cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

No internet access when connected to guest_wifi SSID

SOLVED
Highlighted
Here to help

No internet access when connected to guest_wifi SSID

Hello Everyone

 

Where having this issue where in once a client/user is connected to our guest wifi ssid they cannot get internet access.

 

ipconfig details of the client is correct its just that once we ran a traceroute the 1st hop is 10.128.128.128 and were certain that IP address (10.128.128.128) is not within our network.

 

 

 

Other SSID's are working fine.

 

Meraki details

MR55

Current version: MR 26.4

 

 

Thanks

RJAC

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi @MinnesotaKid 

 

with regards to 10.128.128.128 IP that only appears when splash page settings is set to Cisco ISE once we point to none (direct access) the path changes and 10.128.128.128 was out of the picture.

 

its a bit strange, though because that tells us that 10.128.128.128 is somehow caused by ISE but on our end were certaiun that its not our ISE

 

thank you

Rajesh

View solution in original post

17 REPLIES 17
Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

guest_wifi_issue_LI.jpg

 

ipconfig and traceroute

Highlighted
Kind of a big deal
Kind of a big deal

Re: No internet access when connected to guest_wifi SSID

10.128.128.128 is a meraki AP ip.  any fw rules configured?

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hello Ww/Everyone

 

Yes theirs fw rules configured on meraki (wireless environment) is there any specific rules we need to allow or deny?

 

it was also working before and the issue started to occur recently. 

 

by the way Addressing and traffic settings is set to bridge mode and no change was made on the meraki

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi @RJAC 

Permit in your firewall the Access Point IP to go in Internet.

Let me know.

Regards,

 

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi  Coesione_srl

 

All of the AP's were able to connect to the internet via ping and traceroute.

 

and we have 10 acl rules in place but i can only show the last 2 acl rules. please see below

 

 

FW.jpg

 

the 1st 8 acl rules is just to allow traffic from our ISE servers.

 

thank you

RJAC

Highlighted
Kind of a big deal
Kind of a big deal

Re: No internet access when connected to guest_wifi SSID

Put them all on allow  and see if it works. (To check if its a fw issue)

The ise  does not push  any rules?

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi WW/Everyone

 

ISE is only for authentication, we checked the logs on ISE and users are authenticated its just that once they are associated with the guest wifi theres no internet access

 

thank you

RJAC

Highlighted
Head in the Cloud

Re: No internet access when connected to guest_wifi SSID

Hi @RJAC 

 

When on the guest network can you ping your DNS servers?

 

Have you done a PING from your core switch from the Guest SSID VLAN SVI out to the Internet?

Do you get the same result when wired?

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi Uccer/Everyone

 

ping from core router sourcing svi of guest wifi can reach the internet

wired connection can reach the internet as well

when we connect to other ssid we can reach the internet as well

 

the issue is just happening on guest wifi ssid. (1st hop is 10.128.128.128)

 

thank you

RJAC

Highlighted
Head in the Cloud

Re: No internet access when connected to guest_wifi SSID

Hi @RJAC 

 

Have you cHacked your firewall settings for the ssid

 

Wireless > Configure > Firewalling and Traffic Shaping

 

Theres a setting there that blocks access to the wired LAN.  This could be stopping DNS lookups and therefore internet access

 

UCcert_0-1594801484917.png

 

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi UCcert /Everyone

 

further troubleshooting results that its an issue on our ISE.

 

when we change the splash page settings to None (direct access), users were able to browse the internet and the 10.128.128.128 ip was cleared. 1st hop was the ISP public ip.

 

thank you for all of the suggestions and help

RJAC

Highlighted
Head in the Cloud

Re: No internet access when connected to guest_wifi SSID

Well done @RJAC for sticking with it and resolving the issue.

Highlighted
Conversationalist

Re: No internet access when connected to guest_wifi SSID

Hi @RJAC - I seem to running into a similar issue on my end as well today. We also have an ISE splash page for our guest net. 

Would you be willing to post what version of ISE you’re running? We’re at 2.3 patch 7. 

Kind of a big deal

Re: No internet access when connected to guest_wifi SSID

Whoa @MinnesotaKid, time to upgrade quite quickly then, 2.3 is in End of Support state since last month:

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-741...

Highlighted
Conversationalist

Re: No internet access when connected to guest_wifi SSID

@CptnCrnchi appreciate the note, but we’re all too familiar with that date :). Budgets, approvals, yada yada. 

On the issue at hand though, I’m curious to see if this is and issue on the ISE or meraki side. This 10.128.128.128 IP also shows up in the NAT mode documentation. 


https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/NAT_Mode_with_Meraki_DHCP

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi  @MinnesotaKid 

 

the problematic version of ISE on our end is version 2.6.0.156 patch 2,6 and we end up rolling it back to version 2.6.0.156 patch 2. that seems to resolve the issue for us 🙂

 

Cheers

RJAC

 

Highlighted
Here to help

Re: No internet access when connected to guest_wifi SSID

Hi @MinnesotaKid 

 

with regards to 10.128.128.128 IP that only appears when splash page settings is set to Cisco ISE once we point to none (direct access) the path changes and 10.128.128.128 was out of the picture.

 

its a bit strange, though because that tells us that 10.128.128.128 is somehow caused by ISE but on our end were certaiun that its not our ISE

 

thank you

Rajesh

View solution in original post

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.