WLC Guest Network DHCP run out of IPs??

Hello,
I have this guest wlan working with web authentication, as you may know in order to get authenticated you must have an IP address first then have a valid username and password. The problem is that if you don't have valid credentials you keep the IP address anyways.
I'd like to know if there is a way to release the IPs that are not being used? The WLC is the DHCP server for this network.
WLC4402
6.0.202.0
Thanks in advance!

That would be good, but right now there is not automated process to remove those clients.
If you are good with scripting, you could setup a script to pull the clients list, then parse it based on the authentication. Once you have that you can then do a client deauthenticate, and wipe the IP address lease as well.
Unfortunately, I can't be too much help as I don't really know scripting.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Similar Messages

Guest Network DHCP

Hi All,
Here's my situation, I have installed 5 Cisco Linksys EA2700 wireless routers in a cascade fashion off of my main switch throughout the building. I have turned off DHCP and NAT since I have a DHCP server assigning IP's. Basically I'm using them as Access Points.
and they are working well!
Now, I would like to advertise the guest network.
When I enable the guest network on one of the routers I do see the SSID. But I cannot connect to the network. It doesn't even prompt me for a password. From my reading it is supposed to give me a 192.168.33.x address, but I don't think it is serving out IP's
Any ideas?
Thanks in advance!

you will be prompted for the guest network password when you open a web browser. once you entered the correct password, your device will then be assigned an IP address to access the Internet.

Guest network DHCP conflict

I get this message and would like to know how to fix the problem. This airport wireless device rejected a DHCP address in the same subnet as its internal DHCP server for the guest network. you should change the DHCP Range for the guest network. How do I do this.
Thank you

Welcome to the discussion area, anthony!
I get this message and would like to know how to fix the problem.
Open AirPort Utility and click on Manual Setup
Click the Internet icon
Click the DHCP tab
The DHCP ranges will be displayed for your Main network (top line) and Guest network (third line). Note the range that your Main network is using, either 10.0, 172.16 or 192.168. Then select a different range for the Guest network.
So for example, if your Main network is using 10.0, then you would select either 172.16 or 192.68 for the Guest network and Update to save your changes.

WLC Guest Network Mobile Device Browser

Hello,
We are having some odd issues with people using there blackberry's and iphones on our guest network. Most of the time they can connect, but when they launch there browser it doesn't always bring up the authentication page, and just says network lost. If they get past that, and the login page comes up and they authenticate they get some kind of key store message. If they cancel that they can browse the web but most sites seem to switch from wifi to the mobile network and then they are not using the wifi, just the mobile network.
Is there some kind of security issue with the third party certificate we use? Why would the browser switch back and forth from wifi to mobile networks?
This behavior is not seen when one of these devices connect to a secure WLAN in our network.
Thanks,
Dan.

It always worked 100% of the time with a laptop. I just upgraded the controller software to the latest 6.x version and it seems much better on the mobile devices now.
Dan.

DHCP running out of addresses

Afternoon,
We have heaps of availiable IPs in the address range, but sometimes when
doing quite a bit of imaging to several machines the client refuses to
get an IP. If we release an IP from another client then the new machine
can then obtain one, however it does not seem to get any of the vacant
IPs that are available.
I have extended the DHCP timeout variable on the TFTP server. What is a
good value for this variable.
Does anyone have any other ideas?
Cheereo

Luke,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Setup Guest Network with OS X Server and Airport Extreme - NEED HELP!

Hi All,
So I have a small business with a Mac Mini Server (10.6.5) and an Airport Extreme. The Airport is handling the routing and DHCP duties, while the Server is handling the DNS. The Airport is pointed to pull DNS from the Server. All internal systems work great accessing the internet and folders on the Server.
I need to setup a Guest network for internet access, so I turned this function on in the Airport Extreme. It sets up fine, but if you connect to that new Guest Network the system hangs trying to open a web page. My thinking is since the Server is the one handling the DNS it is not working for Guest computers since they are not part of our internal network. At least that is my theory, I could be wrong.
With this type of setup what do I need to modify to get this working? Anyone have any ideas?

After trying for days to figure this out I was finally able to get a working solution and I now have my APE providing a guest and main network while using my lion server as the Dsn server for the main network.
The setup is a bit of a hack and does require you to have at least two devices with staticly assigned ip information on the main network but it does allow you to serve dhcp for both networks from the server and make some services available to the guest network such as iTunes remote for parties.
1) delete your custom Dns entries from the Internet settings in the APE and set two dhcp reservations for .2 and .3 (in this case my Mac mini server and my airport express)
2) reduce the dhcp range to only have 2 available IPs (10.0.1.2-10.0.1.3) and save settings
3) on a computer connected to the main network install wireshark and begin sniffing for packets. Connect at least one device to your guest network and look for any packets that have an ip from your guest network (usually 172.16.42.x) once you capture one of these packets expand the vlan information. This should list a vlan ID ( in my case this was 1003. I would suspect this is universal but do not know)
4) on your server open network preferences, click the gear at the bottom and click "manage virtual interfaces", add a vlan that matches the vlan ID from above. Click ok and apply your settings. The vlan interface should get an ip in the guest network range from your APE.
* if you are running lion you will need to install server admin tools before proceeding*
5) open server admin and add the dhcp service. Create an entry for your primary network (ex: 10.0.1.x) make the dhcp range one higher than the settings in step 2 ( ie: 10.0.1.4 to 10.0.1.253) assign this to the physical interface. Make sure this entry has your internal DNA servers
6) add another entry for the guest networks ip range (ex: 172.16.42.x) again set it one ip higher than step 2 ( 172.16.42.4 to 172.16.42.253) save and activate both ranges. Assign this range to the vlan interface. Make sure this entry either contains your isps dns servers or another public dns server. Turn on dhcp.
Because you have now assigned the only two addresses in the APEs pool for your primary network to static entries there will not be any addresses to assign and the APE will not respond to requests. This will allow your server to pick up the work of assigning IPs. As for your guest network, the APE will assign IPs for two host and then stop. Your clients may either get an IP from the APE or the osx server so both should have the same info. Just make sure the two static clients on your main network have the local DNA servers entered manually.

DHCP server not reasigning IPs

Hello everyone,
We're having a big issue with our DHCP server (MAC OS X Server 10.6.4), because it runs out of IPs, because it's not reasigning the same IP to the same device.
The file /var/db/dhcp_leases show me the same MAC address and different IP, not freeing the anyone and thus, causing the server to stop giving IPs. We've currently managed to make a script to delete the leases db daily, but some days it's nt enough, any advise you could give us?
Some of the dchp_leases file:
ip_address=10.1.0.182
hw_address=1,0:26:bb:55:c4:e2
identifier=1,0:26:bb:55:c4:e2
lease=0x4cbda154
ip_address=10.1.0.181
hw_address=1,0:1b:63:b5:6a:de
identifier=1,0:1b:63:b5:6a:de
lease=0x4cbda0a3
name=MAC265
ip_address=10.1.0.180
hw_address=1,c4:2c:3:32:2d:23
identifier=1,c4:2c:3:32:2d:23
lease=0x4cbd9fe3
name=MAC265
ip_address=10.1.0.179
hw_address=1,c4:2c:3:32:2d:23
identifier=1,c4:2c:3:32:2d:23
lease=0x4cbd9f27
name=iPod
ip_address=10.1.0.178
hw_address=1,90:84:d:c4:72:2e
identifier=1,90:84:d:c4:72:2e
lease=0x4cbd9d08
Thanks in advance,
Message was edited by: gmestre

This looks more like a problem with network settings and not any hardware problem. Try to setup your LAN connection again. Recheck your network service provider settings (thru default access page 192.xxx.xxx.xxx, using wireless connection): check whether DHCP server is enabled.
If you are using mac address filter, add mac address of your LAN card to the allowed addresses in network settings in 192.xxx.xxx.xxx
3000 N100-0768DKU
XP Home 5.01.2600 SP2
Ubuntu 8.04(hardy)

Airport extreme guest network can't access internet

I upgraded to the 7.6.1 a few weeks ago and recently noticed some oddities, My guest network clients get an IP in the 10.x.x.x network but can't access the internet, the private network is just fine. I looked on the airport utility for any advanced wireless options to indicate setting for the guest but I didn't see anything.
Is this the desired method of operation? My private network is using the 192.168 network, do I have to set my GUEST network to the same range in order to get out with it?
I use a lion server on the network that is also giving out IP via the Lion DHCP Service, is there some other change I need to make to the Airport Extreme to have it forward the Guest network dhcp requests to the Lion Server?
Any help would be appreciated.
Mike.

Turns out when I set my DNS server IP for my APE DHCP to my Internal IP on my Lion server, the Airport Extreme is not allowing those guests to talk to my DNS Server so I updated the DNS to be my external/Public IP and now the guest network can do DNS and access all the cool stuff on the internet.

WLC for GUEST network hangs and requires restart

I have a remote site customer that is getting support calls saying that guest users cannot login to the wireless "guest" network. When they try to access it, the browser hangs up when trying to load the redirect page.
When they restart the controller, it begins working again. The WLC version is 5.0.148.0. Has anyone seen this issue? If not, what would be the best way to troubleshoot?
Thanks for any help.

5.0.148.0 has a lot of bugs, suggest you to keep on using 4.2.112 at this moment until the maintenance release of version 5 comes out. This is one of its bug: CSCsm98250.
Symptom:
Webauth and controller access via HTTP or telnet/SSH stop working.
Conditions:
After the controller was upgrade to 5.0, ramdomly webauth, and controller access via HTTP or telnet/SSH stop working.
Workaround:
Reboot controller.

WLC 2006 INTERNAL DHCP FOR GUESTS CLIENTS

I would like to use the internal DHCP to issue ipaddress to the guest wireless clients.
However; when i setup the wlc internal DCHP scope and try to connect to the wireless guest vlan the WLC debug DHCP reads ...forwarding to 192.168.255.2 which i have listed as the gateway to the pix
any examples on how to do this would be great.
here is what i have for the dhcp scope:
Dhcp Scope Info
Scope: Guest.Data.DHCP
Enabled.......................................... Yes
Lease Time....................................... 86400 (1 day )
Pool Start....................................... 192.168.255.17
Pool End......................................... 192.168.255.30
Network.......................................... 192.168.255.0
Netmask.......................................... 255.255.255.0
Default Routers.................................. 192.168.255.2 0.0.0.0 0.0.0.0
DNS Domain.......................................
DNS.............................................. 0.0.0.0 0.0.0.0 0.0.0.0
Netbios Name Servers............................. 0.0.0.0 0.0.0.0 0.0.0.0
Here is what i have for the wlan
WLAN Identifier.................................. 2
Network Name (SSID).............................. Guest.Data
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. Infinity
Interface........................................ guest.data
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Enabled
Quality of Service............................... Silver (best effort)
WMM.............................................. Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
--More-- or (q)uit
Radio Policy..................................... All
Security
802.11 Authentication:........................ Open System
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Disabled
CKIP ......................................... Disabled
IP Security Passthru.......................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Auto Anchor................................... Disabled
H-REAP Local Switching........................ Disabled
Management Frame Protection................... E

when i try to assocate the dhcp scope to wireless.guest.data interface using 192.168.255.1 which is the ip of the that interface it will not let me. I would have thought since i was using the interal dhcp that the .1 address would be the dhcp scope address also. i can assign 192.168.255.0 or 192.168.255.2(gateway)if i use .0 or .2 the dhcp request (discovery) process starts and then will forward to .2 (gateway) and never assign an address. the only thing that happens is that the client wireless interface will get 255.255.255.255 for a few seconds then go away.
what i am trying to accomplish is to connect the wlc port 2 directly to a pix 506 which goes to the internet so the guest traffice is not on our vlan.
any other suggestions on guest vlans would be appricated....
Tom
Interface Name................................... wireless.guest.data
IP Address....................................... 192.168.255.1
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 192.168.255.2
VLAN............................................. 150
Quarantine-vlan.................................. no
Physical Port.................................... 2
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Scope: wireless.guest.data.dhcp.server
Enabled.......................................... Yes
Lease Time....................................... 86400 (1 day )
Pool Start....................................... 192.168.255.17
Pool End......................................... 192.168.255.30
Network.......................................... 192.168.255.0
Netmask.......................................... 255.255.255.0
Default Routers.................................. 192.168.255.2 0.0.0.0 0.0.0.0
DNS Domain.......................................
DNS.............................................. 0.0.0.0 0.0.0.0 0.0.0.0
Netbios Name Servers............................. 0.0.0.0 0.0.0.0 0.0.0.0

IPS Modem to Vonage router to Time Capsule to Airport Express. Now I want to add a guest network.

I want to set up a guest network.
I understand that there can only be one main router and the others should be in bridge mode to set the guest network feature on the Time Capsule.
If I set the Time Capsule from bridge mode to "DHCP + NAT" then I lose my internet.
Since I think the Vonage router is set as the main router how can I swap that function with the Time Capsule or perhaps that cannot be done.
Please let me know what I should try or whether to give up.
Thanks.

Thanks. I understand you want to "swap" your Vonage box with your Time Capsule. That will require re-enabling the Time Capsule's DHCP and NAT as you already attempted and explained in your original post, connecting the Time Capsule directly to your modem, and installing the Vonage box "downstream" of the Time Capsule by connecting it to a Time Capsule LAN port.
I assume you using your Mac wirelessly, that you have cable Internet (as opposed to DSL, FiOS, satellite, or office / school wired LAN), and that right now everything is working including your Vonage telephone service. If any of that is not correct, stop here and let me know.
You should also print these instructions, since you will be unable to communicate with either your Mac or your phone until you are finished and everything works correctly. If all else fails you may have to begin all over again with a "hard reset" of both your Time Capsule and the Vonage box and reconfigure them completely. Any Time Machine backups already completed will not be affected though.
Then:
Power down your cable modem: unplug it from the wall receptacle.
Disconnect the Ethernet cable linking the Vonage box and the Time Capsule. Set it aside for now.
Disconnect the Ethernet cable end attached to the Vonage box's blue port, and connect it the Time Capsule's WAN port instead.
Take the cable you set aside and connect the Vonage's blue port to one of the three Time Capsule's LAN ports.
Power up your modem and wait a moment or two for it to complete its startup sequence.
On your Mac, open AirPort Utility and reconfigure your Time Capsule's Router Mode to "DCHP and NAT" as you did previously. Update and allow a moment or two for it to reset.
Verify that you can use your Mac to load web pages and that your Time Machine backups continue to occur as usual.
Should something not go as expected and you need to make changes, be absolutely certain to power down your modem before changing what you connect to it.
Next:
The following Vonage video will illustrate the remaining steps particular to the Vonage box: Set Up Vonage Box With Router
Review their tutorial and make sure all its instructions make sense for what you have. If something doesn't, write back and I'll try to figure it out.
... how to make the vonage router a bridge.
Unless you want to use the Vonage box's LAN (yellow) port to connect an additional wired computer or other network it's not necessary to reconfigure it as a bridge. The Vonage's router will just remain unused.
If you want to do that though, you must log in to the Vonage box's configuration web page. Its address will be assigned by your Time Capsule, sequentially: for example if your Mac's IP address is 10.0.1.2 your Vonage box might be 10.0.1.3 or something along those lines. You may have to experiment to find out what it is (see Note below). Once you find it though, you will be presented with a login page resembling the following:
Its default User Name is router and so is its password. Click Go to log in.
Once there, navigate to Basic Setup > Local Network Setup, and change DCHP Server to No as in the following:
Click Apply and you're done.
Note: just like all non-portable network devices, it makes sense to assign the Vonage box a static IP address: Basic Setup > Connect to the Internet, and change Connect Using to Static IP Address. You'll have to fill in the fields using addresses appropriate for your network.

Guest network in bridged mode (or other non-DHCP mode)

Hello,
I have the (Simultaneous Dual Band II) Airport extreme.
I wanted to use it at work but creating a secure network (my printer, computers, and drives) and a guest network (no password so people can access internet).
They already have a DHCP server (in the past I have a mistake by forgetting to turn off DHCP on a router which assigned other computers IP address (upstream) which conflicted with their DHCP server and all kinds of problems ensued).
So I know that in Bridge Mode, the guest network is turned off.
What are my options? I'm afraid to take if off bridge mode because of the DHCP issue. But I really want to use the dual network mode on the Airport Extreme.
So I don't want to bring down the whole network, can i safely use something other than bridge mode? other ideas?
Thanks in advance for any feedback
(yes I have searched a lot for the issue but I'm not sure what to do)

First, you question the policies about my work place (none of your business).
Sorry for suggesting that you check the policies before you violate something that could get you fired.
But then, you "would bet" that I hooked something wrong (could have asked).
Sorry but that is certainly a higher probability than a router malfunctioning in that manner.
It may not be your intention (just as it is not mine to be ungrateful).
Not sure if you are showing that with your last post.

Using an airport extreme in both bridged mode and guest network with DHCP

I currently use a third-generation airport extreme in bridge mode to connect my various Mac servers To the Internet. I'm using bridge mode on the AirPort Extreme because I have up to five static IP address (only using three now) I am currently not using the wireless network, and none of the servers are serving DHCP. I am looking at the Newer airport extreme with guest network Wi-Fi. My question is, does the new airport extreme base station support bridge- mode for any devices and host DHCP for the guest network connecting wirelessly to the base station?

The AirPort Extreme cannot be in Bridge Mode and support a Guest Network.
The AirPort must be configured to provide DHCP and NAT services if you want to enable the Guest Network function.
If you really do have a 3rd Gen AirPort Extreme, it will support the Guest Network feature if you connect the AirPort directly to a simple modem.....not a modem/router or gateway type of devices.......and configure the AirPort to provide DHCP and NAT services for the network.

HT3477 I am attempting to set up a guest network. When I change the Network settings to DHCP NAT I get a message that tells me that the service has a private IP address and so I must connect using off bridge mode. In this mode I can not connect to the int

I am attempting to set up a guest network on the Airport Extreme Base Station. The Base Station is connected to a DSL Modem. The network is also extended using an Airport Express. When I have attempted to set up the Base Station using DHCP NAT in the netword feature I get a message that because the service has a private IP address the only way that I can connect is in Off Bridge Mode. In this mode I do not seem to be able to connect to the internet using the guest network. Any suggestions would be helpful.

Ok, your Speedport is actually a combination DSL modem and wireless router. In this case you would typically configure a downstream router, like your AirPort Extreme in Bridge mode. Unfortunately, when in Bridge mode, the AirPort does NOT support providing a guest network.
The only possible option is to reconfigure the Speedport as a bridge and use the Extreme as your Internet router. You would still need the DSL modem provided by the Speedport for Internet connectivity.

HT4628 Why does internet connection on my Time Capsule cut out (on main but not guest network)?

Hi - I just got a time capsule 802.11n to use with my Macbook (OSX 10.6.8).
My wireless connectivity on my main (but not guest) network cuts out EVERY FRICKEN DAY multiple times. The internet phone connection + guest network still work, so the internet connection is there -- something with the main network is going wrong.
When I reset the time capsule (remove plug and plug back in), it works fine again.
Can anyone recommend a solution so this connectivity problem stops? Never had any issues with my Netgear wireless router, so at the moment, I'm really disappointed in this Apple product. Hopefully there is a setting I can switch to fix this (or something else simple one of you smart people out there can recommend)
Thanks,
JLG

In any event, if your OS X version is 10.7.x, download and install AirPort Utility 5.6 for Lion:
Lion: AirPort Utility 5.6.
If your OS X version is 10.5.x or 10.6.x, download and install AirPort Utility 5.5.3:
Leopard, Snow Leopard: AirPort Utility 5.5.3.
After you install the appropriate version of AirPort Utility, open it. The program will be located in your Utilities folder, which in turn is found in your Applications folder.
To open the Utilities folder, go to the Finder and select "Utilities" from the Go menu:
AirPort Utility 5.6 looks like this:
... but make sure you use the version of AirPort Utility you just downloaded.
Launch AirPort Utility and select your Time Capsule. Click Manual Setup, then the Guest Menu tab, then you can elect to disable the guest network, or to establish whatever security settings you want.
The window looks somewhat like this:
If your version of AirPort Utility does not look anything like that, you are probably not using the one you just downloaded. Find it and start over.
When you are finished configuring your Time Capsule, click Update and allow the Time Capsule to restart.

WLC Guest Network DHCP run out of IPs??

Similar Messages

Maybe you are looking for