the group.

Make sure the data and control paths come up.

Set your DHCP scope.

Point the anchor controller guest SSID to be 'local' (On the WLAN page - far right drop down arrow).

It should work - no need for an interface on the foreign. Everything is tunnelled via the management interface to the anchor. Any problems - email me!

[carl_townshend]

we are all working now Roger, I had selected a tick box under the SSID, require dhcp, so noone can put statics, Central had not configured this on there controller!

cheers matey

[Ahmed Alani]

works like a charm. thanks :)