Tinribs Posted October 26, 2020 Posted October 26, 2020 Hi All, Really new to this stuff so please bear with me. We have just taken delivery of four Dell tablets, supplied by Live Register, that are to be used as mobile tills for catering. They have come pre-installed with the necessary software, all I need to do is connect them to the relevant VLAN so they can talk to the catering server and then we can get LR to do the final config. They need to have static IP addresses in the same range and settings as our static tills - the only difference is the WiFi - we've never connected the cashless catering stuff wirelessly. I've done the following: On our WiFi controller (A Meru MC4200) 1) Configured a VLAN with the same number as the catering VLAN on our switches and the same IP settings as far as Default Gateway, IP Address and Subnet Mask are concerned. 2) Configured a security profile with no requirements for passwords etc so I can test stuff easily 3) Set up the SSID to look at the configured VLAN of choice. If I set the wifi adapter of one of the tills to one of the chosen static addresses the device seems to connect (there is no internet connection but this is the case with the other static tills as the system only connects over the internet via the server). Problem is the mobile till will not ping anything, gateway, server other static tills once connected. It can ping itself. Nothing can ping out to the till either. As the network settings are identical to the static tills aside from the fact the static tills are cabled and the mobile tills are not I'm guessing there is something in the WiFi config that I have missed. It's probably pretty basic. Any suggestions?
SpaceInvader83 Posted October 26, 2020 Posted October 26, 2020 Have you checked if the catering VLAN is tagged up on the switch ports that goto your controller?
Tinribs Posted October 26, 2020 Author Posted October 26, 2020 (edited) Thanks If I connect to the Gateway IP address then that switch can ping the MERU and the static tills. The VLAN is setup on that switch with the same details as I have set on the MERU. There don't seem to be any specific ports tagged/untagged on the VLAN on that switch though: Not sure if that's the problem? Do I need to find the switch that the static tills are connected to and check that? If so how do I get the mobile tills to connect to that switch (that is probably a ridiculous question)?... Edited October 26, 2020 by Tinribs
SpaceInvader83 Posted October 26, 2020 Posted October 26, 2020 I presume that is a screenshot of your core switch? Try setting the VLAN up on the Meru controller but with a different unused IP on the Catering VLAN for example 10.50.200.50 and set the default gateway to your vlan IP on your core which looks to be 10.200.50.17 All your AP's tunnel back through your controller so nothing should need changing on your other switches.
Tinribs Posted October 26, 2020 Author Posted October 26, 2020 Thanks for this so far. Done that. This is how the Meru VLAN is setup: 10.50.200.30 is the highest available address. The tills use 21-24 (static) and the mobile will use the next four. Even after making these changes I cannot ping from the tablet to any other address except itself.
SpaceInvader83 Posted October 26, 2020 Posted October 26, 2020 Can you ping .30 now from your core switch?
Tinribs Posted October 26, 2020 Author Posted October 26, 2020 Nope. I should add that when I set the SSID up I got this error: I'm not certain which models of AP we have as there are quite a few different models here so I let that pass the first time. I know that's usually a bad thing...
SpaceInvader83 Posted October 26, 2020 Posted October 26, 2020 I'd still probably double check that the catering VLAN is tagged up on the ports on your core switch that goto the MC4200, I think it's got 4 ports so probably setup as a trunk.
Tinribs Posted October 26, 2020 Author Posted October 26, 2020 Cool - so trace the ports back from the MERU to the switch and make sure all of them are tagged with VLAN 11? I can do that tomorrow when I'm back in. Thanks so far.
SpaceInvader83 Posted October 26, 2020 Posted October 26, 2020 Cool - so trace the ports back from the MERU to the switch and make sure all of them are tagged with VLAN 11? I can do that tomorrow when I'm back in. Thanks so far.Yeah that's the one, good luck!
psydii Posted October 26, 2020 Posted October 26, 2020 SPR's suggestion is sound - check the basic layer 1 + 2 connections/settings going into the controller/switch. Once the core switch ports to the controller are know to correctly carry VLAN 11, confirm the tills are actually connected to ports witht he expected VLAN tag (for example, if all the tills and the server are on the same, but 'wrong' vlan they will all be working fine, but nothing on the correct VLAN will be able to see them!). That your are getting Virtual Port warnings, makes me wonder. Around the time when the MC4200 was a new thing, I recall that Meru's implementation of single channel architecture had difficulties with devices using static IPs. Can the tills be configured to use DHCP? Final point that is not relevent to your problem - but may be the source of other wierd issues: If you configure NO SECURITY on an SSID you basically force the entire wifi network down to 802.11g / 802.11a speeds.
