• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 856
  • Last Modified:

PIX-WAP Not Issuing DHCP Addresses

I have a simple network consisting of a Cisco PIX 525 v8.0(4)28 UR license along with a Cisco Aironet 1200 v12.3.  Being a non-profit with no money, we're trying to cobble together what we have to create a wireless guest VLAN to segregate guests visiting us.  

Below are the configurations for the firewall and WAP.  Bottom line is, wireless clients aren't getting a DHCP assigned address from the PIX.  Putting a sniffer on the ports, I don't see any VLAN tagging.  The physical LAN switch ports for the PIX and WAP are defined as trunk ports and I see traffic on these ports (using Wireshark) but no tagged frames are displayed.  At this point, I'm assuming frames aren't being tagged since I don't see any issues with the config.

Does anyone see an issue with these configs?  Thanks!!
1 Solution
To check if the switch is working with the tagged packets correctly (at least on th e port connected to the firewall), set a different port to vlan 200 (access port untangled) and see if you can communicate with a wired machine. If you don't get an ip via dhcp, hard code an address and try to communicate. This will allow you to narrow down the issue to tagging, dhcp server, or ap configuration.
Craig BeckCommented:
Can you post the switch config?
ejefferson213Author Commented:
When I did as you suggested, the switch revealed that I had not yet configured the vlan in the database.  Once that was done, the firewall began handing out addresses as it should.

Thank you.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now