Cisco-WLC 4402无线AC,在核心交换机上做DHCP。设置有两个SSID,SSID1给公司内部用,SSID2给来访客户用,SSID2不允许访问内网。

问题:SSID2无法获取IP地址

解决办法:访问控制列表中去掉 

  deny   ip 192.168.113.0 0.0.0.255 192.168.113.0 0.0.0.255
                     问题解决

ip access-list extended guest
  deny   ip 192.168.113.0 0.0.0.255 192.168.105.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.106.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.107.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.108.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.109.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.110.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.111.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.112.0 0.0.0.255
 deny   ip 192.168.113.0 0.0.0.255 192.168.113.0 0.0.0.255
  permit ip any any