topic Re: DHCP Scope for VLAN in Switches, Hubs, and Modems

DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 13:15:14 GMT

Hi,

I have recently configured a VLAN (VLAN 2) on a HP 4208vl.
VLAN has interface IP 172.14.10.254/16
A wireless AP is plugged into VLAN 2

I have set up a scope on my DHCP 172.14.10.0-254/16

I have configured IP-Helper on VLAN 2 as DHCP is located on 10.14.10.4/16

when I connect using the wireless AP - I still recieve IP address from default DHCP Scope (I get 10.14.10.X)

What am I missing - Why do I not get an address frome the 172 scope?

Thanks,

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 14:10:43 GMT

which of your access point device

and please send me show run print your switch

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 14:13:43 GMT

ProCurve Switch 4208vl# show run

Running configuration:

; J8773A Configuration Editor; Created on release #L.10.23

hostname "ProCurve Switch 4208vl"
module 1 type J8768A
module 3 type J8768A
module 4 type J8768A
module 5 type J8768A
module 2 type J9033A
ip default-gateway 10.14.40.254
ip routing
ip irdp
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1-B17,B21-B24,C1-C24,D1-D24,E1-E24
ip address dhcp-bootp
no untagged B18-B20
exit
vlan 2
name "VLAN_Wire"
ip address 172.14.10.254 255.255.0.0
ip helper-address 10.14.10.4
tagged A18,B17-B20
exit
vlan 10
name "management"
ip address 10.0.10.1 255.255.255.0
tagged B17
exit

The AP is a HP Procurve 420

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 14:21:26 GMT

your switch configuration is true
we can check access point

please send me
show system and show ssid index 1-2...
print on 420

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 14:33:09 GMT

info attached

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 14:35:44 GMT

...and thanks for your time Cenk.

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 14:39:41 GMT

your access point configuration vlan stata is disable
please enter this command on access point

420(config)#vlan enable static

and retest

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 14:49:40 GMT

I am now unable to get an IP address from DHCP?

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 14:54:18 GMT

which port connect to switch your access point

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 14:56:42 GMT

and which port connect your dhcp server

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 15:00:14 GMT

Port B17

I just set it to tagged on Default LAN - no difference.

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 15:02:58 GMT

DHCP Server is on A1

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 15:07:53 GMT

we must come back switch config

ip helper command runing with routing
but your have not ip address default vlan
your dhcp server in default vlan

please change switch config

ip routing
ip irdp
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B1-B17,B21-B24,C1-C24,D1-D24,E1-E24
ip address 10.14.10.254 255.255.0.0********
no untagged B18-B20
exit
vlan 2
name "VLAN_Wire"
ip address 172.14.10.254 255.255.0.0
ip helper-address 10.14.10.4
tagged A18,B17-B20
exit
vlan 10
name "management"
ip address 10.0.10.1 255.255.255.0
tagged B17
exit

and dhcp server default gateway address must have vlan 1 ip address(10.14.10.254)

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 15:16:56 GMT

the DEFAULT_VLAN is my LAN - how will this affect PCs on the LAN?

The DHCP current IP is 10.14.10.4

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 15:22:25 GMT

does not affect any of the

give me a few minutes you'll be prepared for a new general configuration

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 15:37:52 GMT

I've assigned default_vlan IP address 10.14.10.254

Default gateway for DHCP Scope 172.14.10.0-254/16 is now 10.14.10.254.

a laptop connecting via wireless network cannot get IP address from DHCP

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 15:56:10 GMT

---------------switch config----------------
ip default-gateway 10.14.40.254
ip routing
snmp-server community "public" Unrestricted
vlan 1
name "DEFAULT_VLAN"
untagged A1-A24,B2-B24,C1-C24,D1-D24,E1-E24
ip address 10.14.10.254 255.255.0.0
no untagged B18-B20
exit
vlan 2
name "guest"
ip address 10.15.10.254 255.255.0.0
ip helper-address 10.14.10.4
untagged B1
tagged A1-A24,B2-B24,C1-C24,D1-D24,E1-E24
exit

----------------dhcp config-----------------
ip address 10.14.10.4 ***connect port A1
subnet mask 255.255.0.0
default gateway 10.14.10.254 !!!!!!

scobe 1 for lan
range 10.14.---255.255.0.0
default gateway 10.14.40.254

scobe 2 for guest
range 10.15.--- 255.255.0.0
default gateway 10.15.10.253

-----------------internet router--------------
already running one lan interface on router
10.14.40.254 this interface connect port A2

you must have create new isolated lan interface on internet (samely DMZ)
router second lan interface ip address must have 10.15.10.253 this interface connect B1

--------------access point--------

your access point config Keep as
only change ip address for example 10.14.10.200/16
and connect on any switch port

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 16:01:56 GMT

your switch don't support access control list
for this reason, such a configuration to make the necessary security and perfromans

you must have create second lan interface for guest wireless users on internet router for their internet connection

with this configuration one dhcp server serve all guest and lan user each other without mixing

Re: DHCP Scope for VLAN

cenk sasmaztin — Mon, 14 Sep 2009 16:02:55 GMT

please test and say me result

good evening

Re: DHCP Scope for VLAN

Ezugo — Mon, 14 Sep 2009 16:15:17 GMT

Thanks Cenk,

i shall give this a go and see if I can get it working.