?
Solved

HP 765 MSM Wireless Controller DHCP Problems

Posted on 2010-09-13
9
Medium Priority
?
4,153 Views
Last Modified: 2012-05-10
Current Setup:

We currently have one core router/switch (HP 5412zl) with a MSM module inside of it.  It is equipped with 10GB/1GB links to different subnets (all have 5412zl).  The VLAN & IP & routing scheme is as follows for the core router and i will list one other site to give an idea of our setup

Core IP/VLAN:

1      | MGMT                  | Manual     10.100.0.1      255.255.248.0   No No
5      | Servers               | Manual     172.16.0.1      255.255.0.0     No No
100  | User VLAN           | Manual     10.100.100.1    255.255.252.0   No No
120  | Services A           | Manual     10.100.120.1    255.255.255.0   No No
140  | Services B           | Manual     10.100.140.1    255.255.255.0   No No
160  | Services C           | Manual     10.100.160.1    255.255.255.0   No No
200  | WLAN Managed   | Manual     10.100.200.1    255.255.255.0   No No
1010|WAN to CE            | Manual     192.168.101.1   255.255.255.252 No No
1020|WAN to CH           | Manual     192.168.102.1   255.255.255.252 No No
1030|WAN to THS          | Manual     192.168.103.1   255.255.255.252 No No
1040|WAN to TMS          | Manual     192.168.104.1   255.255.255.252 No No
1050|WAN to SQ            | Manual     192.168.105.1   255.255.255.252 No No
1060|WAN to GW           | Manual     192.168.106.1   255.255.255.252 No No

Core IP Route:

0.0.0.0/0                172.16.1.7      5    static               1          1
10.100.0.0/21        MGMT                   1    connected            1          0
10.100.10.40/29    VCenter               6    connected            1          0
10.100.100.0/22    User VLAN          100  connected            1          0
10.100.200.0/24    WLAN Managed  200  connected            1          0
10.101.0.0/16        192.168.101.2   1010 static               1          1
10.102.0.0/16        192.168.102.2   1020 static               1          1
10.103.0.0/16        192.168.103.2   1030 static               1          1
10.104.0.0/16        192.168.104.2   1040 static               1          1
10.105.0.0/16        192.168.105.2   1050 static               1          1
10.106.0.0/16        192.168.106.2   1060 static               1          1
172.16.0.0/16        Servers                 5    connected            1          0
192.168.101.0/30  WAN to CE         1010 connected            1          0
192.168.102.0/30  WAN to CH         1020 connected            1          0
192.168.103.0/30  WAN to THS       1030 connected            1          0
192.168.104.0/30  WAN to TMS       1040 connected            1          0
192.168.105.0/30  WAN to SQ        1050 connected            1          0
192.168.106.0/30  WAN to GW       1060 connected            1          0
192.168.200.0/24   172.16.0.10        5    static               1          1
192.168.201.0/24   172.16.0.10        5    static               1          1
192.168.202.0/24   172.16.0.10        5    static               1          1

172.16.1.7 is the Firewall and 172.16.0.10 (internet port) is the MSM controller inside the 5412zl. 192.168.200.0, 192.168.201.0, & 192.168.202.0 are the IPs for the MSM in the tunneled interfaces.

Here is the IP route/ VLAN for one of the sites (Greenwood)

Greenwood IP/VLAN:

1      | MGMT                  | Manual     10.106.0.1      255.255.248.0   No No
100  | User VLAN           | Manual     10.106.100.1    255.255.252.0   No No
120  | Services A           | Manual     10.106.120.1    255.255.255.0   No No
140  | Services B           | Manual     10.106.140.1    255.255.255.0   No No
160  | Services C           | Manual     10.106.160.1    255.255.255.0   No No
200  | WLAN Managed   | Manual     10.106.200.1    255.255.255.0   No No
1060| WAN to Core       | Manual     192.168.106.2   255.255.255.252 No No

Greenwood IP Route:

0.0.0.0/0              192.168.106.1      1060 static               1          1
10.106.0.0/21      MGMT                     1    connected            1          0
10.106.100.0/22   User VLAN            100  connected            1          0
10.106.120.0/24   Services A            120  connected            1          0
10.106.140.0/24   Services B            140  connected            1          0
10.106.160.0/24   Services C            160  connected            1          0
10.106.200.0/24   WLAN Managed    200  connected            1          0
192.168.106.0/30 WAN to Core        1060 connected            1          0

All the routes work and ping correctly on wire.  On the wireless there are 4 VSCs one on the network and 3 tunneled.  All APs are untagged in the MGMT vlan and tagged in the WLAN Managed VLAN.

