Wireless Clients not getting IP address on certain VLANs
Wireless Clients not getting IP address on certain VLANs
Hi there
Issues:
Wireless clients are unable to connect to SSID with VLANs. Looks like a DHCP issue.
Here's my setup
ER706W> SG2218>EAP650 (US) v1.0
Firmwares are all up to date.
VLANs:
1-LAN
20-Parents
30-Guests
40-IoT
50-Kids
DHCP server: Enabled on all VLANs
The rest of the VLANs are created with the same setting as above.
My VLANs overview:
VLAN interface under SG2218: Enabled for all
Port Profile: Created by default. Set 'All' profile to all switch ports including the AP (Port 7)
Wifi Setup:
I'm using PPSK without radius.
What I have attempted:
Removing EAP650 from the setup: To my surprise, I'm able to connect to ssid (broadcasted by er706w) without any issues. Able to get ip address for each and every vlans assigned.
I figure this is probably a EAP firmware issues so I setup SSID with VLAN assigned (broadcasted by EAP only). And, only VLAN 20, 50 works. The rest just refused to handout IP addresses to the clients.
I also tried connecting EAP650 directly to the gateway. No luck.
Any idea?
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
I dig a little deeper.
Actually only 1-LAN doesn't work on EAP only if I specific VLAN-1 on the SSID. If I leave it blank, that SSID works just fine.
So I just left VLAN 1 alone, mainly for AP/switches management. A single SSID (no vlan specified) will default to vlan1
All other vlans works as expected now on ppsk.
- Copy Link
- Report Inappropriate Content
since it works on the ER706w, you probably don't have vlan enabled on the interface that is connected to the switch.. can you show screenshots of one of the interfaces that doesn't work.
but make sure all ports are enabled on all vlans
- Copy Link
- Report Inappropriate Content
Thanks for looking into my issue.
LAN4 on ER706w is connected to the switch on Port 1 (Uplink)
All the VLANs configured has LAN4 enabled as the interface on ER706w.
Both Port 1 (uplink) and Port 7 (AP) on SG2218 has "All" profile assigned so I expect all vlans to pass through this port and then to the ssid.
If the ports are misconfigured somewhere somehow, how come Port 9 which is my PC, I am able to receive the ip from 1-LAN. On the other hand, I'm not able to connect to 1-LAN wirelessly (no ip address) if I try to connect to ssid broadcasted from that eap
- Copy Link
- Report Inappropriate Content
show me screenshots of all vlan interface config, what you show me tells me nothing.
show me this on all vlans
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
ok, then I have the whole picture I think :-) there is no reason why this should not work on EAP650 but works on ER706w have you configured anything else on the controller, switch/EAP acl for example that could cause problems for you?
- Copy Link
- Report Inappropriate Content
Exactly. I have no clue. I spend hours troubleshooting. Reset, readopting. Reinstalling the controller. Changing the cable, trying different ports. No avail.
Those are the only things I configured. No ACLs.
Hope the devs can look into this and provide more insights.
- Copy Link
- Report Inappropriate Content
yes, it seemed strange, I have a small lab with roughly the same setup as you, it has always worked, what happens there is a mystery,
i have EAP653 but it is about the same as EAP650.
as you can see, everything is about the same, I also use PPSK.
but can you try to create an SSID without PPSK and put vlan on the SSID
- Copy Link
- Report Inappropriate Content
I dig a little deeper.
Actually only 1-LAN doesn't work on EAP only if I specific VLAN-1 on the SSID. If I leave it blank, that SSID works just fine.
So I just left VLAN 1 alone, mainly for AP/switches management. A single SSID (no vlan specified) will default to vlan1
All other vlans works as expected now on ppsk.
- Copy Link
- Report Inappropriate Content
ok so all vlans work except vlan1, when I look between your config it's not so strange. remove 1 in vlan on your ppsk users. if it says 1 there it will not work on vlan1 on vlan1 you should not put anything since it is a deafult vlan
this is how it should look on vlan1 access
why it worked on the ER706w is still a mystery. it shouldn't work there either if vlan1 has been the problem all along
- Copy Link
- Report Inappropriate Content
@MR.S Yes you're right. Thanks a lot!
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 536
Replies: 11
Voters 0
No one has voted for it yet.