Unable received DHCP IP address from MSM310 in different vlan

[Ryan Cheah]

I had configured 12 vlans on my core-switch 3500. Below is my configuration and the attached is the MSM310 backup config. I got 1 vlans in the MSM310 that's a vlan 12 and got 2 SSID there.

Startup configuration:

; J8692A Configuration Editor; Created on release #K.12.57

hostname "DJNB_3500_Switch"
time timezone 480
module 1 type J86xxA
ip routing
snmp-server community "public" Unrestricted
vlan 1
name "Management"
untagged 1-24
ip address 192.168.20.2 255.255.0.0
exit
vlan 2
name "CEO/DCEO/Chairman"
ip address 10.1.2.1 255.255.255.0
tagged 23-24
exit
vlan 3
name "Human_Resources"
ip address 10.1.3.1 255.255.255.0
tagged 23-24
exit
vlan 4
name "Finance"
ip address 10.1.4.1 255.255.255.0
tagged 23-24
exit
vlan 5
name "Risk_Management"
ip address 10.1.5.1 255.255.255.0
tagged 23-24
exit
vlan 6
name "Corporate_Comms"
ip address 10.1.6.1 255.255.255.0
tagged 23-24
exit
vlan 7
name "Legal"
ip address 10.1.7.1 255.255.255.0
tagged 23-24
exit
vlan 8
name "Internal_Audit"
ip address 10.1.8.1 255.255.255.0
tagged 23-24
exit
vlan 9
name "Underwriting"
ip address 10.1.9.1 255.255.255.0
tagged 23-24
exit
vlan 10
name "Special_Project"
ip address 10.1.10.1 255.255.255.0
tagged 23-24
exit
vlan 11
name "CCTV"
ip address 192.168.50.1 255.255.255.0
tagged 23-24
exit
vlan 12
name "Guest_AP"
ip helper-address 192.168.10.1
ip address 10.1.12.1 255.255.255.0
tagged 17,23-24
exit
ip route 0.0.0.0 0.0.0.0 192.168.20.1
spanning-tree
spanning-tree 17 bpdu-filter

My concern is the MSM310 AP SSID for guest unable to get the dhcp ip address. I had been using ping command on the core-switch and the AP are ping successful. I already created DHCP scope and point the gateway ip address to 10.1.12.1. It's very strange, it can't get the IP address once i connected to guest SSID.

Thanks for advanced to assist.

P.S. This thread has been moved from Communications, Wireless (Legacy ITRC forum) to MSM Series. -HP Forum Moderator

[cenk sasmaztin]

hi Ryan

fristly
is your dhcp server address 192.168.10.1

and which vlan are connected

[Ryan Cheah]

Hi Cenk,

Yup, that is my dhcp server ip address. It is connected to vlan 12. But i got firewall leased the ip address range 192.168.100.x/16

[cenk sasmaztin]

please make test
any switch port assign untagged vlan 12 and connect pc on this port

if this pc take ip from dhcp server your switch config is true

at the time we examine access point device config

please test and say me result

[Shadow13]

What auth, are you using on this ssid, check 1st if clients are authenticated correctly if you are using authentication.
also you have mentioned 1 ssid, are both of them on vlan 12 ?
which port is connected to the AP on the switch?

[Shadow13]

one more thing, i think the port connects the AP is port 17, it is tagged on vlan 12 so have you configured any vlan on the SSID itself ?

[Ryan Cheah]

Hi Cenk,

Nope, don't have. The port would get the IP address range on 192.168.100.x

Beside Shadow,

Yes, i'm sure is correct authentication. Actually the situation is like this. I configured 2 ssid. 1st ssid is for staff that is connecting management vlan 1(existing network) and then 2nd ssid is for guest that is connecting to vlan 12 called Guest_AP. The AP is connected to port 17 and tagged on vlan 12. I got run show vlan 17 detail, it is show me have 2 vlans there that are vlan 1 and vlan 12.

[cenk sasmaztin]

your access point config is true

we must check switch config

my test
any switch port assign untagged vlan 12 and connect pc on this port

if pc don't take ip from dhcp server your switch or dhcp server config is false

[cenk sasmaztin]

what is your dhcp server nic ip config /all

and

where is your dhcp server

you say my dhcp server connect vlan 12, but I can't see vlan 12 untagged port for your dhcp server

if your dhcp server resiade other network site you must enable dhcp relay on your other site connection device (vpn device ,firewall,router)

[Ryan Cheah]

Okay, let me testing on it and let you know.