AP6 no IP over DHCP / No Internet

Question

Hy! 
 We have a little problem with our AP6 420. 
 They are registered on Sophos Central so far so good. 
 
 So the AP6 is in our Managment VLAN is untagged and get a IP address and can connect to Sophos Central. 
 Now i want create a SSID with our Client VLAN tagged. (Untagged not possible Error only one Network can be untagged on the AP) 
 On the Switch (HP Aruba) we have untagged MGMT VLAN and Tagged the Client VLAN. 
 
 Now i try to connect a client to the SSID and we dont get any DHCP Address or Internet/network with static IP. 
 
 We use a Windows DHCP Server on a different VLAN. Works quite well and Relay entries are given in our XGS2100 (SFOS 19.5.1 MR-1-Build278). 
 No problem with networkcables. 
 
 The next task is we want to create a Guest VLAN with another SSID but yeah if that doesnt work on the configured Client VLAN i can stop that for the moment. :-) 
 
 Does anyone have the same Problem or a Solution for that? 
 
 Thanks!

KarlVanSnail · Answer

Finally 
 I don't even dare to say it. 
 It was the AP itself. 
 I tried another AP and it works instantly. I compared the settings and all with both and it seems legit, but the one AP hasn't worked. 
 So i did a reset and register it again an now it works fine. 
 :-)

Raphael Alganes · Answer

Hello KarlVanSnail , 
 I have left a note on your case with support. 
 On the other hand, If my assumption is correct, AP is connected to an edge switch > which is connected to a L3 switch which is (3x 2930M Stack) 
 How does VLAN 212 reach the DHCP server on the network? is it via VLAN routing on the L3 switch or through the Sophos Firewall? 
 Also, how is the L3 switch routing traffic to the Firewall? Is it through a Trunk port or a Routed port (using the Default Route to Sophos Firewall interface)? 
 What I can initially left for you to check is: 
 - Make sure the switch interface connected to the AP6 is on a Tagged port for 212 (Client Vlan) 
 - all uplinks (if you're connecting via trunk ports) must have VLAN 212 tagged 
 - If connected through a routed port - kindly make sure there is an entry of Static route on Sophos Firewall, introducing the VLAN 212 network, so FW would know how to route traffic to and from the L3 switch which has the VLAN 212 information, so in this case make sure there's a defined network address on your L3 switch for vlan 212 e.g. 172.16.212.0 /24 and a static route on Sophos Firewall. 
 -If through a trunk port - configure a VLAN subinterface with VLAN ID 212 on Sophos Firewall e.g. Port8.212 and have a FW policy configured for VLAN 212 to reach internet and other VLAN networks 
 -in AP, I may recommend you to check/enable "Client isolation" under SSID > Security. 
 Otherwise, further checking on this case would be needed. 
 I hope this information helped your concern. We shall be continuing to track progress of your case with us. 
 Again, many thanks for your time and patience and thank you for choosing Sophos.

AP6 no IP over DHCP / No Internet

Top Replies