DHCP not giving ip to wireless client

Dear All,
        i have one typical problem.
I was configured wireless access point 1140 and integrate with windows IAS (radius server) for authentication to wireless client.
My server vlan            10
my AP vlan                 2
My clinet vlan             3
when i connected clinet on vlan 3 through cable its ok, but when i go through IAS (Radius Server) client not getting IP address.  I was created one bvi interface on AP and put in 1 native vlan. But still same problem.
can any one help me to solve this problem.

I assume that you configure the AP
as autonomous mode. If this is the case, BVI interface on the AP is used for management purpose. The AP does not use BVI for forwarding wireless client traffic.
I agree with Jonathan that we need to confirm the problem is forwarding issue. Can you do a show dot11 as. Find out if the client is stuck in authentication status.
Assume that the wireless client pass authentication. Please post the followings:
show run int dot 0/0 and show run int dot 0/0 or whatever interface and sub-interface the SSID is associated to
show run int gi 0/0 and show run int gi 0/0.3
show spanning interface on the switch side
Is there DHCP server on VLAN 3? If not, please show me the router on VLAN 3? I would like to confirm that DHCP relay agent (i.e. ip helper-address) is configured.

Similar Messages

  • Can I use ASA to be a DHCP Server use in WLC wireless Client

    I want to use ASA to be a DHCP Server for Wireless Client not it can't.
    I check the debug log in WLC, I confirm the WLC have send the request to ASA.
    In the ASA, it don't have any hits in the rule when the WLC send the DHCP relay request.
    I have try don't use dhcp relay in WLC but don't success. Anybody have the same case with me? And Is the ASA can't support DHCP relay agent to request to get the IP Addr.
    P.S. In the Network Design limitation so I can't use WLC to be DHCP Server.
    Equipment:
    ASA5510
    WLC4402
    How can I fix it.
    Thank you very much

    The issue is that the ASA doesn't accept DHCP requests from a relay agent, only broadcast DHCP requests. In the 4.2 version for the controllers there is now an option so you can change the way the controller forwards DHCP requests so that it is sent as a broadcast and not from a relay agent.

  • DHCP still giving out addresses to clients on the Deny filter

    My DHCP server is handing out addresses to clients that I have put on the deny list. The "Enable Deny List" is checked. Its not to every client either. It is just a handful that keeps popping back. What am I missing?

    Hi Alphateam,
    Have you confirmed that the deny is on all interfaces, wired and wireless of said machines.

  • DHCP not giving out adresses

    Hi there,
    just upgraded from Lion Server to ML Server. I found that everything is runnign quite smooth here (OD Master with 800+ users, NetInstall, etc etc), but I have problems with my DHCP Service:
    As is written in Apple's KB Article, all the config files with my setup from Lion Server are still there and the service also is up and running, but my clients just won't get IPs and settings via DHCP. I also thought about firewall issues, but just as with DHCP, these settings were kept and are up and running. I've also found the tutorial from Krypted.com and read the other posts, but I really can't find the problem's source.
    Anybody here with similar problems?
    best whishes,
    Christian

    Thanks man! That's been it. Who would guess, that although they transfer all the settings when upgrading, the server is disabled

  • E1200 Wireless Client List will not display and causes web UI to temporarily stop responding

    I picked up an E1200 and set it up successfully.  I am using wireless MAC filtering, and decided to pull up the list of connected wireless clients (Wireless >> Wireless MAC Filter >> push "Wireless Client List" button).
    When I do so, it immediately throws this back:
    Immediately after this the Web UI of the E1200 becomes inaccessible.  It still routes traffic, and the router remains pingable, but it will not allow access to the Web UI for several minutes.  The error that appears upon attempt to access the Web UI during this time window is similar to the above, but reads "Error 102 (net::ERR_CONNECTION_REFUSED): The server refused the connection."
    I have tried this in Google Chrome, Firefox 4, and MSIE on two separate computers.  Each browser displays the error a bit differently (MSIE, for example, just says it can't display the page and gives no further detail) but the net results are always the same.  I have tried resetting the device to factory defaults in addition to re-downloading the firmware from the Cisco/Linksys website and installing it.  No improvement.
    I have also noted that the Log (Administration >> Log; and yes, I have it enabled) doesn't appear to be picking up anything at all.  In fact, the Security log, which supposedly (according to the Help) "displays the login information for the Router’s browser-based utility," is also blank.
    Is this a bug, or should I head back to the retailer and swap this device?

