Internet Access Issue (PC/Laptop, connected but no Internet) and IP address granting issue (Mobile Phone, not connected to any Network)

WiFi AP Model:
RG-AP820(L3) x1 unit;
work normally for both PC/Laptop, and Mobile Phone, but error still found in Diagnosis)

RG-AP820(L2) x3 unit;
PC/Laptop: Internal network connected but no Internet, only work for Guest WiFi (VLAN200), but Mobile Phone unable to connect both network (No IP address granted)


Previous Topology: Ruijie WiFi AP work normally (both Internal and Guest WiFi)
Fortinet Firewall (VLAN0, Default)
- IP address 192.168.11.1 (Gateway)
- DHCP Server enabled
- VLAN10, VLAN100, VLAN200, VLAN250
Uplink to Ruijie Layer 2 Managed switches (including Ruijie WiFi APs in L2 Switches), VLAN1 (Default), VLAN200, VLAN250


Now Topology: Ruijie WiFi AP start not working properly (except Guest WiFi, only on PC/Laptop)
Fortinet Firewall (VLAN0)
IP address 192.168.11.1 (still act as Gateway)
DHCP Server disabled
Uplink to Ruijie Layer 3 (inclduding Ruijie WiFi AP in L3 switch) and Layer 2 Managed switches , VLAN1 (Default), VLAN200, VLAN250



Ruijie Layer 3: include to configure and manage DHCP Server, VLAN management
VLAN1 (Default): Switch IP address 192.168.11.2 (DHCP Server)
VLAN10: Switch IP address 192.168.10.9 (DHCP Server)
VLAN100: Switch IP address 192.168.100.2 (DHCP Server)
VLAN200: Switch IP address 192.168.200.2 (DHCP Server)
VLAN250: Switch IP address 192.168.250.2 (DHCP Server)



I've performed Diagnosis in WiFi AP web interface, found error in "Network Connection Status", PING the external IP/Domain Name but 100% Success Rate (8.8.8.8 / 1.1.1.1 / apple.com)

Please help and many thanks.

Hi Jim Khor,

Good day.
The error in Diagnosis can sometimes be inaccurate, as long as the ping test including ping 8.8.8.8 or ping google.com results are correct then you may ignore the error in AP network diagonosis.

Regarding the Mobile Phone unable to connect both network (No IP address granted) issue, we may need further information to locate the cause:

1. can you check what mode is the AP working at ? for example FAT OR MACC mode ?

2. please check if the AP can obtain ip address from different VLANs normally, you can use

show ip interface brief

to check if AP can get ip. also you can create BVI interfaces to check if the AP can get ip from other vlans

config

vlan

interface bvi 10

ip address dhcp

for example, the above is to prove AP can get vlan 10 ip from uplink gateway.

3. if you need further assistance, please feel free to update.

Regards
David

GTAC-David replied at 2024-4-9 13:00
Hi Jim Khor,

Good day.

Hi David,

Thank you for the reply.

Answer to the information you need:
Question 1) all APs running on "macc" mode
Question 2) all APs configured as Static IP, I run your given code in Web CLI and return message below
even I have my Mobile Phone connected to APs 192.168.11.214:

Remark:
To avoid confusion and misunderstand, the DHCP Server is managed by Ruijie Layer 3 switch (192.168.11.2), not from the Fortinet Firewall Gateway (192.168.11.1)

===============================================================================
WiFi-AP-GF-Office#show ip interface brief

Interface                                IP-Address(Pri)      IP-Address(Sec)      Status                 Protocol
BVI 1                                    192.168.11.214/24    no address           up                     up      
BVI 200                                  192.168.200.214/24   no address           up                     up
WiFi-AP-GF-Office#

WiFi-AP-GF-Cafeteria#show ip interface brief

Interface                                IP-Address(Pri)      IP-Address(Sec)      Status                 Protocol
BVI 1                                    192.168.11.216/24    no address           up                     up      
BVI 200                                  192.168.200.216/24   no address           up                     up
WiFi-AP-GF-Cafeteria#

WiFi-AP-GF-Lounge#show ip interface brief
Interface                                IP-Address(Pri)      IP-Address(Sec)      Status                 Protocol
BVI 1                                    192.168.11.150/24    no address           up                     up      
BVI 200                                  192.168.200.150/24   no address           up                     up
WiFi-AP-GF-Lounge#

WiFi-AP-1F-Office#show ip interface brief
Interface                                IP-Address(Pri)      IP-Address(Sec)      Status                 Protocol
BVI 1                                    192.168.11.217/24    no address           up                     up      
BVI 200                                  192.168.200.217/24   no address           up                     up
WiFi-AP-1F-Office#
===============================================================================


I've also test the "ip address dhcp" command in existing VLAN interface in APs but the connecting Mobile Phone/Laptop still unable to be connected (no IP granted)

Question 3) The issue mainly happens to the APs model: RG-AP820L(V2), but the newer RG-AP820L(V3) work normally


The PC/Laptop and Mobile Phone affected from the RG-AP820L(V2) units
WiFi SSID: Internal
================
PC/Laptop: Connected and IP granted succesfully, but soon the Internet will disappear and IP gone missing
Mobile Phone: Unable to connect to the network


WiFi SSID: Guest_WiFi
================
PC/Laptop: Connected and IP granted succesfully
Mobile Phone: Unable to connect to the network

Jim Khor replied at 2024-4-9 14:06
Hi David,

Thank you for the reply.

Hi Jim Khor,
Could you draw a topology of the network, including the RG-AP820(L3) and RG-AP820(L2) here. Also, please use 'show run' in both of these 2 AP models and we can compare if there is any topological and configuration difference in them that could cause the issue with RG-AP820(L2).



You can also click 'create a case' here and we can help you check with ruijie cloud



Ruijie Networks | Network Devices and Solutions Provider





Regards


David

GTAC-David replied at 2024-4-9 15:31
Hi Jim Khor,
Could you draw a topology of the network, including the RG-AP820(L3) and RG-AP820(L2) ...

Hi David,

Thank you for your suggestion.
I have created a new case and uploaded the supporting files for your reference.

Case ID:
CS20240409-3366579