2960 POE acting as a dhcp server

                   I have a 2960 POE 24 switch acting as a DHCP server
for a WLC 4402 and six Aironet APs. I cant get the APs to aquire
an address. At least when I check the switch by doing a sh dhcp
lease it shows nothing. Here is the commands I used to set it up
on the switch.
ip dhcp excluded-address 192.168.50.1 255.255.255.0
ip dhcp pool wireless
   network 192.168.50.0 255.255.255.0
   domain-name newtonma.gov
   default-router 192.168.50.1
   lease 4
Here is an example of one of the interfaces
interface FastEthernet0/1
switchport trunk native vlan 10
switchport mode trunk
The Vlan for wireless
interface Vlan10
ip address 192.168.50.1 255.255.255.0
ip helper-address 192.168.50.1
no ip route-cache
Any help would be appreciated

Hi
You can remove the helper address as the DHCP server is on the switch itself. A helper address is only needed when the DHCP server is another device than the one the default gateway sits on.
The interface example you gave above, is that the interface to one of the Access Points or to the WLC?
Assuming the Access Points are not in Flex Connect mode, they only need to be access ports (i.e not trunks) as the traffic is tunneled back to the WLC.
The config for each AP would be:
#interface fa0/1
#switchport mode access
#switchport access vlan 10
The config for the WLC would be:
#interface fa0/10
#switchport mode trunk
I would leave the Native Vlan as 1 (i.e remove the command) or at least change it to something other than Vlan10.
The DHCP excluded address could be causing an issue as there is no need for a subnet mask if you simply want to exclude a single address.
#ip dhcp excluded-address 192.168.50.1

Similar Messages

  • How to use "DHCP Server"?

    Hi,
    I don't know how to use DHCP Server.
    #Features > Networking > Network Management > DHCP Server
    There seems to be no item to setting a DHCP Server in the Administrative Tools.
    Is there function to which installation is necessary to use DHCP Server.
    Thanks,

    DHCP server role is typically for Windows Server, but you can get some DHCP capability when you enable Internet Connection Sharing -http://answers.microsoft.com/en-us/windows/forum/windows_7-networking/make-windows-7-act-as-a-dhcp-server/8ff345f2-99b5-4670-bb6f-32d7bb63de3c
    Sean Liming - Book Author: Starter Guide SIM (WEI), Pro Guide to WE8S & WES 7, Pro Guide to POS for .NET - www.annabooks.com / www.seanliming.com

