What would cause an access point to not pass through a DHCP offer to a wireless client?

tom_dicks — Thu, 18 Oct 2018 21:22:47 GMT

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

tom_dicks — Thu, 18 Oct 2018 21:25:47 GMT

More details:

The customer's site uses RADIUS to authenticate wireless clients. It's an Aerohive environment with APs across a number of sites, and this particular site is the only one showing this issue.

There are 3 SSIDs:

- Corporate

- Staff

- Guest

The staff and guest SSIDs authenticate with a pre-shared key and live on vlan 98 and 99 respecitvely. Corporate authenticates with radius (which is working, no issue there) on vlan 97.

What I'm seeing is any client connecting to corporate is able to auth via radius and issue a DHCP discover to the onsite router. The router adds a binding to its DHCP config and responds with an offer, as seen by both the router debug, the switchport mirror AND the access point's packet sniffer. However, the client never receives the DHCP offer.

The curious thing here is the AP's own debug log showing it is forwarding a DHCP offer to the client.

Has anyone come across a similar scenario? I'm not sure if it's isolated to Aerohive specifically or something else, but the fault happens on the two ThinkPads and Lumia mobile phone we've connected so far, and it's exactly the same problem. I suspect there may be some kind of security policy on the AP which is preventing it from actually forwarding the DHCP offer, but haven't been able to find anything in the AP's config.

Another noteworthy mention is that this is only happening on one site. The exact same setup is used across a number of other sites with the same model of AP, and these work just fine.

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

sermeidis — Thu, 29 Nov 2018 21:48:53 GMT

Hi Tom,

We're experiencing the exact same issue but only when the client device tries to connect on the 5Ghz band, 2.4 works fine! Did you find a fix for that??

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

greenj — Fri, 25 Jan 2019 01:34:44 GMT

We are also experiencing this issue where client not getting IP address via DHCP (esp. on AP320) and it resolved when we replaced the 5GHz radio profile with a fresh one that allowed us to disable DFS.

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

bruce_stahlin — Fri, 25 Jan 2019 06:12:03 GMT

What does Client Monitor reveal? Under "Tools," select "Client Monitor" and enter the MAC of an affected client. This is a great way to see negotiations between APs and clients.

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

greenj — Fri, 25 Jan 2019 21:59:55 GMT

Client monitor before making the change looked like this: Lots of cycles of Discover from the client and repeated Offers from the server, but never a Request from the client:

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3486)station sent out DHCP DISCOVER message

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3487)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3488)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3489)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3490)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3491)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3492)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3493)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:06 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3494)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3539)station sent out DHCP DISCOVER message

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3540)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3541)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3542)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3543)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3544)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3545)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3546)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:28:15 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3547)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3756)station sent out DHCP DISCOVER message

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3757)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3758)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3759)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3760)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3761)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3762)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3763)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:23 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3764)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3765)station sent out DHCP DISCOVER message

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3766)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3767)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3768)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3769)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3770)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3771)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3772)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:25 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3773)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3774)station sent out DHCP DISCOVER message

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3775)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3776)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3777)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3778)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3779)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3780)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3781)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:27 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3782)DHCP server sent out DHCP OFFER message to station

01/24/2019 10:29:31 AM 9801A7C4EED7 0019771A17E9 FES-11-320 INFO (3835)station sent out DHCP DISCOVER message

Client monitor after the change shows normal DHCP process:

01/24/2019 11:12:21 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1582)station sent out DHCP DISCOVER message

01/24/2019 11:12:21 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1583)DHCP server sent out DHCP OFFER message to station

01/24/2019 11:12:21 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1584)DHCP server sent out DHCP OFFER message to station

01/24/2019 11:12:21 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1585)DHCP server sent out DHCP OFFER message to station

01/24/2019 11:12:21 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1586)DHCP server sent out DHCP OFFER message to station

01/24/2019 11:12:22 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1587)station sent out DHCP REQUEST message

01/24/2019 11:12:22 AM 9801A7C4EED7 0019771A17D5 FES-11-320 INFO (1588)DHCP server sent out DHCP ACKNOWLEDGE message to station

01/24/2019 11:12:22 AM 9801A7C4EED7 0019771A17D5 FES-11-320 BASIC (1589)DHCP session completed for station

-Jon

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

collin_wicker — Wed, 28 Aug 2019 23:37:23 GMT

I believe I just ran into this issue this morning as well. I created a new radio policy with the DFS channels disabled and pushed it to the AP and then the client was able to receive an IP address. We've been running the same firmware for a while and this is the first time I've seen this. Does anyone have a firmware recommendation for AP250's that fixes this? We use DFS channels and I would like to not have to re-do our channel plan.

We are currently running 8.3r3 and HiveManager Classic on prem.

topic Re: What would cause an access point to not pass through a DHCP offer to a wireless client? in Aerohive Migrated Content

What would cause an access point to not pass through a DHCP offer to a wireless client?

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?

Re: What would cause an access point to not pass through a DHCP offer to a wireless client?