Hi All
A question about mobility and ip address assignment.
I understand the need for IP address mobility, where a user can obtain an IP address and roam across multiple L2 access points and even different AP Vlan groups (part of separate ip subnets) and still maintain the same IP address because effectively the host is on a tunnel that follows the user. (that?s my concept of the technology).
I?m running a number of WiSMs in a high rise about 8 floors.
I also run 4 different AP Vlan groups in order to segment my users within a single wireless SSID. 1x AP Vlan group per ever two floors. So in effect I have 4 IP subnets looking after 8 floors.
It is my understanding that if users roam to another area of the organisation that is supported by a different set of Access points and those access points are bound to a different ?AP Vlan group?, (than the AP Vlan group they originated from), that the users IP address will not change to the new subnet unless the user completely logs off and logs back into the network forcing an IP address renewal though the AP Vlan group that their associated AP is bound to.
For some reason my users never get a new address from the new subnet, even when they have roamed from floor 1 to floor 9, they have traversed 3 different AP Vlan groups, I log the laptop out completely and log it back into the network, the wireless host still obtains its original address even thou I have checked the Access points and they are bound to a completely separate AP Vlan group and subnet.
Yes I have 4 dynamic interfaces on each of my 2 WiSM?s (4 controllers) for all 4 AP Vlan groups, in the even that a WiSM fails and the AP?s fail over to their secondary WiSM the users can still maintain connectivity though the AP Vlan that their associated AP is bound to.
My question, I?m not understanding why an Access point, that is specifically setup and bound to AP Vlan group <2> would allocate an address from AP Vlan Group <1> even thou the user has completely logged out and logged in to an associated to an AP that is part of the AP Vlan Group <2>
Is there a command to not cache users mac to IP relationship?
Is there a way that I can get the wism not to allocate the original IP address but rather check the AP Vlan group the access point is bound to and allocate an address from that pool ?
Or could the Session timeout under the SSID in the WiSM play a role in this ?
Could my 802.1x NAC solution be affecting this in any way? Ie long pac TTL
I know this is catch-22, the whole point of mobility is to have your Layer 3 address following you but the system should still allocate a new address once a release and renew has been initiated. Shouldn?t it ?
Regards,
Dale
P.S. if you wondering why I want this, we have login scripts that are based on IP address so if a user is allocated an address from the address pool that looks after floors 8 and 9, the user is allocated the printers for that floor.
