How to configure DHCP server and WLC with different Vlans

hi this is amin and in this video i would like to show you how to configure a dhcp server with different vlans in the packet tracer and also at the end we're gonna assign the different networks to different access points in order to have a wireless network so let's go one by one and see this is the initial concept so four will end and as we would like to have different vlans so we do need water we do need a switch so multi-layer switch imagine our data center and so it is here uh what else do we need in our data center maybe a router but not for that project server so the server that would be our dhcp server so this is our server and what else do we need in order to make it you know somehow more fancy add a cable modem and a wireless controller so this one and also a computer so always there is a computer inside the data centers in order to you know do the management to do the controlling stuff or to manipulation tweaks i mean changing all of the configurations so there will be a computer here and in this scenario we're gonna consider what we're gonna consider a three floor office so what do we need at least three switches and each one will represent one floor so floor one then go to that one to floor two and that one to floor three okay perfect so we have three floors three switches for that and a core switch so let's connect everything fa2 for example this port to this device i'm sorry if i want to this device if i treat this device it's better to now use a straight cable instead of cross so that one and here i'm gonna connect all of them to fa01 to the layer to switches and here so that's it let's start the configurations the first let's go for which one maybe http server just ip addresses so what is the ip address so 192 once and the gateway will be 192.168.1.1 this is the interf uh face vlan one ip address i'm gonna add that for the d8r for the gateway so that 1.2 we're good so far here go to the configuration mode i'm going to choose 10 and zero and same router.1.1 so i think we're good and also for the computer so that the administrator situation me it is better uh no it's not the most but it is better to have a static ip address for that so go for 15 and again the same gateway so so far we're good at that part so let's go for the other part let's do the configuration of the switch no and so let's see what do we have here uh in order to make everything simple up that one here and that one here let's see what do we have in order to make the video faster you know distort the configurations i type them down here and just like copy and paste so let's see them so enable config terminal hosts now i'm going to change it to the core we have four vlans which are here we can see so we land one two three four for each land there will be an interface interface 3 land1 no shot ip address 190 to 168.1.1255.2555.0 a description for that may be the local an iep helper address this is like what is this uh with this uh command line we will say to the users to the switches that's this is the way this is the interface or this is the device that can help you this is the address that can help you to find your dhcp server so for interface interface vlan 1 for interface will and soon again no shot ipad or something like that description and the helper so as you can see these two ip addresses are a different network so what do we need here interface vlan routing or inter vlan routing as this is a multi-layer switch it will be able to do it for us and then interface vlan 3 you can see here the same the 2.1 the 3.1.4.1 one of them for guests for inside a company or office to use the internet for the users or for the employees maybe we can change it to employees or the member and finally the member of the board and what else as long as we are talking about different vlans so what do we need we need trunk ports so we're going to do what we're going to assign 10 interfaces so interface range f8 0 1 to 10 switch port trunk encapsulation that one queue this is the protocol of tracking on layer 2 switches and then switch port more trunk finally exit ip routing this is for interval and routing and then we can maybe do right and end this is all of the configurations so let's copy them copy come here and paste all of them are and you can see here uh when we change status of an interface what will happen the interface will be done and then up so to verify that make sure run ip routing hostname core and look all these interfaces from one to ten all of them are trunk and look interface without one ip address ip helper interface vlan 2 description the mac address whatever we want is here so we are done with the core switch let's go for these and also what do we need in order to make sure that the dhcp is working correctly uh what i'm gonna do i'm gonna just you know the goal of this video is to make a wireless access point but now i'm gonna just add them to show you how dhcp will work based on different vlans so here next step what should we do at these interfaces 0 5 0 6 and 0 7 these are trunks so there's nothing to do related to these interfaces here but at that part what should we do we should do just uh do the access i mean these interfaces and switch port more access and access to uh vlan 2 for the guests maybe the first floor uh to the users and imagine the front disk and that one will be the member of the boards or the boards so these interfaces should be trunk should be accessor access and also two interface for each switch and the other one for what for let's come here yep lightweight access point so i'm gonna just add them here and then i will connect them towards the switch so open that one up come here and let's see the configuration what will be so look enable config terminal hostname floor one all of the villains maybe for future it is good to have all of the vlan on switches on each one so interface range fast from zero to uh from zero to r two three switch port mode access switch projects as we land two do right memory and ends so let's copy and come here and just paste you want me to verify that why not sure run is it just these two interfaces are in access mode and that's it so we are done with switch number one let's go to the switch number two level line three just copy come here look the same scenario when we hit on the enter bottom what will happen the interface status will change so it's going to be down and up so again the same look what happened here and bring that one up so for the floor three we will have length four just copy come here and the last one pays and we're done nothing more and it is uh written and yeah let's let's wait for them to be