    Ok - I nailed this down, I think, and it looks like a firmware bug.
    Short version is that a factory reset cleared the issue, but during stepwise reconfiguration the problem came back.  Through a bunch of iteration I figured out that if I have the E1200's DHCP server disabled *and* have wireless clients connected to it, the problem I described appears.
    Turn the DHCP server back on and the problem goes away.  Turn it off and the problem comes back.  Turn it back on and it goes away.  You get the idea.
    If I had to pose a theory here, it's that the initial display of the Wireless Client List, which uses "IP Address" as the default sort, somehow implodes if the E1200 isn't actually assigning those IP addresses to the clients.
    When this happens it appears to crash the Web UI wholesale.  Just for grins, while the Web UI was unresponsive, I pinged the router it as before - still pingable - then ran nmap against it - no open ports found on the router.  When the Web UI is functional, though, nmap detects port 80 quite easily.  I have not timed how long it takes for the Web UI to come back up, but it is longer than 5 minutes, and I presume some sort of watchdog process has to detect that it has gone kaput and start it up again.
    Final test was to restore my saved configuration from before the factory reset (note that the saved config was done under the same firmware version, and in this config, the DHCP server is disabled).  Boom, problem.  Wait for the Web UI to come back, turn on the DHCP server.  Problem goes away.  Turn the DHCP server off.  Boom, problem comes back.
    So, there you go.
    Would be interesting if someone could verify this via a test against another E1200.  It may be worth noting that in my baseline test I was also using Manual wireless setup (vs. Wi-Fi Protected Setup), and WPA2.  Didn't make any other setting changes from the factory defaults.  I did not actually have to turn the Wireless MAC Filter on to do the test.  All one needs to do is click Enable on the Wireless MAC Filter tab, and then do *not* click Save Settings - just clicking Enable will light up the Wireless Client List button, which you can then push to get the list.  That is how I handled testing to ensure that neither specific entries, nor the Prevent/Permit setting, nor having the filter enabled in saved configuration were involved in the problem.
    Separately, no explanation for the lack of entries in the security log, but that pretty much looks like a firmware bug to me as well.

  • Getting Wireless client list in WRT54G?

    On one of the other sites Isaw a post showing a URL you could use to get a WRT54G to lsit the currently connected wireless clients. unfortunately this URL did not work on my v5. The DHCP client list is useless because I host my DHCP server elsewhere and don't use the internal server.
    Does anyone know how to tickle a WRT54Gv5 into giving up the wireless client list?
    Thanks In Advance,
    Mark

    The wireless client list is available in the WRT54G v5+.   The URL is http://192.168.1.1/WClient.htm
    The button to display the table is hidden until Wireless MAC Filter is ENABLED on the /Wireless/Wireless MAC Filter page.
    http://192.168.1.1/WFilter.htm

  • Dhcp not allocating addresses

    My network is managed by Mac Mini Server (Lion) with an Airport Extreme.
    I have the wireless set up as WPA2 Enterprise with the Radius Server, Open Directory, DNS and DHCP running on my Mac Mini Server.
    In the past week, possibly since the last updates were applied, all wireless devices are having real issues connecting to the network. They are authenticating OK but an address is either never assigned or appears after 5 or ten minutes. To verify this I tried to connect iPad. This was set to use DHCP and the wifi symbol appears intermittently at the top of screen but on the networks page a spinning wheel appears next to the network name and the address details (i.e local address, router, DNS, etc.) are all empty. If I configure for manually entered address details the deveice connects immediately and works fine. Switching back to DHCP and the problem comes back (i.e. connects to wifi but no address is ever allocated).
    Any ideas on why DHCP would suddenly stop working. I have tried restarting the service, rebooting the Airport, rebooting the server but nothing seams to fix it. Every thing was working just fine for the past 6 months.

