Wireless: AP discovery with DHCP option 43 and WPA2-Enterprise
Get an AP in another subnet to find its controller through DHCP option 43, then build an 802.1X WLAN that authenticates users against a RADIUS server.
Scenario
AP1 sits in the AP VLAN 30 (10.30.30.0/24), routed by R1, while the controller WLC1 manages from 10.10.10.5 in VLAN 10. Local-subnet discovery cannot cross the router, so AP1 never joins. Make R1's AP DHCP pool hand out the controller's address in option 43. Then add the RADIUS server ISE (10.10.10.50, shared secret Rad1us!Key) to the controller and create the WLAN Corp (ID 2): WPA2-Enterprise with 802.1X, clients in VLAN 20. User alice (password Wireless#1) must get on from LAPTOP1.
Your tasks
- AP1 joins WLC1 through DHCP option 43.
- WLC1 has RADIUS server ISE at 10.10.10.50 in a server group, and a dot1x authentication list using that group.
- WLAN Corp (ID 2) uses 802.1X with that list, is enabled, and AP1 publishes it with clients in VLAN 20 (tag CORP-TAG).
- alice connects from LAPTOP1 and gets an address in 10.20.20.0/24.
The lab checks the result, not the exact commands. For example, a ping task passes only when the ping really succeeds through the network you built.