up but we can't verify we can come here ip configuration and go to the dhcp wait maybe the first attempt will be failed yep static dhcp and not yet oh maybe this is the problem my bad wait wait serious dhcp yep yep should we should work on the dhcp so uh how let's configure the dhcp the first one let's go for the uh vlan 1 192 168.1.1 the default gateway which will be the inter face vlan ipad switches here there's no need for the dns and it is good to have some ip addresses for reserve so let's start from penny and these and that one will be a wireless lan controller address is this one so i think we're good we can save this one here let's go to the pool number two for the vlan 2 just change once to two add it here three so let's come here three and three and add it here and finally four four four and four and edit it should be four as well four and add it here check all of them are correct so uh server pull one one one wonder 20 so it is good so we'll put 2 2.1 from 2 20. and this is good here there is a problem it should be there's a mistake three save and for so all of them are correct as long as i'm seeing there is no problem turn on the dhcp right now so let's check again the ip configurations and everything is good now the dhcp should work and yeah there you go so from 220 just to verify the dhcp is working and also in an office maybe i don't know there are lots of computers not uh the point here is not just for the wireless we can assign even interface for the user so perfect all of them are okay so so far everything is okay i mean the dhcp is working the router interval and routing and we can even you know do what for example let's first ip config this is my eyepiece so i can ping 192.168.4.1 different range the tree that i want to verify yeah interval and routing is working as well so the next step let's go for the wireless line controller what was the ip address it was 1.10 yeah you come here go to the web browser 192.168.1 the first attempt should be on http not https and in the packet tracer look these are blinking it means they are working but uh in the packet tracer the first attempt to connect to the wireless lan controller it takes forever and you know it's very bad you have to wait for that but in the meanwhile uh we're gonna turn these access points on this is on bring that one on on so let's see yep it's up so just make an account a username maybe add me the password admin one two three add menu one two three so a name with the office and everything is good time is canada and tp server management ip i just want to 16.1.10 the same api address that we've assigned to that 255 to 55 to 55 0 default giveaway 192.168.1.1 uh which is the interview interface we land ip address and i think we're good next assigning name again look uh for the sake of security and that reasons it is better to choose various passwords different names but you know because i'm just telling you how to do that i'm not going to make you confused and then so i choose the same name so they use the password will be the same admin one two three and add mean one two three with capital a next and next and i think we're good to go apply so it's gonna apply we should wait for that and the controller will be in our reboot maybe it takes longer we can just verify like this 192.168.1.10 and we should wait for the pink as soon as the uh pink become to the reply from something so timed out we will browse that again i'm gonna show you the configurations we should wait for that yeah it's up now so i'm going to close that one and come here and type 192.168.1.10 so the second item it should be https hit on enter good again with capital a let's go inside the control sc okay perfect this is the back side or back view of the controller so this interface is up it is it is the interface which is connected to the core switch and let's go one by one the first thing let's go to the controller as long as we would like to work on uh inter vlan routing and we have different vlans we should uh here assign interfaces based on the villa but before that we should see which port now is up look different ports based on the interfaces that the control the controller has so port number one is the link look the link is up so we should assign port number one go to the interfaces let's see the first thing is the management which is an untagged and this is that look basic ipad address or types of blank one but we're gonna go from vlan 2 3 and 4. how click on the new the first one just supposed to be for guests and vlan id on vlan 2 apply support was part number one and we land to choose an ips 192 168.2.10 net mask 255 255 255 0 gateway 192.168.1 that i'm sorry that 2.1 this is the inter uh ip address of interface vlan 2 and this one this ip address is what is the ipads that we've assigned here go to the services the dhcp here we've assigned an ip address look for the wireless lan address so this interface is the interface that we're gonna add exactly here so this address and the http server could you remember the ip helper that ip again so i think we're good to go apply okay let's go to the other interfaces so guest now is up look we have guest vlan 2 this is the ip address dynamic circuit let's go for the users users and unveiling three go apply apply approach was part number one vlan 3 192. the 168.3.10 255 255 255 0 and gateway 192.168.3.1 192.168.1.2 very good apply interface yeah this one is up the last yeah which was for the member of the board such as i'm gonna briefly call that as boards and vlan 4 apply support number one 192 168.4.10 net mask 255 to 55 to 55 0 and the gateway is 192.168.4.1 and 192. 168.1.2 apply if i'm not mistaken i added all of the numbers correctly so hopefully there won't be any there's a problem or something like that because they're all of them are good in the meanwhile let's connect the access points to the fa03 because this one is access as well so let's connect all of them come here next step so we have different vlans let's go to the w lens or before that let's go to the security i'm going to show you something and then we'll come back to the exercise looks there is nothing here you can add we can add something here how this tab is security and what does this mean it means if you have some aaa server or proxy server you can edit here how we know that this one is capable of aaa as well so we can just click on the on client name maybe again the office it's not just a name i'm just picking a name it's not very important so client type is 192. 