BYOD devices not accepting IP Address

[ITJackson]

Hi All,

 

I've recently had our firewall moved over from Sonicwall to Smoothwall and our BYOD Wireless has stopped working and I'm after some advice. Smoothwall is acting as a DHCP server for the BYOD VLANS (MAT). When the device connects through the Smoothwall RADIUS (Authenticates fine).

 

The Device asks for an IP address, Smoothwall then assigns it an IP address, then the device asks again for an IP Address...Then it just loops and then eventually times out. It's like the end device is not accepting the IP address it has been given. I've tried setting a static IP address and no luck either.

 

Ruckus are adamant everything is working fine on their end and so is Smoothwall but I can't find what the issue is with the devices not accepting the IP address...Any ideas will be hugely grateful as I'm pulling my hair out with this one!

 

Thanks

[FN-GM]

Have you checked your switches? Maybe access control lists or maybe DHCP Snooping? Possibly and issue with the trunk ports pruning VLANS? Edited August 23, 2021 by FN-GM

[ITJackson]

Checked switches, LAN connected to Smoothwall box has a Trunk on the switch connected to the VLAN of the BYOD and VLAN of the Ruckus Controller

[FN-GM]

Checked switches, LAN connected to Smoothwall box has a Trunk on the switch connected to the VLAN of the BYOD and VLAN of the Ruckus Controller

 

What about DHCP Snooping? This is something configured on the port itself. Are the ports configured as trusted ports?

Edited August 23, 2021 by FN-GM

[ITJackson]

DHCP Snooping is disabled on that switch. VLANS for the BYOD are on Smoothwall. If I configure one of the ports on the switch for that VLAN. Plug a laptop in and it picks up and IP address and works fine. Just Wirelessly it doesn't play ball. Other SSIDs work that don't use RADIUS. Edited August 23, 2021 by ITJackson

[Davit2005]

If you can plug a wired device into the BYOD vlan i.e. configure an untagged port on the BYOD vlan. Then plug a device in and see if it picks up IP address. Jus try and rule issues out step by step.

 

From my experience of Ruckus (and others) the SSID vlans are tagged on the switch ports where the APs are connected. i.e. if BYOD was vlan 50 and the AP management was 20. 20 would be untagged and 50 would be tagged. Different switch vendors use different terminology but the concept is the same.

 

Are the BYOD vlans routed on the Smoothwall i.e. their default gateway is on the smoothwall?

 

Use wireshark or do a packet capture on the Smoothwall and check the dhcp process. Our DHCP server gives detailed logs and you can see the dhcp process maybe you have same facility on Smoothwall in the logs somewhere.

Client: discover

DHCP Server: Offer

Client: Request

DHCP Server: Acknowledge

Edited August 24, 2021 by Davit2005

[ibpalle]

Has the option to isolate clients been set on the Wifi SSIDs? If it is, does it make a difference without?

[ITJackson]

Yes, if I configure a port with the BYOD Vlan it works fine. Yes BYOD VLANS are routed on Smoothwall and I’ve already inspected the traffic. It fails at the last bit as it doesn’t acknowledge that it’s been assigned the IP address. The client just keeps requesting for an IP.

 

Thanks