Wireless guest users are getting limited connectivity.

[eng_elshreef]

Could anyone help please, I have a wireless guest solution consist of :

• WLC located internal in the network – all the AP are associated with that WLC-.
• Anchor WLC located in the DMZ . the guest SSID are tunneled from the internal WLC to the Anchor WLC, the DHCP service for guest users is on the Anchor WLC.
• NAC guest server to authenticate the guest users.

The solution was working properly but now we have a problem that if any one tried to connect to the guest SSID if he is authorized or not , the user will get IP address from the DHCP pool and now as you know most of people has smart phones and they try to get internet access. Now only 5 or 6 people authenticated with NAC gest server and the DHCP pool become full because too many people tried to connect even they do not authenticate.

so if any user trys to cnnect he will not get IP address from the anchor controller and getting limited connectivity.

if I add static IP address on my Laptop , I will be redirected to the authentication page and can access normally.

I am working in big environment 7,000 users so I can’t go with increasing the DHCP pool because the problem will not be solved.

I hope if anyone can help in this case.

Thanks in advance.

[Surendra BG]

This is a pitfall and raising  the eyebrows.. currently we do not have anyother option other than using a WPA-PSK + WEB AUTH

that is..

PSK will block the users to just grab an IP and sit!! , if the user enters a valid PSK, he will get the IP address and followed by the Web auth process!! this may help u as of now.. or just a work around.. to overcome the IP exhaustion..

Please rasie a PER with your accounts team to raise the severity on this issue if u have the contract n all with us!!

Please dont forget to rate the usefull posts!!

Regards

Surendra

[rdvorak]

Hi,

as you haven't mentioned it - have you tried to reduce the lease time on the scope.

So if the clients that only connect for a moment and never auth on the web page get removed from the DHCP pool faster to free up your pool again.

Regards,

Ron

[eng_elshreef]

Hi,

yes I tried to reduce the lease time to 15 mins and still facing the same issue.

Thanks

Ismail

[Surendra BG]

Go for WPA-PSK + WEB AUTH.. this wil help u!!

Please dont forget to rate the usefull posts!!

Regards

Surendra