different Vlan configuration

[Malik]

how can configure  different VLANs for Access Points and WLANs for clients ??

[rmu]

hi malik

can you send the config?

nr
rmu

[Malik]

Hi 

thanks for all replay 

I did it but in a different way, so I have configured bridging mode in WLAN to Tunnle mode with vlan 1725 assignment, after that clients get IP from this vlan (1725) and everything's it's ok,

but the new issue appeared, which is the connectivity is unstable because I have two controller with cluster configuration ( Active ,standby ) ,but when  turn off one of the two controllers the the connection becomes stable.

[rmu]

hi malik

when clients get an AP-IP, i think your ssid is mapped to the same vlan.

heres an excerpt of my lab-config:

wlan LAB-Notebooks
  description LAB-Notebooks
  ssid lab-notebooks
  vlan 100
  bridging-mode local
  encryption-type ccmp
  authentication-type none
  wpa-wpa2 psk 0 <passphrase>
  wpa-wpa2 tkip-countermeasures hold-time 3600

wlan LAB-Tablets
  description LAB-Tablets
  ssid lab-tablets
  vlan 200
  bridging-mode local
  encryption-type ccmp
  authentication-type none
  wpa-wpa2 psk 0 <passphrase>
  wpa-wpa2 tkip-countermeasures hold-time 3600

profile ap410 lab-ap410
  interface radio1
    wlan lab-notebooks bss 1 primary
    wlan lab-tablets bss 2 primary
  interface radio2
    wlan lab-notebooks bss 1 primary
    wlan lab-tablets bss 2 primary
interface ge1
  switchport mode trunk
  switchport trunk allowed vlan 10,100,200
  switchport trunk native vlan 10
interface vlan10
  description AP-Mgmt
  ip address dhcp
  ip dhcp client request options all

>> ap is using vlan 10 for management. ap interface is untagged for vlan 10.
>> both ssids are bridged locally at the ap
>> ssid: lab-notebooks >> vlan 100
>> sisd: lab-tablets >> vlan 200


if it still does not work in your setup, pls send me your config.

[Christoph_S]

Hello Malik,

1 - Plug your laptop into the same switchport the AP was plugged into and configure it for the same vlan. Does it pull and IP address?
2 - Configure your laptop with a static IP address for said VLAN and connect to the wlan. Can you ping anything on said vlan, namely the DGW, DHCP server, other devices. 
3 - Make sure that the switch the APs are connected to are also trunked allowing same vlans through

On the AP you can run the following command to see where DORA is failing:

#service pktcap on interface ge1 count 100 filter port 67
Try to connect your wireless device at this point and check the output. 

I hope this helps

[Malik]

Hello Christoph S. , many thanks for your answers .

I set vlans to WLAN and made ge port 1 trunk and allow all vlans to pass through but when clintes connect to the Wlan thier get an APIPA ip address.