Problem:

90% of the clients connect fine and authenticate, but 10% authenticate fine according to the log, but receive no IP (169.x.x.x).  This is on the tunneled VSCs as well as the non-tunnneled.  All the DHCP servers are connected on the server vlan on the core switch, and there are no DHCP problems on wired ports.  The problems seems completely random... machines right next to each other will work and not work.  Machine might work on one subnet... move to the next site will not get an ip even if there are many right next to it that do work.

The problem does seem to happen more often on the subnets outside of the core router.  All APs find the controller by dns.  They are configured/synchronized and show to be working.

I have used wireshark to try to determine the problem on the controller port and the client port.  The client authenticates ok, sends dhcp requests and gets no answer, times out.

Any Ideas at all... i am going crazy here!!!  

Let me know if you need any more information.

Thanks!
0
Comment
Question by:tahlequahitguys
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 1

Author Comment

by:tahlequahitguys
ID: 33665219
Also... forgot to mention that a restart of the MSM will sometimes get an ip for the clients, but it does not last
0
 
LVL 5

Expert Comment

by:RikeR
ID: 33669434
Which firmware are you on right now? The current release should be 5.4.1.

I know there is an issue with the 765 and DHCP relaying when using teaming. Procurve has not come up with a solution for it.

You can also open a ticket at:
http://www.wlanparts.com/product/PA24-19/19dBi-24GHz-Panel-Antenna.html

You can find some reference guide at:
http://h10144.www1.hp.com/solutions/enterprise/mobility/mobility-resources.htm

Just to check your design ;)
0
 
LVL 1

Author Comment

by:tahlequahitguys
ID: 33682051
I just upgraded to 5.4.1, but still the same problem, and we are not using teaming
0
Limited time offer using promo code EXPERTS30

Designed with a wealth of functionality and convenience, ATEN's new Thunderbolt™ 2 Sharing Switch takes your Thunderbolt setup to the next level. Now through September 15, 2017, Experts Exchange members get 30% off the US7220 on the ATEN USA eShop using promo code EXPERTS30.

 
LVL 5

Expert Comment

by:RikeR
ID: 33682107
If the DHCP on a tagged VLAN? If so, see if you can try on an untagged.
0
 
LVL 1

Author Comment

by:tahlequahitguys
ID: 33682551
I have a DHCP Server scope for both the tagged VLAN (200) and the untagged VLAN (1)  THE APs are on both so that should cover it, right?  Is that what you are meaning?  Or are you thinking to just untag it to 200 and forget 1?
0
 
LVL 5

Accepted Solution

by:
RikeR earned 2000 total points
ID: 33682706
I was thinking the DHCP would be on the internet port of the 765, but I think I'm wrong. I just reread your question.

Is it true that client on different VLAN have these problems? If so, this issue could by RF related. DHCP is a broadcast which is usually sent at a lower rate and it is a known issue for clients at the edge of a wifi network will be able to connect, but unable to receive an IP address. This should be seen by a low SNR value ( < 20)
0
 
LVL 1

Author Comment

by:tahlequahitguys
ID: 33682738
That would make the most sense because of it being a problem across VSCs with different DHCP servers.  I am going to do some experimenting today and watch the SNR and get back to you.
0
 
LVL 5

Expert Comment

by:RikeR
ID: 33683031
To get an idea of the signal strength you can use the heatmapper from Ekahau (for free).
It does not show you the noise clients experience, so the SNR is still good to read from the controller.
0
 
LVL 1

Author Closing Comment

by:tahlequahitguys
ID: 33715745
Well it wound up being the setting "distance between access points."  The default is large and our APs are fairly close together.  Therefore the clients were holding onto APs that were farthest away and gettting very low snr.  Changed it to medium and the problem seems to have gone away.

Thanks
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a step by step guide on how to create a basic PTP link using Ubiquiti airOS devices. This guide can be used on the following Ubiquiti AirMAX devices. Nanostation, Bullets, AirBridge, Nanobeam, NanoBridge to name a few. Please review …
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question