  • WLC 5508 Internal DHCP server issues

    Hi,
    I am hoping to get your feedback around the dhcp issues I am facing with Two Centrally Switched Wireless LANs. I have tried to explain the setup and the problems below and would appreciate it if anyone can suggest a solution for the problems I am facing:
    The setup is as follows:
    - I have a WLC 5508 which has been configured with 4 SSIDs, out of which 2 are using Central Authentication and Switching.
    - I have an LWAP connected to the WLC in HREAP mode.
    - WLC is configured as the DHCP server for clients connecting to the SSID 'Guest'. For the rest, I am using external dhcp server.
    - Only one scope for Guest Interface is setup on the WLC. 
    Problems:
    1. As far as I know, for WLC to act as internal dhcp server, it is mandatory to have the proxy enabled, but the Clients connecting to SSID 'Internet' are
    unable to get an ip address from the external dhcp server, if dhcp proxy is enabled on the WLC. If i disable the proxy, it all works fine.
    2. DHCP does not release the ip addresses assigned to clients even after they are logged out.
    3. If a machine which was earlier connected to 'Guest' SSID connects to the 'Internet' SSID, it requests the same ip it was assigned by the WLC which it was assigned under 'Guest', but gets tagged with the Vlan configured on the management interface.  
    ************Output from the Controller********************
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.0.116.0
    Bootloader Version............................... 1.0.1
    Field Recovery Image Version..................... 6.0.182.0
    Firmware Version................................. FPGA 1.3, Env 1.6, USB console 1.27
    Build Type....................................... DATA + WPS + LDPE
    (Cisco Controller) >show interface summary
    Interface Name                   Port Vlan Id  IP Address         Type        Ap Mgr        Gu                                                                            
    est
    guest                                        1    301      10.255.255.30    Dynamic   No              No                                                                            
    management                          1    100      172.17.1.30        Static          Yes            No                                                          
    service-port                              N/A  N/A      192.168.0.1       Static         No               No                                                                            
    virtual                                        N/A   N/A      10.0.0.1              Static         No               No                                                                            
    (Cisco Controller) >show wlan summary
    Number of WLANs.................................. 4
    WLAN ID  WLAN Profile Name / SSID               Status    Interface Name
    1        LAN                                    Enabled   management
    2        Internet                               Enabled   management
    3        Managment Assets          Enabled   management
    4        Guest                                  Enabled   guest
    (Cisco Controller) >show dhcp detailed guest
    Scope: guest
    Enabled.......................................... Yes
    Lease Time....................................... 86400 (1 day )
    Pool Start....................................... 10.255.255.31
    Pool End......................................... 10.255.255.254
    Network.......................................... 10.255.255.0
    Netmask.......................................... 255.255.255.0
    Default Routers.................................. 10.255.255.1  0.0.0.0  0.0.0.0
    DNS Domain.......................................
    DNS.............................................. 8.8.8.8  8.8.4.4  0.0.0.0
    Netbios Name Servers............................. 0.0.0.0  0.0.0.0  0.0.0.0
    (Cisco Controller) >show interface detailed management
    Interface Name................................... management
    MAC Address...................................... e8:b7:48:9b:84:20
    IP Address....................................... 172.17.1.30
    IP Netmask....................................... 255.255.255.0
    IP Gateway....................................... 172.17.1.1
    External NAT IP State............................ Disabled
    External NAT IP Address.......................... 0.0.0.0
    VLAN............................................. 100
    Quarantine-vlan.................................. 0
    Active Physical Port............................. 1
    Primary Physical Port............................ 1
    Backup Physical Port............................. Unconfigured
    Primary DHCP Server.............................. 172.30.50.1
    Secondary DHCP Server............................ Unconfigured
    DHCP Option 82................................... Disabled
    ACL.............................................. Unconfigured
    AP Manager....................................... Yes
    Guest Interface.................................. No
    L2 Multicast..................................... Enabled
    (Cisco Controller) >show interface detailed guest
    Interface Name................................... guest
    MAC Address...................................... e8:b7:48:9b:84:24
    IP Address....................................... 10.255.255.30
    IP Netmask....................................... 255.255.255.0
    IP Gateway....................................... 10.255.255.1
    External NAT IP State............................ Disabled
    External NAT IP Address.......................... 0.0.0.0
    VLAN............................................. 301
    Quarantine-vlan.................................. 0
    Active Physical Port............................. 1
    Primary Physical Port............................ 1
    Backup Physical Port............................. Unconfigured
    Primary DHCP Server.............................. Unconfigured
    Secondary DHCP Server............................ Unconfigured
    DHCP Option 82................................... Disabled
    ACL.............................................. Unconfigured
    AP Manager....................................... No
    Guest Interface.................................. No
    L2 Multicast..................................... Enabled
    (Cisco Controller) >show dhcp leases
           MAC                IP         Lease Time Remaining
    00:21:6a:9c:03:04    10.255.255.46    23 hours 52 minutes 42 seconds        <<<<<<< lease remains even when the client is disconnected.
    *********Example of Client connected to the right Vlan with an ip address from the incorrect interface. *************
    (Cisco Controller) >show client detail 00:21:6a:9c:03:04
    Client MAC Address............................... 00:21:6a:9c:03:04
    Client Username ................................. N/A
    AP MAC Address................................... a0:cf:5b:00:49:c0
    AP Name.......................................... mel
    Client State..................................... Associated
    Client NAC OOB State............................. Access
    Wireless LAN Id.................................. 2                 <<<<<<<<   'Internet' SSID
    BSSID............................................ a0:cf:5b:00:49:ce
    Connected For ................................... 319 secs
    Channel.......................................... 36
    IP Address....................................... 10.255.255.46      <<<<<<< IP address assigned from the 'Guest' Interface or dhcp scope on the WLC
    Association Id................................... 1
    Authentication Algorithm......................... Open System
    Reason Code...................................... 1
    Status Code...................................... 0
    Session Timeout.................................. 1800
    Client CCX version............................... 4
    Client E2E version............................... 1
    QoS Level........................................ Silver
    802.1P Priority Tag.............................. disabled
    WMM Support...................................... Enabled
    Power Save....................................... OFF
    Mobility State................................... Local
    Mobility Move Count.............................. 0
    Security Policy Completed........................ Yes
    Policy Manager State............................. RUN
    Policy Manager Rule Created...................... Yes
    ACL Name......................................... none
    ACL Applied Status............................... Unavailable
    Policy Type...................................... N/A
    Encryption Cipher................................ None
    Management Frame Protection...................... No
    EAP Type......................................... Unknown
    H-REAP Data Switching............................ Central       <<<<<<<<<
    H-REAP Authentication............................ Central       <<<<<<<<<<
    Interface........................................ management
    VLAN............................................. 100           <<<<<<<<<<< right Vlan
    Quarantine VLAN.................................. 0
    Access VLAN...................................... 100

