05-14-2025 08:54 PM
Hi Community,
I’m currently working on a network design where I want the Layer 3 Switch (Cisco) to handle DHCP for both wired (LAN) clients and wireless clients (via Access Point). Please see the attached topology diagram for reference.
WLAN Controller: IP: 192.168.1.100/24 (VLAN 1) - WLC 9800-CL deploy on vmware workstation. Use my own laptop to run WLC
Cisco L3 Switch: Connects to:
Gi1 to WLAN Controller
F0/1 to Aruba L2 switch
Aruba L2 Switch:
Port 1/2 connects to Access Point
Port 1/24 uplinks to Cisco L3
VLANs in Use:
VLAN 1: 192.168.1.0/24 (Management)
VLAN 10: 192.168.10.0/24 (CAPWAP)
VLAN 20: 192.168.20.0/24 (Wireless Users)
VLAN 30: 192.168.30.0/24 (Wireless Guest)
Use the Cisco L3 switch as a DHCP server for:
All LAN clients (wired, connected to VLANs 10, 20, 30, etc.)
Wireless clients (connected via Access Point on VLAN 20 and VLAN 30)
Clients should receive IP from the correct DHCP pool and access the Internet via L3 switch routing.
Can I configure DHCP pools directly on the Cisco L3 switch for VLANs 10, 20, and 30 and serve both LAN and wireless clients from there?
Do I need to configure DHCP relay (ip helper-address) on the wireless side, or is it not necessary if everything is routed locally via the L3 switch?
How should I trunk/tag the ports between:
WLAN Controller ↔ L3 switch
L3 switch ↔ L2 switch (Aruba)
L2 switch ↔ Access Point
Do I need to configure VLAN interfaces (SVIs) for all VLANs on the L3 switch and assign the correct DHCP pools with default-gateway pointing to the SVI?
Any best practices to ensure clients get IPs and can access internet across both wired and wireless?
05-15-2025 12:32 AM - edited 05-15-2025 12:34 AM
Can I configure DHCP pools directly on the Cisco L3 switch for VLANs 10, 20, and 30 and serve both LAN and wireless clients from there? Yes you can but the question is are you creating multiple ssids ? if you not you can use one vlan and dhcp pool for wireless clients l and a separate dhcp pool for lan client
Do I need to configure DHCP relay (ip helper-address) on the wireless side, or is it not necessary if everything is routed locally via the L3 switch?
9800 dhcp config step are as follows, you need helper address on L3 switch dhcp as dhcp work as broadcast in lan network.
https://wifininjas.net/2019/08/06/wn-blog-007-c9800-wlc-internal-dhcp-server-config/
How should I trunk/tag the ports between:
WLAN Controller ↔ L3 switch = trunk
L3 switch ↔ L2 switch (Aruba) = trunk ( all traffic need to allow via firewall as the exit point for internet)
L2 switch ↔ Access Point = access vlan assigned to SSID
Do I need to configure VLAN interfaces (SVIs) for all VLANs on the L3 switch and assign the correct DHCP pools with default-gateway pointing to the SVI?You need configure and assigned default gateway pointing to exit point.(Specifies the IP address of the default router for a DHCP client.)
Any best practices to ensure clients get IPs and can access internet across both wired and wireless?https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html
05-15-2025 01:05 AM
I creating multiple ssids at least 4 SSIDS
05-15-2025 01:38 AM
I creating multiple ssids at least 4 SSIDS. On switch L3 do i have to config option 43?
05-15-2025 03:16 AM
You need to configure dhcp 43 for ap.
05-15-2025 03:58 AM
Can you show me how to config that
05-15-2025 07:16 AM
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcp-option-43-00.html
above link give cli and gui configuration.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide