Laptop connected to lightweight access point via WLC to access VLAN10

[antonios_garatsidis!]

topologyWLC statusinterface configurationWLANs

This is my fictional network topology which has nothing to do with reality and is only for educational purposes and is not referred as classified.

The problem is with L2 which is succesfully connected to LAP which acquires ip address via DHCP from WLC's DHCP pool for management.

L2 cannot manage to acquire ip address from R13's dhcp pool for VLAN 10

MS3 has gig1/1/2 trunk and gig1/0/22-24 access mode VLAN 99.

PC41 succesfully acquires dynamic ip address from R13's dhcp pool

R12 can succesfully ping the WLC and the LAP and MS3

L2 cannot acquire dynamically acclaimed ip address from R13's pool for VLAN 10 and also tried giving static ip address of 172.19.10.5/24 but it didnt work.

Configuration for R13:

Building configuration...

Current configuration : 1821 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R13
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
license udi pid CISCO2911/K9 sn FTX1524CM71-
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 ip address 10.0.0.25 255.255.255.252
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 ip address 10.0.0.22 255.255.255.252
 duplex auto
 speed auto
!
interface GigabitEthernet0/2
 no ip address
 duplex auto
 speed auto
!
interface GigabitEthernet0/2.10
 encapsulation dot1Q 10
 ip address 172.19.10.1 255.255.255.0
!
interface GigabitEthernet0/2.20
 encapsulation dot1Q 20
 ip address 172.19.20.1 255.255.255.0
!
interface GigabitEthernet0/2.30
 encapsulation dot1Q 30
 ip address 172.19.30.1 255.255.255.0
!
interface GigabitEthernet0/2.80
 encapsulation dot1Q 80
 ip address 172.19.80.1 255.255.255.0
!
interface GigabitEthernet0/2.99
 encapsulation dot1Q 99
 ip address 172.19.99.1 255.255.255.0
!
interface Vlan1
 no ip address
 shutdown
!
router ospf 1
 router-id 3.3.3.3
 log-adjacency-changes
 network 10.0.0.16 0.0.0.3 area 0
 network 10.0.0.20 0.0.0.3 area 0
 network 10.0.0.24 0.0.0.3 area 0
 network 10.0.0.28 0.0.0.3 area 0
 network 10.0.0.12 0.0.0.3 area 0
 network 172.19.10.0 0.0.0.255 area 0
 network 172.20.10.0 0.0.0.255 area 0
 network 172.19.20.0 0.0.0.255 area 0
 network 172.20.20.0 0.0.0.255 area 0
 network 172.19.30.0 0.0.0.255 area 0
 network 172.20.30.0 0.0.0.255 area 0
 network 172.19.80.0 0.0.0.255 area 0
 network 172.20.80.0 0.0.0.255 area 0
 network 172.19.99.0 0.0.0.255 area 0
 network 172.20.99.0 0.0.0.255 area 0
 default-information originate
!
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

Configuration for MS3 is: 

Building configuration...

Current configuration : 1876 bytes
!
version 16.3.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname MS3
!
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
 switchport access vlan 99
 switchport mode access
!
interface GigabitEthernet1/0/23
 description CONNECTION_TO_WLC
 switchport access vlan 99
 switchport mode access
 switchport nonegotiate
!
interface GigabitEthernet1/0/24
 description CONNECTION_TO_LAP
 switchport access vlan 99
 switchport mode access
 switchport nonegotiate
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
 description CONNECTION_TO_R13
 switchport trunk native vlan 80
 switchport trunk allowed vlan 10,20,30,80,99
 switchport mode trunk
 switchport nonegotiate
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan99
 mac-address 0001.4234.4601
 ip address 172.19.99.2 255.255.255.0
!
ip default-gateway 172.19.99.1
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
!
end 

 **sorry for my bad english**

[Rich R · Accepted solution]

Hi @antonios_garatsidis! - this type of question should really rather be asked on the Learning Network communities.
https://learningnetwork.cisco.com/s/communities

But anyway - can PC41 get a DHCP IP address on VLAN 10?
- Is the AP in Local Mode or Flexconnect Mode?
- Is the WLAN configured for central switching, DHCP and authentication (or local)?
- Is VLAN 10 allowed on the WLC switch port? (should be trunk port and allowed VLANs should include 10)
I think the answer there is NO because:

interface GigabitEthernet1/0/23
 description CONNECTION_TO_WLC
 switchport access vlan 99
 switchport mode access

 If you were intending to use Flexconnect local switching then the AP port needs to be a trunk allowing VLAN 10 and the WLAN needs to be mapped to flex local VLAN 10.

[antonios_garatsidis!]

Hello! THANK YOU!!!

-PC41 was able to acquire address via DHCP from DHCP server on R13

-The LAPs on my network acquire addresses from DHCP server on WLC

-Switched the port gig1/0/23 to trunk with allowed vlans 10,20,30,80,99 which are all VLANs that I use

EVERYTHING worked and all wirelessly connected laptops that I used were able to contact the whole network but R13 still cannot ping the 172.19.99.254 address of WLC!

[Rich R]

Good!
> R13 still cannot ping the 172.19.99.254 address of WLC!
Well they should be neighbours on VLAN 99 with direct layer 2 connectivity so that's strange.
Is the R13 MAC address in WLC ARP cache and is WLC MAC address in the R13 ARP cache?
Are you sure you don't have any CPU ACL configured on the WLC which might be blocking those pings?