    Hi All,
    I have a similar issue where Wireless clients are not receiving automatic addressing from an internal DHCP server. I have multiple interfaces configured on the WLC which are connected to separate VLANS. The manually specified DHCP primary server entry is the same on all interfaces. Some clients are able to authenticate and receive automatic IP configuration but some clients are failing the address assignment process. I have checked connectivity between the WLC and DHCP server, this is confirmed as working. When I carry out a "debug dhcp packet enable", I get the following outputs which seems as if the DHCP discover request from the client is skipped. Your thoughts and inputs on this are appreciated.
    DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option len (including the magic cookie) 76
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: message type = DHCP DISCOVER
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: 116 (len 1) - skipping
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: 61 (len 7) - skipping
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: requested ip = 169.254.223.5
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: 12 (len 13) - skipping
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: vendor class id = MSFT 5.0 (len 8)
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: 55 (len 11) - skipping
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option: 43 (len 2) - skipping
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP options end, len 76, actual 68
    *DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP Forwarding DHCP packet (332 octets) packet DHCP Socket Task: Nov 07 11:16:09.174: 00:22:fb:7b:37:32 DHCP option len (including the magic cookie) 76
    Thanks,
    Raj Sandhu

  • DHCP Server Daemon for Aironet

    Hi,
    does Cisco Aironet acts as a DHCP server for the wireless client?
    Thanks.

    Nope...Cisco Access Points can't work as a DHCP server for the wireless clients..Tejal

  • AP1041N - DHCP server

    I am wondering if the Cisco Aironet AP1041N can issue IP addresses and act as a DHCP server.
    Also how many IP addresses can it issue, if it can?
    I am reevaluating a network for a small business, and they have a lot of concrete walls and their current home-based wireless routers don't suffice. I thought getting a standalone Aironet or two could help improve their situation.
    Let me know what you think or if you have any suggestions. Thanks!

    Yes It Does!!! but there is a draw back.. the AP can serve the IP the clients in the smae subnet as the management!!
    That is.. if the BVI interface is on VLAN XX, then the clients can get the IP only in XX VLAN subnet.. not from any other!!
    http://www.cisco.com/en/US/docs/wireless/access_point/12.4_21a_JA1/configuration/guide/scg12421aJA1-chap5-admin.html#wp1090319
    Please dont forget to rate the usefull posts!!
    Regards
    Surendra

  • ASA as DHCP server for WLC2106 and LAP

    Hi,
    First off i aplolgize for asking something that seems to have been asked before but i am getting conflicting answers and wanted someone to give a definitive answer.
    Setup:
         ASA5505  ---------------- WS-C3750G -----------------WLC2106  -------------------------------AIR-LAP1131
    (DHCP SERVER)           (simple config)          (dhcp proxy disabled)           (is requesting dhcp from ASA)
    ASA5505 - ASA 8.2(1)
    WLC2106 - 7.0.98.0 (tried 6.0.99.4 as well)
    AIR-LAP1131 - 12.4(23c)JA
    Problem:
    The ASA5505 is giving addresses to multiple devices, i tested it with the AP plugged directly into the ASA and it worked great.  The problem is that the WLC2106 seems to be altering the DHCP requests somehow and thus making the ASA5505 not respond to them.  The AP gets an ip address and associates to the WLC if plugged into the 3750, or the ASA directly.  Just not when plugged into the WLC2106 ports.
    Research:
    https://supportforums.cisco.com/message/1268269#1268269
    https://supportforums.cisco.com/message/3037259#3037259
    https://supportforums.cisco.com/message/1302468#1302468
    https://supportforums.cisco.com/message/926529#926529
    I have read quite a few posts with people basically saying you cannot use the ASA as the DHCP server with the WLC because of how the WLC relays the requests.  BUT: (this is important)  There are some documents that say with WLC version 4.2 and above you have the option of turning off dhcp proxy mode to enable bridging mode thus elminating the probem and all DHCP requests get forwarded without modification.  Please see here for suggested solution to this issue:
    http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080af5d13.shtml#topic2
    *Interoperability issues can exist between a controller with DHCP proxy enabled and devices acting as both a firewall and DHCP server. This is most likely due to the firewall component of the device as firewalls generally do not respond to proxy requests. To work around this issue, disable DHCP proxy on the controller.
    Help please:
    I have tried this but maybe im missing something.  I have tried with proxy enabled and disabled.  Can anyone verify this is supposed to work for me please?  I input "config dhcp proxy disable" and verified proxy is now disabled.  Yet i do not see any responces from my DHCP server to my AP's requests when going through the WLC.  It works fine when plugging the AP into the ASA or 3750.  DHCP server is working.  Is the above suggested work around not a valid solution?  Did i miss something?  Do i need specific software versions on my devices?  Is this a bug in my software versions?
    Any help is greatly appreciated.  Let me know if anyone has questions.  Thanks,
    Kyle