    Thanks for reply.
    Router is:
    Netopia ADSL Gateway 3346N-002
    4 port 10/100 Ethernet built-in
    The settings in the Control Panel didn't show anything of note. 
    What's interesting is that when the user's laptop went back to the hotel again today, the same issue cropped again -- hotel's DHCP not giving IP Address.   The office DHCP server was assigning no problem.
    Then...  I checked Access Connections Profiles and noticed that "Disable this wireless radio when switching to a different location" was not checked for any profiles. 
    I checked off on all profile and then the hotel DHCP made the connection. 
    I did read somewhere that a possible fix is to do an IPCONFIG/RELEASE * and then do an immediate Shutdown/Restart.  Issue is that I didn't have this option on the user's laptop before I made the Access Connections fix. 
    Please reply to clarify or add anything -- I appreciate your quick response because I spent 4 additional hours last night. 
    Paul

  • Can WLC's built-in DHCP provide IP addresses for wired client?

    Hi,
    We've got a WLC running on 7.0.98.0. It's providing IP addresses for the Guest Wireless users. Now we'd like to put a couple of wired workstations for those customers who don't bring laptops. I'm wondering if I put these workstations on the same guest wireless vlan, they can still get IPs from the WLC. If not, I have set static IPs on these workstations.
    Thanks in advance.
    Robert

    Rob:
    The answer is simply "No". WLC can not provide wired clients on same wireless VLAN with IP addresses if the DHCP is configured on WLC.
    The case metnioned by fbarboza above is a "very" special configuraiton on WLANs where the WLC is configured to take care of some wired clients and it needs you to have two WLCs  (The featured is called wired guest).This special case does not apply at your situation.
    With your situation my answer above applies.
    Note A internal DHCP server pool will only serve the wireless clients of that controller, not clients of other controllers. Also, internal DHCP server can only serve wireless clients and not wired clients.
    Reference: http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70wlan.html
    HTH
    Amjad

  • Why do some devices show up as wireless clients and not DHCP clients

    When looking at the 'Logs and Statistics' section it shows me the MAC addresses of 3 wireless devices I have on my W/LAN (Macbook and 2 wireless PVR's) in the 'wireless clients' section but no info on the 2 wireless PVR's in the DHCP clients section. Only the Macbook appears there with its ip address shown. Can anyone tell me how to find out the ip addresses of these 2 other devices. I tried connecting one of the PVR's via a cat 5 but that one still doesn't show up in the DHCP clients section.

    Esterhazyinoz wrote:
    Can anyone tell me how to find out the ip addresses of these 2 other devices. I tried connecting one of the PVR's via a cat 5 but that one still doesn't show up in the DHCP clients section.
    Try scanning with WakeOnLan to get a list of all devices and their IP addresses. If the devices got fixed IP addresses at the factory, they won't show up under DHCP.

  • Bridge does not work for wireless clients - connecting to existing network.

