DHCP server on cnPilot E500/E501s via cnMaestro

Products Enterprise Wi-Fi Networks
1

Hello,

I configured an AP Group with some E500 and E501s.

In the Network tab I added 3 VLANs:

1) Default VLAN 1 to access to the internet (no vlan tag) and dhcp address for the AP
2) VLAN 2 for guests and local IP 10.50.1.1, NAT enabled
3) VLAN 10 for users and local IP 10.60.1.1, NAT enabled
 
I've connected VLAN 2 to "Guest" Wifi network and VLAN 10 to "Users" wifi Network.
 
I created then two DHCP pools, one with default router 10.50.1.1, and one with default router 10.60.1.1.
 
It works good, but I have a question:
1) Is traffic from VLAN 2 to VLAN 10 prevented? Or should I create an ACL rule to deny?
2) The AP can have 512 users, so I want to have a big DHCP server lease. I've set 10.50.1.2-10.50.254.254 with subnet 255.255.0.0 on the guest DHCP pool.
Does the AP assign only correct IP addresses and ignore network and broadcast address in the range?
 
I know the pool is very large and I don't need it, but it's an example with a big subnet.
 
3) The DHCP pool is AP-Specific or AP Group specific? I mean: if I connect to the first AP and then roam to the second one, will it assign the same address as the first one, or not?
 
Thank you very much for your answer
2

>1) Is traffic from VLAN 2 to VLAN 10 prevented? Or should I create an ACL rule to deny?

Traffic is allowed by default. You can create ACL rules but the easiest way to do this is to enable client-isolation network-wide in the WLAN configuration

>Does the AP assign only correct IP addresses and ignore network and broadcast address in the range?

You need to set the network and broadcast addresses correctly so that your network works properly (this is part of the information sent to the client over DHCP). The pool for clients configured needs to be a subset of that network and the AP will assign IP addresses from that subset. In your case with a netmask of 255.255.0.0 the broadcast address will be 10.50.255.255. The AP will assign IP addresses from 10.50.1.2 - 10.50.254.254.

>3) The DHCP pool is AP-Specific or AP Group specific? I mean: if I connect to the first AP and then roam to the second one, will it assign the same address as the first one, or not?

The DHCP server runs indepently on each AP. 

1 Like