    I do not see any debug output on the ASA5505 when the AP is connected through the WLC.  Debug output from WLC2106 below:
    (Cisco Controller) >show debug
    MAC debugging .............................. disabled
    Debug Flags Enabled:
      dhcp packet enabled.
    (Cisco Controller) >
    (Cisco Controller) >
    (Cisco Controller) >show dhcp proxy
    DHCP Proxy Behaviour: disabled bootp-broadcast disabled
    (Cisco Controller) >
    (Cisco Controller) >*DHCP Socket Task: Nov 16 10:56:39.931: 00:1d:a1:ed:c8:d4 DHCP received op BOOTREQUEST (1) (len 310,vlan 0, port 8, encap 0xec00)
    *DHCP Socket Task: Nov 16 10:56:39.932: 00:1d:a1:ed:c8:d4 DHCP processing DHCP DISCOVER (1)
    *DHCP Socket Task: Nov 16 10:56:39.932: 00:1d:a1:ed:c8:d4 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
    *DHCP Socket Task: Nov 16 10:56:39.932: 00:1d:a1:ed:c8:d4 DHCP   xid: 0x126b (4715), secs: 0, flags: 80
    *DHCP Socket Task: Nov 16 10:56:39.932: 00:1d:a1:ed:c8:d4 DHCP   chaddr: 00:1d:a1:ed:c8:d4
    *DHCP Socket Task: Nov 16 10:56:39.933: 00:1d:a1:ed:c8:d4 DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:56:39.933: 00:1d:a1:ed:c8:d4 DHCP   siaddr: 0.0.0.0,  giaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:56:39.933: 00:1d:a1:ed:c8:d4 DHCP dropping REQUEST from STA with invalid mobility state 'Unassociated' (0)
    *DHCP Socket Task: Nov 16 10:56:42.939: 00:1d:a1:ed:c8:d4 DHCP received op BOOTREQUEST (1) (len 310,vlan 0, port 8, encap 0xec00)
    *DHCP Socket Task: Nov 16 10:56:42.940: 00:1d:a1:ed:c8:d4 DHCP processing DHCP DISCOVER (1)
    *DHCP Socket Task: Nov 16 10:56:42.940: 00:1d:a1:ed:c8:d4 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
    *DHCP Socket Task: Nov 16 10:56:42.940: 00:1d:a1:ed:c8:d4 DHCP   xid: 0x126b (4715), secs: 0, flags: 80
    *DHCP Socket Task: Nov 16 10:56:42.940: 00:1d:a1:ed:c8:d4 DHCP   chaddr: 00:1d:a1:ed:c8:d4
    *DHCP Socket Task: Nov 16 10:56:42.941: 00:1d:a1:ed:c8:d4 DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:56:42.941: 00:1d:a1:ed:c8:d4 DHCP   siaddr: 0.0.0.0,  giaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:56:42.941: 00:1d:a1:ed:c8:d4 DHCP dropping REQUEST from STA with invalid mobility state 'Unassociated' (0)
    *DHCP Socket Task: Nov 16 10:56:46.938: 00:1d:a1:ed:c8:d4 DHCP received op BOOTREQUEST (1) (len 310,vlan 0, port 8, encap 0xec00)
    *DHCP Socket Task: Nov 16 10:56:46.938: 00:1d:a1:ed:c8:d4 DHCP processing DHCP DISCOVER (1)
    *DHCP Socket Task: Nov 16 10:56:46.938: 00:1d:a1:ed:c8:d4 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
    *DHCP Socket Task: Nov 16 10:56:46.938: 00:1d:a1:ed:c8:d4 DHCP   xid: 0x126b (4715), secs: 0, flags: 80
    *DHCP Socket Task: Nov 16 10:56:46.939: 00:1d:a1:ed:c8:d4 DHCP   chaddr: 00:1d:a1:ed:c8:d4
    *DHCP Socket Task: Nov 16 10:56:46.939: 00:1d:a1:ed:c8:d4 DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:56:46.939: 00:1d:a1:ed:c8:d4 DHCP   siaddr: 0.0.0.0,  giaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:56:46.939: 00:1d:a1:ed:c8:d4 DHCP dropping REQUEST from STA with invalid mobility state 'Unassociated' (0)