    Hi - I really hope somebody can help out here, after hours of trial & error, I have finally given up
    I need to connect my Airport Extreme Base Station to my existing network. I have a linksys router (192.168.15.1) connected to my modem and this linksys router acts as DHCP server too.
    I suppose I have to use "bridge mode" for that to work. But should the linksys be connected to the AEBS using the AEBS's WAN or LAN port?
    If I use "bridge mode", then wired computers to the AEBS works fine - getting an IP from the linksys etc. BUT, the wireless clients will have a self-assigned IP and not get through to the internet. It's like the AEBS will not allow wireless clients to "get through" unless AEBS itself is handing out IP addresses.
    Page 36 of this manual ( http://manuals.info.apple.com/en/DesigningAirPort_Networks10.5-Windows.pdf ) shows the setup I want. But in the picture, it says "Ethernet WAN port" but the text says: "The Apple wireless device (in this example, a Time Capsule) uses your Ethernet network to communicate with the Internet through the Ethernet LAN port ( <--> )." I don't know which one to use, WAN or LAN - they show WAN but say LAN?
    When I set it up as "share an IP address", the AEBS status tells me "double nat" and to change from "shared IP" to "bridge mode". I do that, and everything seems fine - for the wired clients. Now the wireless clients cannot connect, Airport on the MacBook Pro just say "Connection failed" and the MacBook says "Invalid password" (translated from danish), even though I set the Airport Utlity to save the password in keyring, so it should be correct... If I disable wireless encryption, the wireless clients will connect but get a self-assigned IP, and therefor not work (cannot get online)...
    It seems the only way I can get wireless to work, is if I set AEBS up as DHCP, but then it won't be on the "same network" as the linksys (192.168.15.1), but rather on 10.0.x.x as I select. If I select 192.168.x.x within AEBS, I'm also getting some error messages, conflict/subnet thing.
    Anyway - I really hope somebody knows how to get wireless clients to get an IP address from existing ethernet when connected to the AEBS.
    Thanks!!

    I've given up and had to go back to running "Double NAT" which also reports as a "problem" within the AEBS, but I just "ignore" it so the light will always be green.
    It still ***** though, as "Double NAT" is also a reason for "Back to my Mac" not working properly, but how the ** am I supposed to avoid Double NAT when the wireless will not work in bridged mode?!

  • Wireless Clients getting DHCP IP from other WLAN

    Hi,
    My client has a wireless setup consisting of a WLC 2112 and about 7 1131AG LWAPPs. There are two SSIDs, say CORP(mapped to VLAN 900) and GUEST(mapped to VLAN 901). Wireless clients get IP through DHCP. DHCP IP is configured in the Dynamic interface.
    The problem is sometimes (not always), clients connecting to SSID CORP get a DHCP IP assigned for GUEST VLAN(VLAN 901).
    Since it is happening randomly, clueless as to what is causing the problem.
    Any inputs?
    Regards
    Gnan.
    P.S Just to add though this could be irrelevant, only after making VLAN ID of the admin interface and AP Manager interface as '0', the APs could talk to the WLC and i was able to http to the WLC from the LAN.(WLC Mgmt, AP Mgmt IPs and AP Manager interface are in same VLAN).

    It sounds like the client may be connecting to the guest WLAN first, then connecting to the Corp WLAN.
    As to the VLAN setting.  0 in the WLC means untagged.  If your switchport has the switchport trunk native valn < x > command you would need to be untagged.  Otherwise the switch would get a packet tagged with the native vlan, and then drop the traffic.
    ***if your management is in VLAN 1, the above is true with out the native setting, as VLAN 1 is native by default
    HTH,
    Steve
    Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

  • WRT54GX2 Wireless Security Enabled DHCP blocked for wireless clients

    Hey gang,
    My subject says it all.  Yesterday  I updated my WRT54GX2 version 1's firmware to the latest and greatest.I first reset the box, and rebooted. I updated the firmware. On the first attempt I picked the wrong image file. The machine halted and told me bad image. I then found and installed the correct image. I then added an Admin password, and entered a new SSID. I left the DHCP settings at the default. I then set wireless security at WPA Personl/WPA2 with TKIP&AES.
    I found the wired client could obtain an IP address and to connect to the internet. The wireless clients could connect, but could not obtain an IP address.
    I left the wireless security settings off.
    Any suggestions?

    The wireless security settings are correct. The wireless clients "CONNECT" to the WRT54GX2. The clients stall on obtaining an IP address via DHCP. Fixing the clients with static IP addresses also does not work.
    I repeat: The wireless clients successfully connect to the WRT54GX2. The WPA/WPA2 & TKIP/AES settings are correct. The clients cannot receive a dynamic IP address.
    On Friday I will reset the box for 30+ seconds. I doubt this will have any effect. I reset it on Tuesday twice on Tuesday, and still have the problem.
    Any help appreciated.
    -WJ

  • Airespace Wireless Client periodically unable to obtain DHCP

    I am experiencing a problem at a couple of customer sites. I have the WLC configured to point to a Microsoft DHCP server. Periodically, all of the clients will be unable to obtain a DHCP address. Currently, the only fix I have been able to come up with is to reboot the WLC. Obviously, this is not the desired solution. Has anybody experienced this problem and been able to permanently fix it?

