Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Getting Wireless Users onto LAN

Hello All,

We currently purchased 2 AP's and a 2106 WLC and I am having some trouble getting the wireless users to communicate to the network on the other side of the WLC. Here is a very simple diagram on how this is all connected.

3750X L3 Switch --> 2106 WLC --> AP

LAN Network - 10.10.0.0/16           Wireless Users Network - 10.100.21.0/24

So with a laptop, I can get a DHCP reservation from the WLC to the 10.100.21.0/24 network. From there though, I cannot ping anything in the 10.10.0.0/16 network. I know that I am talking across two different networks so by default they shouldnt be able to communicate, but I feel like I am missing a setting on the WLC that will allow the two networks to communicate.

Management Interface:

IP Address: 10.10.20.100

Netmask: 255.255.0.0

Gateway: 10.10.0.1

DHCP Info: 10.10.20.100

Here is the config for my test interface (which may be the problem):

IP Address: 10.100.21.2

Netmask: 255.255.255.0

Gateway: 10.100.21.1

DHCP Info: 10.10.20.100

Thanks in advance for taking a look.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Getting Wireless Users onto LAN

Kyle:
If you are using default VLAN for management, you need to use to set the VLAN Identifier on the dynamic interface as 0.

If you put the VLAN  Identifier on the management VLAN as 1 then this is wrong.

If you are using DEFAULT VLAN then use the VLAN Identifier as 0 regardless of the vlan number of the default vlan that is being used.

I think there is some kind of vlan mismatch.

Sorry but I did not give detailed look to the above. just skimmed it and trying to help.

Amjad

Rating useful replies is more useful than saying "Thank you"
27 REPLIES

Re: Getting Wireless Users onto LAN

Ok let's start with the basics. The port the WLC is connected to, is it configures as a dot1q trunk with both vlan allowed?

Steve

Sent from Cisco Technical Support iPhone App

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

Re: Getting Wireless Users onto LAN

Hey Steve,

Yes it is configured as such. When I try and ping my default gateway (10.100.21.1) from the client I get destination host unreeachable.

Also, I can ping the default gateway (10.100.21.1) from any host on our LAN so InterVLAN Routing seems to be working.

Re: Getting Wireless Users onto LAN

So as a dot1q trunk if the switch gets its own tag it will drop the traffic. So if you tag the VLAN on the switch port you want to set the management to 0.

IMHO you are better off tagging the WLC then setting the switch port to a non-existent VLAN. That way if something hits I tagged it can't go anywhere.

Steve

Sent from Cisco Technical Support iPhone App

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

Re: Getting Wireless Users onto LAN

Stephen,

Do you have any additional troubleshooting ideas for me? I am still spinning my wheels

I have the trunk configured between the WLC and the 3750 switch. The trunk is allowing the two vlans, one being our LAN out to the internet and the other being the wireless user network. I can get an IP on a laptop but when attemping to ping anything I cannot, almost as if it cant find its own default gateway. I have the default gateway set on the 3750 switch, so I assume it should be able to contact it and see thats its default gateway.

From our LAN I can ping the default gateway of the wireless network so i know inter-VLAN routing is taking place.

Thanks,

Community Member

Getting Wireless Users onto LAN

Is there any other information I can provide to help anyone looking to assist with this issue?

Getting Wireless Users onto LAN

Kyle,

Are you sure you have routes on your router to allow both of these networks to talk ?

"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
___________________________________________________________
Community Member

Re: Getting Wireless Users onto LAN

Hello George,

Thanks for the reply. I believe I have routes that allow both these networks to talk, currently we are redesigning our network so bear with me as the setup is a little goofy.

The way our devices are connected in terms of the wireless configuration:

Internet <-> ASA <-> 3750 switch <-> WLC <-> AP <-> Laptop

                                      |

                                  My PC    

So, currently our default gateway for our LAN (10.10.0.1) is the inside interface of the ASA (like i said, working on changing this). On the ASA I also have a static route configured so any traffic destined for 10.100.21.0/24 send to 10.10.20.2 which is our 3750 Switch.

On the 3750 switch I set a default gateway for our wireless network of 10.100.21.1. I also configured the trunk from the post above so there is a trunk between the 3750 and the WLC allowing the LAN VLAN and Wireless VLAN to send data across it.

On our WLC I have this configured:

Management Interface:

IP Address: 10.10.20.100

Netmask: 255.255.0.0

Gateway: 10.10.0.1

DHCP Info: 10.10.20.100

Here is the config for my test interface (which may be the problem):

IP Address: 10.100.21.2

Netmask: 255.255.255.0

Gateway: 10.100.21.1

DHCP Info: 10.10.20.100

From my LAN I can ping 10.100.21.1

Our host on the wireless can get an IP, but when it attempts to ping anything (even its gateway) i get no replies.

Going back to your question of if we have routes for both networks to talk, I believe we do, unless I am missing something.

Thanks again for your reply and taking the time to look at this.

Community Member

Getting Wireless Users onto LAN

Please confirm the vlan mapping of your ssid.

I guess that you need assign a WLAN to your interface.

for example;

   your wlan id: 1

   dynamic interface-name: test

WLC command;

   config wlan disable 1

   config wlan interface 1 test

   config wlan enable 1

Highlighted
Community Member

Re: Getting Wireless Users onto LAN

Hello Masashi,

It looks like everything is configured correctly based on your example. Here is what I see on the gui:

Re: Getting Wireless Users onto LAN

Dear Kyle,

In you configuration you have configured the management interface gateway on the ASA inside interface and the dynamic interface gateway on the switch, which again have to routed through the ASA. I really dont think tat configuration will work out as the multiple WLC interface will have single mac address and the ASA will confused where to send the data

Regards

NikhiL

Community Member

Re: Getting Wireless Users onto LAN

Hello NikhiL,

That makes sense, although I dont see how this is currently a problem with only 1 AP connected. I guess I havent gotten far enough into my troubleshooting to experience the problem you are mentioning. I am taking baby steps so I figured I would first get 1 AP going and see if I can get internet connectivity and then add AP's after that.

Would the problem you are explaining be the same with only 1 AP?

Re: Getting Wireless Users onto LAN

Kyle,

I am not sure of what you mentioned about a single AP. I was talkin abt the multiple interfaces that you have created.

Did u face the issue with only 1 AP connected

Thanks

NikhiL

Community Member

Re: Getting Wireless Users onto LAN

NikhiL,

Ok, I see what you are saying. So what type of solution are we looking at, putting both the gateways on the same piece of networking equipment? Since they are in different VLANs I would assume this wouldnt be an issue but I will give whatever you have to suggest a shot.

I am still a tad confused, because if you have virtual servers they all use the same hardware MAC of the NIC but use different logical MAC's based on what they are set as, which I assume is the same scenario we are faicing here.

Sorry that it is not clicking for me, just trying to better understand.

Thanks,

Kyle

Re: Getting Wireless Users onto LAN

Kyle,

It is almost same, but here the difference in is that all the interfaces are in the WLC, hence the WLC can make the discretion

Regards

NikhiL

1204
Views
10
Helpful
27
Replies
CreatePlease to create content