    *DHCP Socket Task: Nov 16 10:57:05.034: 00:1d:a1:ed:c8:d4 DHCP received op BOOTREQUEST (1) (len 310,vlan 0, port 8, encap 0xec00)
    *DHCP Socket Task: Nov 16 10:57:05.035: 00:1d:a1:ed:c8:d4 DHCP processing DHCP DISCOVER (1)
    *DHCP Socket Task: Nov 16 10:57:05.035: 00:1d:a1:ed:c8:d4 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
    *DHCP Socket Task: Nov 16 10:57:05.035: 00:1d:a1:ed:c8:d4 DHCP   xid: 0x126c (4716), secs: 0, flags: 80
    *DHCP Socket Task: Nov 16 10:57:05.035: 00:1d:a1:ed:c8:d4 DHCP   chaddr: 00:1d:a1:ed:c8:d4
    *DHCP Socket Task: Nov 16 10:57:05.036: 00:1d:a1:ed:c8:d4 DHCP   ciaddr: 0.0.0.0,  yiaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:57:05.036: 00:1d:a1:ed:c8:d4 DHCP   siaddr: 0.0.0.0,  giaddr: 0.0.0.0
    *DHCP Socket Task: Nov 16 10:57:05.036: 00:1d:a1:ed:c8:d4 DHCP dropping REQUEST from STA with invalid mobility state 'Unassociated'
    It keeps seeing the Discover messages but never gets any responce from the ASA.  What does that message mean "dropping REQUEST from STA with invalid mobility state 'Unassociated'" ?  I know the STA is the AP but why is it dropping the request?
    Here is the debug output from the ASA:
    ASA5505lab#  show debug
    debug dhcpd packet enabled at level 128
    debug dhcpd event enabled at level 128
    ASA5505lab#
    DHCPD: checking for expired leases.
    DHCPD: checking for expired leases.
    DHCPD: checking for expired leases.
    DHCPD: checking for expired leases.
    DHCPD: checking for expired leases.
    DHCPD: checking for expired leases.
    (IT NEVER SEE'S ANY MESSAGES OR SHOWS ME ANY BLOCKED REQUESTS OR ANYTHING)
    (Now if i move the AP to the PoE ports directly on the ASA5505 you will see the AP get an IP)
    DHCPD: Server msg received, fip=ANY, fport=0 on inside interface
    DHCPD: DHCPDISCOVER received from client 0100.1da1.edc8.d4 on interface inside.
    DHCPD: Sending DHCPOFFER to client 0100.1da1.edc8.d4 (192.168.143.4).
    DHCPD: Total # of raw options copied to outgoing DHCP message is 0.
    DHCPD: broadcasting BOOTREPLY to client 001d.a1ed.c8d4.
    DHCPD: Server msg received, fip=ANY, fport=0 on inside interface
    DHCPD: DHCPREQUEST received from client 0100.1da1.edc8.d4.
    DHCPD: Sending DHCPACK to client 0100.1da1.edc8.d4 (192.168.143.4).
    DHCPD: Total # of raw options copied to outgoing DHCP message is 0.
    DHCPD: broadcasting BOOTREPLY to client 001d.a1ed.c8d4.
    ASA5505lab#
    ASA5505lab# show dhcpd binding
    IP address       Hardware address        Lease expiration        Type
      192.168.143.4    0100.1da1.edc8.d4            3581 seconds    Automatic
      192.168.143.5  0063.6973.636f.2d30.           1911 seconds    Automatic
                     3031.662e.3965.6234.
                     2e35.3034.302d.566c.
                     31
    ASA5505lab#
    ASA5505lab#
    So the ASA5505 is working when the AP is plugged directly into the ASA or a 3750 on the same network.  Only when connected through the WLC i do not see any messages on the ASA.  Is there something else i need setup on the WLC2106 besides turning off dhcp proxy?
    Thanks,

