Users getting gateways IP as 10.128.128.128

[Naresh_Bhardwaj]

Hi All,

Facing issue in the Meraki wireless deployment  I have created 2 SSIDs one for CORP and one for guest and using different VLAN.

If i can my laptop to meraki AP an getting the IP of the VLAn mapped to SSID but in gateway im getting the IP address of MEraki AP 10.128.128.128. exam

SSID Guest 

Vlan 10 subnet 192.168.1.0/24

Ip address im getting on Laptop.

192.168.1.20

255.255.255.0

10.128.128.128

Not sure whats happening 😞 

[BlakeRichardson]

Under Addressing & VLANS if you scroll down to LAN Config what is the IP address of your MX?

Have you got any L3 interfaces setup?

[Paul_H]

Greetings @Naresh_Bhardwaj !

Quick question... 

Within your Wireless -> Access Control Settings under that particular SSID and under "Addressing and Traffic" do you happen to be using "NAT Mode"?

If so, Meraki's cloud handles the DHCP of the client. This is done in order to isolate/segment guest traffic from all of your other infrastructure. For more information check out our handly dandy doc: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/NAT_Mode_with_Meraki_DHCP 

-Cheers!

[Naresh_Bhardwaj]

@Paul_H 

Its on   Bridge mode

[Paul_H]

Nice! Thanks for that @Naresh_Bhardwaj !

I would echo what @BlakeRichardson mentioned. If you're using the MX for DHCP, double check your Security & SD-WAN -> Addressing and VLANs page and make sure your subnet VLAN "MX IP" is configured correctly. Because based on that configuration, the client would be getting the IP address directly from the LAN the AP is plugged in to.

Another Question:

Does the Meraki Dashboard report the correct/expected IP address of the client device at Network-Wide -> Clients?

If the dashboard is correct, then I would guess there could be a VPN or proxy setup on the local machine. So while you're getting a local IP, there could be an agent on the machine that is forcing the traffic elsewhere.

As always, with ALL Meraki products that you own and are licensed for... Ping Meraki Support too! They can jump into your dashboard and validate your findings and give you real-time feedback to help you work your way through it!

You can go to Help -> Get Help on your dashboard or view some contact info here: https://meraki.cisco.com/support/!

Hope that helps!

[Naresh_Bhardwaj]

Thanks.

I will check and udpate

[cmr]

You will have "Allow clients to access the LAN" set to Deny in the Wireless - Firewall & Traffic Shaping section for that SSID.