Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

WLC and DHCP - overlapping addresses

Hi,

I have a requirement for two customers who are using different ssid from the same wlc. Thing is they want to use the same ip subnet for their wireless clients.

I have a VRF aware infrstructure behind the wlc so overlaps here are not a problem. Also, if i manually configure a client on both wlans with the same address, they both work fine and vrf does its job in the routing.

The only problem I have is with the dhcp. because I cant configure overlapping adresses on the interfaces of the WLC, I cant get it to do dhcp relay.

If i configure an arbiary address on the wlc interfaces and configure the dhcp server to be the next hop vrf enabled router (which is configured with an address in the correct subnet for the wireless clients and a helper-address pointing to the real dhcp server which is not on my network).

Then i just need to change the giaddr in the packet to the address of the vrf interface and punt it on its way, this should work.

Is it possible to do this ? I have investigated the 'ip dhcp relay information option vpn' which might do the job, but the documentation says it only works with broadcasts and not relayed unicasts.

And i cant see any way of stopping the wlc from using dhcp proxy, if i could get it to broadcast then problem solved.

so...

anyone know if it is......

Possible to change the giaddr in this way

or

Possible to get the wlc to broadcast for dhcp resolutions.

Cheers

Shaun

2 REPLIES
Bronze

Re: WLC and DHCP - overlapping addresses

You can use the same dyanmic interface in two WLANs. So you can put two SSID users into the same subnet. Is that what you are looking for?

Zhenning

New Member

Re: WLC and DHCP - overlapping addresses

Hi Zhenning, thanks for the quick reply.

I need to keep them seperated from each other in terms of security. I think putting them both onto the same interface would allow them to see each other.

each interface as it stands now has an associated .1q trunk. which in turn has a layer 3 interface on a vrf enabled svi. This allows me to keep their traffic seperate, allow the use of overlapping ip's and route their traffic to differing next hop routers.

all i need is a method of getting the wlc to either transparently broadcast the dhcp requests (no relay) from the clients to the wired side or some method of changing the gateway address in the relay packet after it leaves the wlc and hits the vrf enable layer 3 interface on the switch/router. This can then forward it on the the real server.

Cheers

Shaun

304
Views
0
Helpful
2
Replies