    The bug toolkit does not show that being fixed yet. However I have a workaround that might help. We have 5 4404 and 3 WISM and experienced the DHCP issue from time to time. Once the DHCP fails, the only way to remedy is a controller reboot.
    I noticed the controllers "proxy" the DHCP request by default instead of an IP helper type relay. You can differentiate this by examining an IPCONFIG /ALL from a wireless client. In proxy mode you'll see the controller's virtual address as the DHCP server. In non proxy mode you will see the actual external DHCP server as the client's DHCP server. You can modify the proxy behavior with "config dhcp proxy disable". Now I'm not making any promises, but I've not had the DHCP issue since I made the change. It could have alleviated the issue or maybe I've just been lucky. It might be worth a try. Post back if this helps. No doubt many of us are having this issue.

  • Extending wireless network - allow wireless clients or not?

    Hi,
    sorry if this is a stupid question but I cannot find the answer on the internet.
    I have a setup with 3 level house, 3 airport extremes, the one in the middle connected via ethernet to router and acting as DHCP server.
    The other two are setup to 'extend network'
    Question I have is should I check "allow wireless clients" or not because when I do it seems to make the main AP extreme a client of the other two as well. This seems strange to me. any help would be appreciated.

    do you work in entertainment industry at all? I know a bob timmons...
    That would not be me.
    any ideas why my extension airport extremes see the main DHCP extreme as clients?
    This is normal. The "main" base station is a client of the "extending" Airport....and the "extending" AirPort is a client of the "main" base station.  You would not have any extension if they were not clients of each other. In simple terms, they are communicating with each other at all times.
    also any idea of the actual range of the AP extremes?
    They usually check out at about 45-50 meters or 150 feet or so....but range measurements are made in "free air" in a large space....like an airplane hangar......with no obstructions in the signal path. Most homes are laid out a bit differently.
    I've seen installations where the signal would barely go through one wall to a computer that was no more than 10 feet away from the router.  The wall was metal lathe and plaster, so in effect the very weak signal was being asked to power though metal. Not much signal was getting through.
    In very general terms, a typical wall of sheetrock or wallboard and 2 x 4s will absorb on average 15-20% of the wireless signal. A ceilng will absorb much more because it is much thicker.  In most homes, after 3 or 4 walls, or a ceiling and a wall, there won't be much signal left.
    Now, if you  have adobe walls or cement walls or ceilings, everything changes dramatically. You get the idea.
    My home is about 2400 sq ft, single level, of typical construction.  I use 3 AirPort Extremes....all connected by Ethernet....not wireless....to get full speed, fast coverage virtually everywhere.  I use an AirPort Express to "extend"....using wireless only....if I want to take my laptop out on the patio.
    Older iPhones can connect at maximum 54 Mbps if they are literally right on top of the router. Typically,they might be at 25-35 Mbps or so with a good signal in the next room.  The 180 and 270 numbers signify that these connections are 5 GHz...probably a newer Mac laptop or iMac.
    If you have a Mac laptop and don't mind a $3 investment to get a good utility, WiFi Explorer can reveal some very useful things about your network.  Post back if you are interested and we will take this up on Thursday.