  • Ccum 9.1 as DHCP server

    Hello,
           In my lab I have Cisco Catalyst Express 500 POE switch and vmware workstation 10 with 2 virtual machines Windows 2008 R2 acting as dns server and CUCM 9.1 which is acting as DHCP server as well, both the virtual machines as briged to the physical network and able to ping each other and the host operating system as well. The switch is configured with 2 vlans namely DATA 20  AND VOICE 30 all the ports are added to both the Vlan. THE PROBLEM IS WHEN I PUT THE PC ON ANY OF THE PORT THE IP ADDRESS IS ACQUIRED BUT WHEN THE PHONE IS ATTACHED DIRECTLY TO THE SWITHC PORT IT DOESNT ACQUIRES THE IP ADDRESS.
    Thanks
    Syed

    interface FastEthernet1/0/1
    switchport access vlan 20
    switchport mode access
    switchport voice vlan 30
    mls qos trust device cisco-phone
    mls qos trust cos
    spanning-tree portfast
    conf t
    service dhcp
    cdp enable
    cdp timer 5
    cdp advertise v2

  • Can I use DHCP snooping and IOS DHCP server on the same switch stack

    Hello,
    I am shortly going to be deploying a Cisco CallManager solution for a customer whose network comprises stacks of Catalyst 3850 switches.
    There is no separate core/server farm switch so the CallManager servers, voice gateways and IP phones will all plug into the same stack and be in the same VLAN (not my choice!).
    For security we want to enable DHCP snooping and were planning on using the IOS DHCP server on the Catalyst switch stack.
    Will this work? - when I enable DHCP snooping in networks with separate access layer switches I set the uplinks to the core as trusted links.
    I am not sure whether DHCP snooping will work in this case. Do I need to set the VLAN interface on the switch as trusted, is this even possible?
    Unfortunately I do not have access to a layer 3 switch to test this at the moment.
    Thanks

    Nope.  That's the issue.
    They'll sync on a third device acting as a hotspot, but the device sending a signal is not "on" the network it creates so the airport is all by itself on that network.  At least that is what it looks like to me.  Anyone have another take on it?  Seems pretty silly that an iPad can put out a wifi signal, an Airport Express can receive a wifi signal, and yet there is no simple way to get them to communicate under this particular condition.

  • Can you use the Airport Express A1264 as an AP and a DHCP server at the same time?

    Can you use the Airport Express A1264 as an Access Point and a DHCP server at the same time?
    I would like to use it as a DHCP server and AP at the same time in my LAN (no internet, just local machines through a few switches). I was lead to belive this could be the case from a few networking friends that haven't been friendly enough to help me out setting it up.

    I need it to act as a dLink/Cisco/Linksys/etc basic wifi router, in the fact that you can access it via wifi, and it will spit out DHCP addresses (192.168.1.xxx) to everything wired downstream of it.
    I want to simultaniously provide a Wifi connection and a LAN connection at the same time
    Thanks,
    BRad

  • I want to disable the DHCP server on HH3 and use l...

    Hi, i live in a flat with 5 other people so i have my HH3 connected to a linksys wrt5gl so that i can use the QoS capbilities of the linksys (tomato firmware). The linksys router can also limit bandwidth per ip address IF its also the DHCP server. When i disable the DHCP on the HH3 and enable it on the linksys the internet no longer works on any of the PC's, but if i have the DHCP on the hh3 i cannot limit bandwidth per ip on the linksys.
    In the flat before this i managed to set this up fine (wasnt with the HH3- some other router) just need some advice on how to disable DHCP on the HH3 and enable it on the linksys wrt5gl whilst still being able to connect to the net.
    Here is how its set up atm:
    Phone line>>>HH3 (assighns IP through DHCP)>>>Linksys (data goes through QoS)>>>PC's/laptops/consoles in flat
    Here is how i want it set up:
    Phone line>>>HH3 (Acts as a modem)>>>Linksys (assighns IP through DHCP to allow bandwidth limiting /data goes through QoS)>>>PC's/laptops/consoles in flat
    thanks in advance, sorry if this is hard to understand- im not so good at putting the problem into words
    Solved!
    Go to Solution.

    Hi,
    Don't know to be honest......but as an idea....you will have to disable DHCP server on the hub, apply a static ip to the Linksys, 192.168.1.100. You'll then need to set up DHCP on the Linksys....start ip 192.168.1.64 end 192.168.1.253, you'll need to add a subnet 255.255.255.0, then the gateway.....192.168.1.254 that's the ip address of the HH and that could be the real problem as normally the default gateway for DHCP on routers is the routers ip address.
    So the chandes of it working are slim.....however you dont have to use your HH on your BT broadband you can use another make/model. 
    One option to use with that router is a Draytek 120 ADSL modem, which does PPOA to PPOE.

  • How to replace DHCP server from domainA with DHCP from domainB?

    Hello fellow Administrators,
    We have one remote site with one subnet. There's domainA domain controller and about 100 domainA's client computers in that subnet. We're about to send 100 domainB's client computers there as well.
    There's also domainA's DHCP server running on the same subnet. DHCP scope options include domainA's domain name, gw and domainA's DNS server addresses.
    DomainA and DomainB belongs to separate forests and there's two-way trust between them. DomainA DNS has stubzone for DomainB and DomainB has stubzone for domainA. That's how
    clients can resolve hostnames of other domain.
    All domainA's clients in remote site will be replaced gradually with domainB's client computers, but this can take a long time.
    I want to note, that I cannot create second subnet for domainB at the moment.
    At some point, we need to deploy DHCP server to domainB's member server in the remote site. What are the steps I should take to replace existing domainA's DHCP server with domainB's DHCP server while still allowing clients from domainA and domainB to successfully
    find domain controller of their own domain and being able to resolve hostnames from both domains?

