Hello,

I have a site with 8 EAP245's. I got three SSID's, each with its own subnet (vlan), one of them being for guests. I realized that communication with the DCHP server wasn't always properly communicating for that subnet: the AP blocks DHCP request and ack.  The other SSIDs are fine. Since "guests" net is the only one for which access control is set, I messed around with it, and for now I have the following:

Router --> All the IP groups, allow

all the IP groups  --> Router, allow

SSID guests --> IP group guests, deny. (client isolation)

Then, I realized that, it works on some APs, but not everywhere, my laptop doesn't get an IP address at some APs when it's on guests-net, but at some other APs, it does.

I was actually broadcasting three SSIDs on 2 APs, and only two (without Admin) on the others. It looked like that's the only difference between the "good" APs and "bad" ones.

(but I can't test at all the locations)

So in the end, I decided to broadcast all the SSIDs on all the APs. Then now it seems working at more APs, including the ones where it didn't work before: I connect my laptop on guests and I do get an IP address. But I think broadcasting of ssid is totally irrelevant, and earlier it happened that I changed something, and it worked, then after a while, it stopped working. So I am afraid that it might not be the permanent solution.

I also realized that some APs have Mac starting with 10:27:F5, some 60:A4:B7, and one of them is B4:B0:24. I wonder if they were made in different places, and thus have slight difference in performance ?

In all, I'm pretty confused as to what is happening. I would appreciate if someone could please explain to me what's going on....