Tinribs Posted October 27, 2020 Author Posted October 27, 2020 OK - so things have got a bit worse. I tried untagging the ports (trk4 on both switches) to VLAN 11. When I did this I still could not ping 10.50.200.30 or the new till (10.50.200.25) I then did a no untag vlan11 on trk4 I then tagged vlan11 on trk4. Still no joy but suddenly we lost access to the MERU box and all the wifi SSIDs were not visible. I get the feeling I'm in a bit deep now - any ideas as to how to get back to a working state? I can send screenshots of things if needed..... Thanks in advance.
SpaceInvader83 Posted October 27, 2020 Posted October 27, 2020 (edited) Nightmare! I'd have guessed it was originally set as untagged on the management vlan for your Meru (whatever IP the controller sits on). Screenshot of trk 4 config wouldn't hurt. So I'd suggest untagged it back on the management vlan for your Wireless and then your catering VLAN would be tagged (and any other vlans you need on your wireless) but if no other config has changed then it won't need any amendments. You may be able to see what it was set to previously from either a config backup if you have one or running show config if you have yet to wr the config from the running config. Edited October 27, 2020 by SpaceInvader83
Tinribs Posted October 27, 2020 Author Posted October 27, 2020 OK - so the management VLAN is 2. At the moment TRK4 is neither tagged nor untagged on that VLAN. The WAP Management VLAN is 12. I have untagged TRK4 to that VLAN but still cannot ping it but I can ping the WAPs so I guess that is not the one for the MERU. Do I untag TRK4 to VLAN 2?
SpaceInvader83 Posted October 27, 2020 Posted October 27, 2020 OK - so the management VLAN is 2. At the moment TRK4 is neither tagged nor untagged on that VLAN. The WAP Management VLAN is 12. I have untagged TRK4 to that VLAN but still cannot ping it but I can ping the WAPs so I guess that is not the one for the MERU. Do I untag TRK4 to VLAN 2?Have you compared your current config to your startup config? Show config in the cli (aslong as it's not had the running config saved) 1
Tinribs Posted October 27, 2020 Author Posted October 27, 2020 Right. Sorted. Found a recent backup and manually reset the VLANs for the MERU trunk. So now I still need to get the cashless vlan onto the wifi network. TRK4 is untagged to VLAN 12 and tagged to VLANs 25, 41, 42, 43, 60 and 61. I managed to scrub all that with an injudicious use of the no Tag/No untag command. Lesson learned. How do I connect VLAN 11 to the wifi without removing all the above?
SpaceInvader83 Posted October 27, 2020 Posted October 27, 2020 (edited) Great stuff, just tag VLAN 11 on the Meru trunk and that should be that, shouldn't cause any issues. You might find it easier using the menu interface, just type menu Edited October 27, 2020 by SpaceInvader83
Tinribs Posted October 27, 2020 Author Posted October 27, 2020 Sorted. Can ping the other static tills and the server now. Can't ping the default gateway but none of the other tills can either plus we don't need to be able to get out of the vlan anyway. Much appreciated so far but I have one more question. Once I have all four tablets up and running and Live Register have configured them I need to make the catering SSID secure. I'm guessing the best way to do thsui would be with MAC filtering but I'm not sure how to do this or if there is a more efficient/secure method. The tills are not on our domain so we cannot use domain authentication etc....
SpaceInvader83 Posted October 27, 2020 Posted October 27, 2020 No problem, others might be able to think of a better way but you could use a combination of MAC and WPA2 psk which I'm sure would be more than adequate.
Tinribs Posted October 29, 2020 Author Posted October 29, 2020 To close this off - mac filter, WPA2 PSK with 64bit key and not broadcasting the SSID.... All good and much appreciate all the assistance.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now