Help with DHCP issue on x460 stack(s) in relation to wireless on AP6511 units

[Eerie_One]

Inherited a network with two stacks of Extreme 460 switches. One stack in MDF, one stack in IDF. Attached to these are ap6511 wireless access points with two wireless lans setup. Domain and Guest. Domain for both wired and wireless use on-site DHCP. Guest is setup to use a public DNS and have the switches handle DHCP. Any units that connect to the wireless radios tied into the MDF stack receive a DHCP address and gain internet access on the designated 10.xx.xx.xx network.

Any units that connect via the IDF radios for the Guest network do not receive a 10.xx.xx.xx address and have no internet access. They receive a 169.xx.xx.xx address.

The wireless broadcasts and prompts for sign-on but beyond that, does not get an address.

What is likely missing or not configured on the stack in the IDF?
I tried setting the VLAN DHCP via the screenplay interface to match what is on the MDF stack but that had no effect. I've also connected to each stack via various CLI commands but nothing.

It's worth noting that any Domain wireless on either stack connects and operates fine so I'm pretty sure this is all related to the failure of the IDF stack to properly request/assign addresses.

MDF has a protocol address set, IDF has same address set with one digit up in final octet. DHCP ranges were set as the same as I found on MDF.

Any help, much appreciated.
Thanks!

[Erik_Auerswald]

Hi,

there could be many reasons for your problems. Perhaps the following GTAC Knowledge articles can help you narrow it down:

• Troubleshooting DHCP issues
• How to configure DHCP Snooping on EXOS

I would advise to first get DHCP working before enabling DHCP snooping.

Best regards,
Erik

[Erik_Auerswald]

Hi,

well, what does your network look like?

A basic setup could use a direct connection (usually fiber, depending on distance copper might work as well) between the two stacks. This connection can be a layer 2 link, i.e. you configure tagged VLANs on this link. If you use this method, only one of you switches needs to have non-management IP addresses configured, and only one switch needs to have a DHCP server configured. You should consider the IDF stack as an extension of the MDF stack.

If you are using security features (e.g. DHCP snooping), you have explicitly enabled them. So you know that you are using them.

Anyway, I suppose you start with basic troubleshooting, checking layer 2 connectivity (do you see MAC addresses of devices connected to the IDF stack on the MDF stack? [show fdb]). Layer 2 connectivity should suffice for DHCP.

HTH,
Erik

[Eerie_One]

Thanks Erik.
I'm new to the XOS and Extreme Switches, what would I look at to see how the two MDF and IDF connections are made for purposes of having them serve as 'one' DHCP server?

I'm guessing your last statement is the problem... that the basic DHCP does not support the two stacks talking as one. In that case, that means I need to establish a new range on the IDF stack and then add all of those settings to our firewall to allow that new range out/in?

Thanks for the assistance.

[Erik_Auerswald]

Hi,

I am not completely sure I understand your setup, so please correct me if I make wrong assumptions.

If you are using a layer 2 connection (VLAN trunk) between the MDF and IDF switches, then you need only one DHCP server. If you use two DHCP servers they either need to assign different addresses, or they need to communicate with each other (the basic DHCP servers on EXOS do not support the latter).

If you use DHCP snooping, you need to ensure that the link between the two switches is trusted.

HTH,
Erik