Controllerless Networks

Hi,

I recently deployed an Aruba IAP. I setup the IAP with 3 SSIDs and let the users get an IP address from external DHCP server (Cisco L3 Switch). 2 of those SSIDs are working fine but one of them has an issue. Some of the devices connecting to that specific SSID had encountered difficulties on getting IP address while other laptops and cellular phone are good. All those SSID were setup the same. All three of them were configured to draw IP from a network assigned static VLANs and the authentication is only PSK. Could someone help me with this issue. Any idea how to pin point the issue?

Thanks in advance.

Anyone has an idea on this issue. Thanks

Make sure that all of the switches connected to your Aruba IAPs are trunked with the correct user VLANs.

Hi CJoseph,

Thank you for you reply. I actually configured it fine. Not all the clients have this issue, only some of them.

Any thoughts?

Does the problem follow the clients, or the access points?

Hi Cjoseph,

I am not sure of what do you mean by that. But I think it follows the client since this issue happens on some device but not all. I also tried to disconnect a client on the GUi with APIPA IP address then eventually, it will get a valid IP on that VLAN assigned on the SSID. My client's worry is if other devices experience the same problem, the work of disconnecring them on the gui will be a tideous and unnecessary.

Understood.

Do you have more details on the clients that this affects?

Are you using encryption for that SSID?

Do you have 802.11k, v, r enabled on that SSID?

Hi CJoseph

I don't have details from the client yet since we are still on a community quarantine.

For the encryption, I used WPA-Personal (Boh TKIP and AES encryption).

I just enabled 802.11k and v. 802.11r disappeared when I change the key management from WPA-2 personal to WPA personal.

Thank you for your support.

Hi,

We did a debugging on the IAP and on the client using wireshark. We found out that the DHCP process is already completed based on the debug logs of the AP and packet capture of the client.

And still the client appears to have 169.X.X.X IP address on the GUI and on the device itself. They only experience this on only one SSID so we check on the VLAN and DHCP server (core switch) then reconfigured it but the error is still there. We also tried to assigned that particular SSID on a different VLAN and the clients were able to get valid IP address.

Any ideas to resolve this? Thank you

Something is missing here.  When you say "completed", did the client see the dhcp request, offer, etc?  Do you have the firewall policy as "allowall" on that SSID?

Client saw the offer from the dhcp server and the client requested the ip offered. It was then acknowledged by the DHCP server. The whole process was seen on both the IAP and the client device thru wireshark. All SSID are almost identical including the unrestricted access which means it has a firewall rule "allowall" setup. The only difference is their client's VLAN assignment which is network assigned. The core switch serves as the DHCP server.