Hey guys,
I ran into a little problem over the weekend while I was attempting to
make our wireless network redundant.
We run a WPA/TKIP encryption with EAP-TTLS/PAP authentication
environment. We have a total of 10 Cisco lwapp controllers which are
connected to 1 Cisco 6500 (fiber is lit) and another 6500 with the fiber
not lit.
Because we log the users who authenticate and record what IP address
they use on the system, we have the router assign the addresses to these
users. When I lit the fiber up and added the 'ap-manager'X interfaces,
slowly but surely more and more users started to disconnect from the
network.
When I look at the Radius logs, I did not see an unusual amount of
authentication rejections. When I look at the lit 6500's logs, I do not
see an unusual amount of DHCP requests being rejected. When I look at
the logs of the unlit 6500 for the time that it was lit, there is
nothing unusual there.
Although I am going to lab the dual DHCP server running on the routers
in the same environment, it seems as thought the two routers do not
communicate the DHCP binding tables with one another. Has anyone out
there deployed a similar environment?
I know that I have the option of running the DHCP server on my regular
DHCP server or I can also run it on Radius. Either of these would mean
a change in the infrastructure. But it would make it a little more
redundant. Thanks.
Jorge Bodden
--------------------
This electronic message is intended to be for the use only of the named
recipient, and may contain information that is confidential or privileged. If
you are not the intended recipient, you are hereby notified that any
disclosure, copying, distribution or use of the contents of this message is
strictly prohibited. If you have received this message in error or are not the
named recipient, please notify us immediately by contacting the sender at the
electronic mail address noted above, and delete and destroy all copies of this
message. Thank you.
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.