vWLC clients getting DHCP address from management VLAN
We have a strange scenario whereby some wireless employees are obtaining addresses from the management VLAN.
DHCP managed by MS DHCP 2008 R2 (in remote data centre)
Cisco vWLC AIR-CTVM-K9 running v188.8.131.52
AP's are a mix of 2602 and 3702 (46 and 2 of each respectively)
SSID's are employee, guest, and production devices (all mapped to their own interface with relevant VLAN tag as per normal)
AP's all in FlexConnect mode as per vWLC caveats
Some employees are receiving addresses in the wireless management VLAN. This network only has six DHCP addresses available as it is solely for AP's, WLC and HSRP gateway. Obviously this gets exhausted very quickly leaving us with a scenario where clients are not obtaining DHCP addresses.
I understand that with FlexConnect mode, it will assign IP's from the native VLAN. What I don't understand is why most clients receive addresses in the correct VLAN, but a handful do not, and then cannot get an address from DHCP. Obviously the ideal scenario would be to put the AP's into local mode but unless this has changed in a SW release then I don't believe it's possible...
My question is: How do I get ALL the employees to obtain addresses from their interface and not the management VLAN?
I managed to identify the problem. The cause of the issue was the FlexConnect groups. Most of the AP's were in a FlexConnect group with the WLAN-VLAN mapping in place. Some AP's did not have this mapping and were getting their addresses from the native VLAN which as we know is the default for the FlexConnect mode.
Thanks again, hopefully this article can help people in future who experience the same issue.