    When the devices on your network first request an IP address or reach the end of their leases (or you force them to check their lease is still valid) they will simply
    broadcast a request for a DHCP server, and will accept an offer from the first DHCP server
    to reply. 
    Multiple DHCP servers PT 1: Spanning multiple subnets.
    If you have several VLANs or physical network segments that are separated into different subnets, and you want to provide a DHCP service to devices in all those subnets then there are two ways of doing this.
    If the router / layer 3 switch separating them can act as a BOOTP/DHCP relay agent, then you can continue to keep all your DHCP server(s) in one or two central parts of your network and configure your DHCP server(s) to support multiple ranges of addresses.
    In order to support this, your router or layer 3 switch must support the BOOTP relay agent specification covered in section
    4 of RFC 1542.
    If your router does not support RFC 1542 BOOTP relay agents, or if some of your network segments are geographically dispersed over slow links, then you will need to place one or more DHCP server in each subnet. This ‘local’ DHCP server will only serve its own
    local segment’s requirements, and there is no interaction between it and other DHCP servers. If this is what you want then you can simply configure each DHCP server as a standalone server, with the details of the address pool for its own subnet, and not worry
    about any other DHCP servers on other parts of the network. This is the most basic example of having more than one DHCP server on the same network.
    http://www.arabitpro.com

  • Question about 3750 as dhcp server

    hi,
    With two c3750 switches stacked one customer is  plannig to configure those switches to act as dhcp server for about three thousand clients.
    Can this configuration affect to the normal behaviour of the stack?
    Could come up some problems with this amount of clients?
    Thanks in advance

    uosambela wrote:hi,With two c3750 switches stacked one customer is  plannig to configure those switches to act as dhcp server for about three thousand clients.Can this configuration affect to the normal behaviour of the stack?Could come up some problems with this amount of clients?Thanks in advance
    Personally with that many clients i would look to use something like Microsoft Windows DHCP server. Using switches/routers as DHCP servers is fine for a few vlans or clients but for 3000 it is much easier to manage with a dedicated server.
    Jon

  • NAC implementation wi thout DHCP Server

    Dear Experts,
    Is it possible to deploy NAC without having DHCP server in the network? We have some 300-400 users in the campus and want to enable NAC for them.
    As per my understanding Cisco NAC cannot be deployed without DHCP server in the network, however it is not documented anywhere on the site. Currently all users' machines are configured with static IP.
    We want to do user authentication, AV remediation and Patch deployment through NAC. Is it possible to deploy NAC without DHCP server??
    Thanks in advance.
    nayan       

    Hi,
    Here is the basic flow of clean access for both inband and out of band: (http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5707/ps8418/ps6128/prod_white_paper0900aecd802bdc42.html)
    Figure 1. Laptop Attempts to Access the Internal Network
    1.  When the laptop first accesses the network, the Cisco Clean Access  Server determines that the computer's MAC address is not in the list of  certified devices, and that laptop is placed into an unauthenticated  role. While in this role, only User Datagram Protocol (UDP) Port 53  (Domain Name System [DNS]) and Dynamic Host Control Protocol (DHCP)  traffic (via DHCP and VLAN passthrough) is allowed.
    2. The laptop gets an IP address from the DHCP server, but cannot get past the Clean Access Server acting as an IP filter.
    3.  The laptop user opens a browser and is redirected to an SSL-based Web  login page where she enters her credentials, which in turn map her into  the "employee" role.
    4. As an "employee," she is asked to download the Clean Access Agent.
    5.  The Clean Access Agent performs the posture assessment and forwards the  results to the Clean Access Server to make the network admissions  decision.
    Tarik Admani
    *Please rate helpful posts*

  • What is SCVMM DHCP Server (x64) ? after pushing the agent from scvmm 2012 r2 console

    Hello Guys,
    I have installed the agent from scvmm 2012 R2 console & notice that in add remove Program its shows two things one is " Microsoft System center Virtual machine Manager Agent (x64) other is Microsoft System center Virtual machine Manager DHCP server
    (x64)"
    Need to know what is the role of this "Microsoft System center Virtual machine Manager DHCP server (x64)" on the server & why it get installed with scvmm agent.
    Thanks
    NM-BG
    NM-BG

