Setup DHCP on Guest SSID only

  • 1
  • Question
  • Updated 2 years ago
Hi all, we have 8 AeroHive AP121 devices with 2 SSID's , one for staff and one for guests. Both SSID's get their DHCP from our main Windows server but is there a way to get set a different range JUST for the Guest SSID ? i.e can we get the Guest SSID to get their DHCP from the AP's and the Staff SSID to keep getting theirs from the Windows server ?
Thanks
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes

Posted 2 years ago

  • 1
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Hi Ian,

Initial question...

Do you have VLAN capable switching?

If so, would you have the ability to route from these?

Nick
(Edited)
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
We don't at present but we ARE upgrading the switches to Stackable units next month so we will then......is VLAN switching needed for this then ?
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
Just to add (to make clear) that the AP's just plug into our main (unmanaged) switches along with the rest of the network
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
To do this properly, you want to isolate the Layer 2 broadcast domains. The best way to achieve this is with VLANs, but other approaches are possible. If you're going to be updating your switching, this, to me would seem the best way forward. You'll need to ensure that you get appropriate routing in place with a routed IP interface in each of the VLANs.

Ideally, source switches that are capable of wirespeed Layer 3 IP routing.
(Edited)
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
Ok, that's fine i think i can do that but is it easy enough to configure the AP's and how do we do that (not used Aerohive before so this is the bit we're stuck on)
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2438 Posts
  • 445 Reply Likes
You would typically assign the VLAN based on the user profile that is assigned to a client.

You configure the desired VLAN id in the user profile.

As you are running with two separate SSIDs, you can configure this via the default user profile for those SSIDs.
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
So basically in the AeroHive cloud console we go into SSIDs - Guest SSID and then create a new VLAN under the User Profile settings and then on the corresponding VLAN on the switch we then get a seperate DHCP pool to service that ?
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Not quite, you'll need to create an IP interface in each of the VLANs, ensure appropriate routing takes place, setup/configure a DHCP relay agent on the switch, configure your DHCP server appropriately to have the pools you want.
(Edited)
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
Yes, sorry i was trying to determine the AP side of things as i can see that i can setup a VLAN on the Guest SSID but can't see any routing option on here so i'm "assuming" that this is automatically picked up via the VLAN tag and then the routing etc is done on the switch ?
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2438 Posts
  • 445 Reply Likes
You would be routing in the switch, not the AP.
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
Tha'ts fine then so on the AP side of things we really only need to assign a VLAN ID to the Guest SSID and as long as the switch is set up then this SSID will get a seperate DHCP pool from wherever we decide to supply it from ?
and in your opinion this is the best route to go down ?
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2438 Posts
  • 445 Reply Likes
Yes and yes, with the proviso that you get the other things set up.
Make sure you buy appropriate switching! :-)
Photo of ian wilson

ian wilson

  • 12 Posts
  • 0 Reply Likes
That's great....many thanks!