said by Minvaren:
I'd check/tweak the DHCP relay settings on the wireless controller first. Also, look for any address pools defined on it with that subnet in scope - might be getting used as a default somewhere.
also look for dns redirection in the meru config.
i've not dealt with meru -- but cisco equivalent can masquerade internal network information and set it with the virtual interface information (generally 184.108.40.206). the wlc does all translation on box after the traffic gets there through the capwapp tunnel.
"...if I in my north room dance naked, grotesquely before my mirror waving my shirt round my head and singing softly to myself..."