Interesting issue with management VLAN being overridden by access VLAN.

Hey All,

Apologies if this is lower-level but I'm trying to see what could be the root cause and would appreciate any help with figuring this out.

I have 1 Firewall with a trunk downlink to 1 switch.

Ruckus APs connected to switch #1.

Switch AP ports are set to trunk with native-VLAN of 100. Access VLAN is 101.

That setup above works with no issues. Ruckus APs get IPs in managment VLAN of 100 on the firewall and clients connect and get DHCP leases from VLAN 101.

Now....the issue is when I establish a 2nd SSID, as a Guest Network, and assign it the VLAN 102 in the Ruckus WLC. What happens is the APs start grabbing their management IPs from VLAN 102 rather than the management VLAN of 100. So then I set static reservations for the APs to only grab IPs from the management VLAN (100) and all is well, until the lease expires, then the go back to grabbing their management IPs from VLAN 102.

Anything you guys can think of?