  • WLAN Clients not browsing on Cisco Wireless Controller WLC NME-AIR-WLC12-K9

    HiI have a question and i need a solution and expert help.I have done a deployment which involves Security (ASA5540), Routing/voice gateway/wlc NME-AIR-WLC12-k9) and Switching (Cisco3845-ccme/k9)Below is the list of equipment used:1. Cisco ASA 5540 - which is connected at the edge to the ISP router
    2. Core Switch WS-C4948E as core and DHCP Server for all VLANs
    3. Access/Distribution Switches WS-C3560G-48PS-S connected as trunk to the core switch
    4. Router/Voice Gateway/WLC Cisco3845-CCME/K9 - This is the voice gateway and also the WLC
    5. Wireless APs AIR-LAP1242AG-E-K9 (12 qty)Here is the deployment scenario:1. G0/0 of the ASA is connected to a 7200 router from the ISP (Public IP Add)
    2. G0/1 of the ASA is connected to gig 1/3 on the Core Switch on VLAN 2 which is the management VLAN (Local IP 10.1.1.2)
    3. Port 3 of the Core switch is on vlan 2 connected to ASA - Management IP of Core Switch is 10.1.1.1. Core Switch is the DHCP Server for all VLANS on the network.
    4. All the Access/Distribution switches are configured with IP Addresses on VLAN 2
    5. Telephony Services is configured on the router and DHCP Pool for Access Points and Wireless Clients is running on the router.
    6. Two DHCP pools were created on the router for APs and Wireless Clients.
    7. G0/0 of the router is configured on the same network that issues dhcp ip to the AP and is connected to gig 1/1 on the core switch
    8 G0/1 of the router is configured as the voice port for the IP Telephony Services and is connected to G 1/2 on the core switch1. Clients receiving DHCP IP on the Core Switch can communicate with all vlans and can browse to the Internet.
    2. IP Telephony Services is running well.
    3. Client on wireless can get IP from the DHCP on the router but cannot browse.I have pings from the router to the core switch and firewall, but clients connected to the wireless
    cannot ping other vlans on the core switch and vice versa.The port connecting the router to the core switch is an Access Port, i have changed to to trunk but still no changes.My biggest problem now is how to make the clients on the wireless communicate with other clients on the network and be able to browse to the Internet.Below is the configs on the router and core switch.Router ConfigNimc_Voice_Router#sh run
    Building configuration...
    Current configuration : 10513 bytes
    ! Last configuration change at 13:03:55 Nigeria Mon Nov 29 2010 by admin
    ! NVRAM config last updated at 13:03:56 Nigeria Mon Nov 29 2010 by admin
    version 12.4
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    hostname Nimc_Voice_Router
    boot-start-marker
    boot-end-marker
    ! card type command needed for slot/vwic-slot 0/2
    logging message-counter syslog
    enable secret
    aaa new-model
    ! aaa authentication login default local
    aaa session-id common
    clock timezone Nigeria 1
    dot11 syslog
    ip source-route
    ip dhcp excluded-address 10.1.12.1 10.1.12.10
    ip dhcp excluded-address 192.168.1.1 192.168.1.10
    ip dhcp pool LWAAP-AP
    network 10.1.12.0 255.255.255.0
    default-router 10.1.12.1
    option 43 hex f104.c0a8.0002
    dns-server 83.229.88.30 4.2.2.2 193.238.28.249
    option 60 ascii "Cisco AP c1240"
    ip dhcp pool Wireless
    network 192.168.1.0 255.255.255.0
    default-router 192.168.1.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    ip cef
    no ip domain lookup
    ip domain name nimc.gov.ng
    ip name-server 83.229.88.30
    ip name-server 193.238.28.249
    ip name-server 4.2.2.2
    no ipv6 cef
    multilink bundle-name authenticated
    voice-card 0
    archive
    log config
    hidekeys
    interface GigabitEthernet0/0
    description Connection to AP
    ip address 10.1.12.1 255.255.255.0
    ip helper-address 192.168.0.2
    load-interval 30
    duplex auto
    speed auto
    media-type rj45
    interface Service-Engine0/0
    no ip address
    shutdown
    interface GigabitEthernet0/1
    ip address 10.1.2.2 255.255.255.0
    duplex auto
    speed auto
    media-type rj45
    interface FastEthernet0/0/0
    no ip address
    shutdown
    duplex auto
    speed auto
    interface Serial0/1/0
    no ip address
    shutdown
    no fair-queue
    clock rate 2000000
    interface Serial0/1/1
    no ip address
    shutdown
    clock rate 2000000
    interface Integrated-Service-Engine1/0
    ip address 192.168.0.1 255.255.255.0
    no keepalive
    interface Integrated-Service-Engine1/0.15