168.1.10 secret again the same look these are optional based on you but i'm just adding a name and number so and also bank of username and password for example add an admin admin we can add that here we can add for example in general and in in here i don't want to trespass or something like this this will be like a repository of all of the passwords and this is on so we're going to close that one come here so just click on the new and look the index priority is one it has the highest priority so the server 192.168.1.2 and the second was add mean one two three with capital a and the port was 16 35 if i'm not mistaken and apply so now there we go we can see we have a triple a server here and we'll see the result of that and let's come here the wireless tab so uh these uh wireless networks will be come up on that tab maybe we should wait so uh i'm gonna pause the video and just reboot these wireless networks and then i turned these access points off and on and it turned out there was still the problem and finally i realized there was a misconfiguration that i did you know at first on the dhcp part what was the problem look at here i've assigned the interfaces which i added after that you know by the time i assigned that interfaces here i hadn't assigned them yet so what happened at this access point they tried to connect to the ip addresses that at that time didn't exist so this was the problem and as we have a ip routing all of them have access to this look if you come here we can see yeah perfect so we have all of them here we have a list of interfaces with their ip addresses and now they can a broadcast they can propagate but let's go further you know we added the aaa server here we have our wireless here and on the controller what do we have on the interfaces we have that look we have that vlans and finally let's go for the ssids what do we need we need three different exercises this is the first thing that we've made at the first we're not gonna use that one so just creating new the first one for the guests ssid is uh maybe guests this is id this is the second one so the height is to apply let's see what do we have here by default let's disable so click on the enable and here look interface which vlan for the guests which we learn through let's go to the security wpa2 wpa policy i'm gonna go for that one psk and just pick a number maybe one two three four five six seven eight nine so one two nine for the guest layer three nothing and look here we can use our triple a server but in that video i'm not gonna work on that maybe for the first uh access point uh i can use it or for that one also i can use it but i'm going to show you something more not to play let's work for that we can come here on the advanced tab we have something flex local switching you can search for that look and also just here flex local switching is not supported with ipsec and you know it is the capability of that uh controller to refer the access point to connect the internet and propagate that so i'm gonna click on both of them and also look there's a description and you can study more for that but anyway apply i think it's done come here again on the vlan tab go for the other one users ssid users society by these three apply the same procedure enable and for the users go to the security wpa2 [Music] and psk for that one maybe from nine to yeah from nine to one the first one was from one to nine the other one nine to one and go to the advanced enable these two and apply go for the last one for the members of the board i'm just picking boards boards and boards ssid so apply it would be for the boards go to the security we do need security psk and for that one maybe from you put p on my keyboard and come here and just click on these two and apply wpa policy must be enabled what i've missed here oops yeah that one would be so enable enable let's go for the advanced distort ticked and not sure so okay good apply now we can check everything i think we're good to go now we have our vlans we have our ssids you can see here and also here we can see yeah this here the access points so what do we need just add some laptops here and on each and every laptop just turn it off and throw it away at this one come here to the desktop the wireless the connect and refresh let's see what do we have yeah we have the ssid so click on the connect one two three four five six seven eight nine and connect perfect that one works let's go for the other one so i'm gonna throw it away at the wireless network come here desktop wireless connect refresh the first one was guest the other one will go for the user oops sorry i made a mistake user connect and 987645321 hit under connect yeah there is a problem and i will tell you because they are very near to each other maybe uh it's a some sort of coverage or overlapping between the broadcasting area so you can come here and let's go for the last one which was the boards the boards or boards is not in the coverage of that one and also you should check it here why there is no board here because when we've made it like we have boards oh this one is disabled this is the problem should come here and just click on the enable apply and then come here to see this is enable and we should have board now it should work yes we have boards look we have different boards i will tell you the reason of that qwt connect here so this one is connected to that maybe if you bring it here and try i'm not gonna do that anyway uh this is you know you can uh put them either in different places or make a distance between them they're gonna connect one by one and there's another reason why this uh this one i mean this access plan is broadcasting two different ssids and because of van river you know we get here enable and show villain brief look when we were configuring for the i told you for the future users or something like that we did what we have all of the lens here and also this part is track we can do what we can assign uh this part has access and and uh you know try to just type no before the vlan numbers and in this way we have we will just have vlan 2 here but this is the reason why we have to enter ssid at one access point so this is whatever i wanted to tell you about how to configure dhcp with different vlans about the commands ip address helper or ip helper address and yeah that's it i hope it was good i hope you enjoyed and the best practice is uh you've seen how many you know problems or errors you may encounter while you are doing on your own the best practice is that to do it on your own i hope you enjoyed if you enjoyed just share thumbs up and hit on the like button if not thanks for watching the video don't forget to subscribe the channel and stay safe bye everyone

Channel: Amin Sedighfar

Views: 1,255

Keywords:

Id: Nnox_B88CmE

Length: 33min 33sec (2013 seconds)

Published: Wed Aug 18 2021