BYOD Help!

[edsa131]

I am looking at implementing a BYOD solution for our Sixth Form.  I have installed 4 Aerohive AP230s and will use Hive Manager Cloud Management to manage the wireless network side of the solution.

I have the following resources:

1 HP Switch 5406zl (J8697A) (Core)
1 HP 2530-48G-PoEP Switch (J9772A) (Edge - Sixth Form)
4 Aerohive AP230 Access Points
1 Aerohive Hive Manager
1 Microsoft Network Policy Server (RADIUS)
1 Smoothwall UPS S8 Appliance

The two switches are linked by a 1GB fibre connection.

I have created 2 VLANs: VLAN 10 and VLAN 20

VLAN 10 is named CORP_VLAN for Teachers and Staff access
VLAN 20 is named BYOD _VLAN for BYOD traffic internet access only

I have a RADIUS Server setup to use 802.1x Windows Authentication for both VLANs

On the core switch B3 connects to port 49 of the Edge switch and this is the fibre uplink connection.

The configuration of the 2 switches is as follows:

Core Switch: VLAN 1 Default_VLAN (Primary)

IP Address: 10.1.0.23
SM: 255.255.0.0
GW: 10.1.0.19
Ports Tagged: None
Ports Untagged: A1-A9,A11-A24,B1-B24,C1-C24

Core Swtich: VLAN 10 CORP_VLAN

IP Address: 10.6.0.10
SM: 255.255.0.0
GW: 10.1.0.19
Ports Tagged: B3
Ports Untagged: None

Core Switch VLAN 20 BYOD_VLAN

IP Address: 10.5.0.10
SM: 255.255.0.0
GW: 10.1.0.19
Ports Tagged: B3
Ports Untagged: None

Sixth Form Switch VLAN 1 Default_VLAN (Primary)

IP Address: 10.1.0.197
SM: 255.255.0.0
GW: 10.1.0.19
Ports Tagged: None
Ports Untagged: 1-24  29-52

Sixth Form Switch VLAN 10 CORP_VLAN

IP Address: 10.6.0.10
SM: 255.255.0.0
GW: No Gateway
Ports Tagged: 49
Ports Untagged: 25-28

Sixth Form Switch VLAN 20 BYOD_VLAN

IP Address: 10.5.0.10
SM: 255.255.0.0
GW: No Gateway
Ports Tagged: 49
Ports Untagged: 25-28

DHCP Config:

Scope 10.1.0.0 (Default Scope | Default_VLAN)
Address Pool: 10.1...0.0 - 10.1.20.254
Router: 10.1.0.23 (Core Switch)
DNS Servers: 10.1.0.125, 10.1.0.126
Domain Name: acaciahighschool.local

Scope 10.5.0.0 (BYOD_VLAN)
Address Pool: 10.5.0.50 - 10.5.20.254
Router: 10.5.0.10
DNS Servers: 10.1.0.125, 10.1.0.126
Domain Name: acaciahighschool.local

Scope 10.6.0.0 (CORP_VLAN)
Address Pool: 10.6.0.50 - 10.6.20.254
Router: 10.6.0.10
DNS Servers: 10.1.0.125, 10.1.0.125
Domain Name: acaciahighschool.local

Hi

The APs are all recieving IP addresses from VLANs 10 and 20, but when probing for VLANs from the AP230s they cannot find any VLAN apart from the Default_VLANs

My question is does the switching and routing look consistent and correct in combination with the DHCP scopes that are setup for the associated VLANs.

I would really appreciate some expert guidance on this

[Richard Litchfield]

I think you need to look at your IP addressing first - you have some mismatches with the subnet ranges and the gateways that should be in those ranges based on what you have posted.

eg IP Address: 10.6.0.10
SM: 255.255.0.0
GW: 10.1.0.19 <-- should this be 10.6.0.19?

See http://www.subnet-calculator.com/cidr.php as a good tool for helping with IP addressing

It also looks like the VLANs 10, 20 have the same untagged ports 25-28 - you can only have one untagged VLAN per port. One VLAN should be tagged.