    encapsulation dot1Q 15
    ip address 192.168.1.1 255.255.255.0
    interface Integrated-Service-Engine1/0.100
    encapsulation dot1Q 100
    ip forward-protocol nd
    ip forward-protocol udp 12223
    ip route 10.1.0.0 255.255.255.0 10.1.1.1
    ip route 10.1.1.0 255.255.255.0 10.1.1.1
    ip route 10.1.2.0 255.255.255.0 10.1.1.1
    ip route 10.1.3.0 255.255.255.0 10.1.1.1
    ip route 10.1.4.0 255.255.255.0 10.1.1.1
    ip route 10.1.5.0 255.255.255.0 10.1.1.1
    ip route 10.1.6.0 255.255.255.0 10.1.1.1
    ip route 10.1.7.0 255.255.255.0 10.1.1.1
    ip route 10.1.8.0 255.255.255.0 10.1.1.1
    ip route 10.1.9.0 255.255.255.0 10.1.1.1
    ip route 10.1.10.0 255.255.255.0 10.1.1.1
    ip route 10.1.11.0 255.255.255.0 10.1.1.1
    ip route 10.1.12.0 255.255.255.0 10.1.1.1
    ip route 192.168.0.0 255.255.255.0 10.1.1.1
    ip route 192.168.1.0 255.255.255.0 10.1.1.1
    no ip http server
    ip http secure-server
    !Core Switch Configsh run
    Building configuration...Current configuration : 10622 bytes
    version 12.2
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    no service password-encryption
    service compress-config
    hostname Nimc_Core
    boot-start-marker
    boot-end-marker!
    aaa new-model
    aaa authentication login default local
    aaa session-id common
    storm-control broadcast include multicast
    ip subnet-zero
    no ip domain-lookup
    ip domain-name nimc.gov.ng
    ip dhcp excluded-address 10.1.2.1 10.1.2.10
    ip dhcp excluded-address 10.1.4.1 10.1.4.10
    ip dhcp excluded-address 10.1.5.1 10.1.5.10
    ip dhcp excluded-address 10.1.6.1 10.1.6.10
    ip dhcp excluded-address 10.1.7.1 10.1.7.10
    ip dhcp excluded-address 10.1.8.1 10.1.8.10
    ip dhcp excluded-address 10.1.9.1 10.1.9.10
    ip dhcp excluded-address 10.1.10.1 10.1.10.10
    ip dhcp excluded-address 10.1.3.1 10.1.3.10
    ip dhcp pool Voice
    network 10.1.2.0 255.255.255.0
    next-server 10.1.2.1
    option 150 ip 10.1.2.2
    default-router 10.1.2.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    ip dhcp pool SF_DGs_Office
    network 10.1.3.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.3.1
    dns-server 81.199.3.7
    lease 10
    ip dhcp pool Admin_Process_Fac_Mgt
    network 10.1.4.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.4.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip dhcp pool SF_IDD
    network 10.1.5.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.5.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip dhcp pool Finance_Fin_Inv
    network 10.1.6.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.6.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip dhcp pool Finance_CS
    network 10.1.7.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.7.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip dhcp pool FF_Human_Capital_Mgt
    network 10.1.8.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.8.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip dhcp pool FF_Legal_Services
    network 10.1.9.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.9.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip dhcp pool SF_Procurement_Serv
    network 10.1.10.0 255.255.255.0
    domain-name nimc.gov.ng
    default-router 10.1.10.1
    dns-server 83.229.88.30 193.238.28.249 4.2.2.2
    lease 10
    ip vrf mgmtVrf
    errdisable recovery cause bpduguard
    errdisable recovery interval 180
    power redundancy-mode redundant
    spanning-tree mode mst
    spanning-tree portfast bpduguard default
    spanning-tree extend system-id
    spanning-tree mst configuration
    name xxxx
    revision 1
    instance 1 vlan 1-20
    spanning-tree mst 1 priority 0
    spanning-tree vlan 1-20 priority 0
    vlan internal allocation policy ascending
    interface FastEthernet1
    ip vrf forwarding mgmtVrf
    no ip address
    speed auto
    duplex auto
    interface GigabitEthernet1/1
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface GigabitEthernet1/2
    switchport access vlan 4
    switchport mode access
    spanning-tree portfast
    interface GigabitEthernet1/3
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/4
    switchport mode access
    spanning-tree portfast
    interface GigabitEthernet1/5
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/6
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/7
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/8
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast!
    interface GigabitEthernet1/9
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/10
