Re: Users stuck in DHCP required state

subodh goyal · ‎04-01-2023

Users facing issue while connecting to all WLAN SSID

After troublehsooting we observed that Users stuck in DHCP required state.

>>>Policy Manager State............................ DHCP_REQD

After disabling DHCP proxy mode, User were able to connect SSID without any issue.

Can you help me understand what can be the issue as this is a temporary workaround. issue will come again.

WLC Model- AIR-CT2504-K9 WLC Version- 8.5.151.0

marce1000 · ‎04-01-2023

>....After disabling DHCP proxy mode,...
If it works with that setting then it is not a temporary workaround but simple a workaround , anyway
for your intended settings you can always debug clients with https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/100260-wlc-debug-client.html , you can have client debugs analyzed with https://cway.cisco.com/wireless-config-analyzer
Also look into : https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html (strongly advised as aireos is getting old these days) , best is to go for :

https://software.cisco.com/download/specialrelease/8f166c6d88b9f77aabb63f78affa9749

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Rich R · ‎04-01-2023

If it was working then stopped working, then either:
- something changed in your network environment or DHCP server
- or you hit a bug on the WLC

As Marce said update the code to eliminate known bugs which have been fixed. If that doesn't resolve the problem then it must be something that changed in your network or DHCP and you'll have to troubleshoot that - routing, firewall, ACL - could be anything.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

Scott Fella · ‎04-02-2023

My two cents is that you should not use DHCP proxy if you don't require it. If you. have moved your DHCP to a FW as an example, most FW's will drop that packet. Typically you only need DHCP proxy if you are using the controller as a DHCP server for wireless clients. So my question is, what changed, because something must of changed.

-Scott
*** Please rate helpful posts ***