    This is a good question, and I am happy to explain why you are seeing this agent.
    Windows Server 2012 introduced us for Network Virtualization using the GRE protocol (NVGRE). 
    In order to leverage NVGRE, you would have to manage your hosts entirely with powershell, if you didn't have VMM in place.
    When VMM is in place (and really should be in place, when using NVGRE), VMM act as the complete management layer, also for the NVGRE part. Since NVGRE basically is a
    policy driven technology, VMM need to keep track of every IP address used with NVGRE. During deployment of virtual machines connected to a VM Network with NVGRE (often referred to as Customer Addresses), VMM is able to configure static IP addresses
    on to these VMs, using the agent you are mentioning. This was introduced in VMM 2012 SP1, and is also present in the R2 Release. 
    So to summarize, it is a Hyper-V Switch Extension that is required on all Windows Server with Hyper-V to have DHCP to work correctly.
    -kn
    Kristian (Virtualization and some coffee: http://kristiannese.blogspot.com )

  • Bridging through built-in wireless to ethernet DHCP server

    [originally posted here: Tiger Forums > Getting Online & Networking, where one suggestion was to try this forum]
    I have a 1Gb ethernet LAN with my own DHCP, etc. servers, and an 802.11g WAP bridging to it using WPA2/AES. I've recently added two new Macs: an iMac connected to the ethernet and a MacBook connecting through its built-in wireless. This all works fine.
    Since both Macs are 802.11n capable (with the addition of the $2 addon, which I've done), it occurred to me that I should be able to set up the built-in airport in the iMac as an 802.11n WAP that the MacBook could connect to as its preferred wireless network when the iMac's turned on, tripling it's connection speed to my LAN, and falling back to the 802.11g WAP when the iMac's not on.
    I was able to do this pretty simply by setting up internet (LAN in my case) sharing on the iMac, and I could indeed get an 802.11n connection to it from the MacBook when the iMac was on, and fairly seamless failover to the 802.11g WAP when the iMac wasn't available.
    Clearly, all the pieces are present to make my plan work, but there are two stumbling blocks:
    1. I can't find a way to get the iMac to bridge directly to the ethernet, so that the central DHCP servers provide the configuration for the MacBook. I don't see an obvious way to allow DHCP, but not use the server built into the iMac (or configure it to hand out the addresses I want). It looks an awful lot like the iMac is NAT'ing the wireless to the ethernet, which is definitely not what I want.
    Is there no way to configure the iMac's wireless as a passthrough (bridge) to the ethernet so it acts as a WAP (even if it only accepts one connection at a time)?
    2. I have configured both Macs' wireless to connect to my WAP with WPA2/AES, and they do so just fine. When setting the iMac wireless up for internet sharing, why can't I set the same security options - it only offers me WEP, which I'm not willing to use.
    I know the hardware can handle what I want, as can the BSD underpinnings of OS X (all of my LAN's servers run BSD variants), I just don't know how to configure it.
    Can someone help?
    Thanks.

    >It looks an awful lot like the iMac is NAT'ing the wireless to the ethernet, which is definitely not what I want.
    That's exactly what it does. The 'Internet Sharing' option enables NAT.
    This may or may not be a problem, though - what is the MacBook missing by getting its configuration from the iMac rather than your regular DHCP server?
    (by default, when you turn on internet sharing the OS starts up a DHCP server on the shared interface).
    You might be able to get what you want by just turning on IP forwarding rather than the whole NATD/DHCPD package, but I'm not sure:
    <pre class=command>sudo sysctl -w net.inet.ip.forwarding=1</pre>
    but you'd have to try it to see.
    > When setting the iMac wireless up for internet sharing, why can't I set the same security options - it only offers me WEP, which I'm not willing to use
    I don't know the technical reason for it, but I seem to recall that computer-to-computer wireless networks always (and only) use WEP. I don't know if this is because WPA isn't possible or if they just haven't gotten around to adding it, but WEP is your only option.

Maybe you are looking for

  • Use of abstract interface

    I have a series of questions....... Go through. What is the use of abstract interface in java ? What is the use of static object in java ? What is the use of abstract key word to variables ? Object reference passed to method are final. Can ' t we cha

  • Error loading transcode presets

    Hello, After solving the problem error importing transcode presets. I have Mpeg 2 dvd files (.mpg), exported with Premiere CS3. Now I almost finished my project and put an video as background in a menu and now I am getting the following error: error

  • EA4500 Max number of Port forwards

    Hi All, Background: currently have a WRT320N, thinking of upgrading to an EA4500 assuming ONE feature has been improved: Port Forwarding. Scenario: Currently I have a WRT320N router, and while it "does everything we need" it has one limitation that i

  • HP 3310 All in One printer

    I am having a problem connecting this printer wirelessly. I have ensured that the printer is connected to my ad-hoc network created by my iMac, but I can't seem to add the printer. I can't see it in the drop down menu in Safari, under Bonjour. I can

  • How do I uninstall Firefox---For Mac

    I would like to uninstall Firefox. I may reinstall some time in the future. But I am cleaning my computer and would like to eliminate Firefox. I looked through the preferences and in my downloads and applications and could not find a way to eliminate