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/11
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/12
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/13
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/14
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/15
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/16
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/17
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/18
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/19
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/20
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/21
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/22
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/23
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/24
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/25
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/26
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/27
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/28
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/29
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/30
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/31
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfastinterface GigabitEthernet1/32
    switchport access vlan 2
    switchport voice vlan 4
    interface GigabitEthernet1/33
    switchport mode access
    interface GigabitEthernet1/34
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/35
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/36
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/37
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/38
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/39
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/40
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/41
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/42
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/43
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/44
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/45
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/46
    switchport access vlan 2
    switchport mode access
    switchport voice vlan 4
    spanning-tree portfast
    interface GigabitEthernet1/47
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface GigabitEthernet1/48
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface Vlan1
    no ip address
    shutdown
    interface Vlan2
    description Management
    ip address 10.1.1.1 255.255.255.0
    interface Vlan3
    description Enterprise
    ip address 10.1.0.1 255.255.255.0
    interface Vlan4
    description Voice
    ip address 10.1.2.1 255.255.255.0
    interface Vlan5
    description SS_DGs_Office
    ip address 10.1.3.1 255.255.255.0
    interface Vlan6
    description Admin_Process_Fac_Management
    ip address 10.1.4.1 255.255.255.0
    interface Vlan7
    description SF_National_Identity_Database
    ip address 10.1.5.1 255.255.255.0
    interface Vlan8
    description Fin_Finance_Investment
    ip address 10.1.6.1 255.255.255.0
    interface Vlan9
    description Fin_Corporate_Services
    ip address 10.1.7.1 255.255.255.0
    interface Vlan10
    description FF_Human_Capital_Management
    ip address 10.1.8.1 255.255.255.0
    interface Vlan11
    description FF_Legal_services
    ip address 10.1.9.1 255.255.255.0
    interface Vlan12
    description SF_Procurement_Services
    ip address 10.1.10.1 255.255.255.0
    ip default-gateway 10.1.1.2
    ip route 0.0.0.0 0.0.0.0 10.1.1.2
    ip route 10.1.1.0 255.255.255.0 10.1.1.2
    ip route 10.1.2.0 255.255.255.0 10.1.1.2
    ip route 10.1.3.0 255.255.255.0 10.1.1.2
    ip route 10.1.4.0 255.255.255.0 10.1.1.2
    ip route 10.1.5.0 255.255.255.0 10.1.1.2
    ip route 10.1.6.0 255.255.255.0 10.1.1.2
    ip route 10.1.7.0 255.255.255.0 10.1.1.2
    ip route 10.1.8.0 255.255.255.0 10.1.1.2
    ip route 10.1.9.0 255.255.255.0 10.1.1.2
    ip route 10.1.10.0 255.255.255.0 10.1.1.2
    ip route 10.1.11.0 255.255.255.0 10.1.1.2
    ip http server
    --More--                 
    control-plane
    line con 0
    stopbits 1
    line vty 0 4
    end
    Please i need somebody to help me

    I wouldn't configure an ip address on the service engine subinterface.
    Try setting up a vlan interface on the router with that ip address and the subinterface will be linked to the vlan interface through the encapsulation command. A vlan interface will better work as a gateway for the wireless clients
    Nicolas

Maybe you are looking for