Failover WLC

Similar Questions

• Case of failure the WLC

  Hi all!

  I have a question. If we used a cisco aironet 3700series access point and there also a controller to manage. the question is "when the controller failure has occurred, can access us internet via AP.  I think it is only since the Aironet 3700series available standalone twice and base Comptroller, first of all, we have configured with flex base controller wired mode and then can we change the configuration in stand-alone mode setting via the console when the controller fail again? Thank you all for answer promptly!

  Hello

  Reading your post, you have a 3700 flexconnect mode AP?

  If so the data flow is not affected by failover wlc as traffic going on locally. If you centralized since wlc authentication, you should configure AP are capable of doing authentication when they lost wlc connectivity.

  To convert lwap in autonomous, it is not a big deal. Have a look here: https://supportforums.cisco.com/document/57476/lwapp-autonomous-conversi...

  PS: Please do not forget to rate and score as good response if this solves your problem

• WLC 5508 joined connected vs status

  Hello

  What is the difference between the status of 'Joint' and 'Connected' AP on the controller of Cisco 5508 wireless in HA configuration?

  I have two WLC 5508 in HA configuration. October 3 the controller switchovered with reason "Active controller failed" (attached file 1). I tried to understand why the controller has failed, but I did not find the reason.

  Now, there are a lot of AP (not all) in the 'connected' State, not 'Supported in status' (attached file 2).

  What is the meaning? and why in the details ' AP join stats ' (attachment 3 and 4) tha AP are well attached status? It's a licensing issue? I can solve this problem with a manual failover to main controller?

  Thank you for the help

  You have a license for 250 AP on your primary controller and the secondary is a SKU or has at least 50 AP license to act like a HA.

  As long as the main unit is available for the secondary unit (active) it will not perform the countdown. 90 days don't apply if the main unit is unavailable for more than 90 days in a row. If the secondary image (active) loses power and the principal is unavailable when it starts again, it will go into maintenance mode.

  Please rate helpful messages... :-)

• General questions about Cluster 4400 WLC

  I have inherited some 4402 wireless LAN controllers and I am in charge of making their ship-shape. So I have a few general knowledge wireless, I have not worked with before wireless controllers and have a few issues with that I was wondering if someone could help me:

  (1) how can I check that the primary and secondary controllers are configured for failover without actually performing a test? Both have AP failback enabled, but I don't know what else to check.

  (2) they are running code 3.2.116.21. If I want with 3.2 or plan to move up to 4.X?

  Thanks to a bouquet. I'm slowly working my way through the docs and the answers to them would of course speed up things.

  Hi Johnny,.

  I hope things are well with you! The steps required to set up relief AP are detailed in the attached doc. I would always try to provide a Maintenance window to test this point, rather than not knowing for sure :)

  WLAN controllers to access tipping points light Configuration example

  http://www.Cisco.com/en/us/Tech/tk722/tk809/technologies_configuration_example09186a008064a294.shtml#C4

  Now, for your second question, it is likely that you will want to upgrade the WLC to a version more recent code. They have passed through 4.0.x, 4.1.x and newer 4.2.x. 3.2 is a fair way behind. Take a look at the WLC Release Notes;

  Series 4400 Cisco Wireless LAN controllers Release Notes

  http://www.Cisco.com/en/us/products/ps6366/prod_release_notes_list.html

  I hope this helps!

  Rob

• [wlc] secondary wlc in a 1:1, Ip dhcp pool redundancy

  Hello

  I will put up a high availability of 1:1 with 2 wlc 2504.

  I need to enter the ip address primary and backup controller and name to each AP.
  Unfortunately, we have a lot of AP and AP will more soon; it manually will take some time.

  I wonder if there is a way to give the secondary ip address to the ip dhcp pool? or any other stand-alone solution.

  Thank you very much

  For any additional consultation
  LINK: https://learningnetwork.cisco.com/thread/66301

  To quote one of the answers:
  The global primary and secondary come into play if there is no primary or secondary configured specifically in the AP. personally I've never used it however if you had only two controllers that would be ideal. I just see by specifying more granular level AP. personally I always use the HA tab for the ap as you never know how the deployment will evolve. You may fail aps to only one controller several controllers. You may need the HA failover priority. It is always useful to understand what will happen when your controllers fail and can become interesting if you have several controllers with several groups of AP and RF to profiles that you really need start controlling what ap's going where.

  As you can see, most of the Admins do not configure the Global setting.
  Just be patient in their configuration by AP XD

• Config of basis for the 2nd and 3rd of the WLC?

  I saw the discussion about the configuration of the failover on of the WLC. I think I have a pretty good understanding of what is supposed to happen here. But what is really clear is the config of base on the 2nd and 3rd in WLC. They need to be configured exactly like the first, with the exception of the unique fields such as host name and ip addresses, interface and such? Usually people take the config of the first and do a "Find and replace" to fix the config for subsequent controllers? I will add 2 more to my controller in the near future and try to have a better understanding of the process until I have to implement. Thank you!

  You are right in the config WLC - unique IP/hostname info and everything else the same. There is usually not a lot of changes of configuration to do on the additional WLC, the few times that I did I have manually configured things or used WCS. Configure additional WLC being part of the same group of mobility and/or hardcode primary, secondary & tertiary controllers AP for failover.

  HTH

• Redundancy with double WLC

  Hi, I implémenterai a WLAN with AP1130AG and WLC 2125. If I understand correctly all the traffic to and from the points of access (data + management) will first of all be encapsulated in a tunnel from the WLC LWAPP? Then, the WLC will pass different traffic VLAN via an 802. 1 q trunk in the network. Is this right? If so, the WLC is a true single point of failure! What happens if the WLC get out-of-service? What is the impact on the existing and new client sessions? How a redundant 2125 WLC will work with the primary (active / standby with HSRP, load balancing)? What are the best practices in such a network?

  Thank you

  Hi Jean-Pascal,

  This is not correct, no connection LWAPP (no traffic). A client session will not survive the re-registration due to a failover of WLC :(

  I hope this helps!

  Rob

• Mobility groups, failover on different subnets

  I have read up on 5.1 and wonder how and if real failover on subnets is an option.

  I understand controllers mg even customers roaming on different subnets.

  How it works if your main "anchor" isn't alive to replicate the DB entry on the controller off-subnet? Say if die of my local WISN and the backup is in the next State, how the HA will maintain connectivity?

  Thank you!

  Yes, but tha ap will be the new configuration of the WLC. Also, users will get tunnelees to the wlc and be thrown out of this subnet. Then make sure you understand the ssid and ip clients will get when they associate to of different wlc. That should do it.

• WISN redundancy/failover

  Cisco documents refers to tertiary WLC competition. The thing is that each WISN has 2 cards WLC 4404. We have 2 WISN modules. How to configure modules WISN for redundancy/failover? -Thank you

  Yes... same mobility group... so if you are between the wlc for A and B roaming you will be fine.

• Adding a second controller - 3750 G integrated WLC

  Hello all-

  I am new to this, please bear with me.

  I was responsible for adding a second WLC in the customer's network. They currently have a 47 access support 4402-50 points. The customer has purchased a 3750G w / integrated WLC (50AP) anticipate the addition of several APs, but the Bill is pending. In the meantime, the le client customer wants the WLC new to help balance the load of the AP. The existing WLC is running 6.0.182.0. The customer has a mixture of APs 1130, 1140, 1240 and 1250. They begin to use the features of N.

  The two controllers are now on the same subnet. 10.1.113.x I've updated the code on the 3750G_WLC to match the other controller. Here are some questions I have now:

  1. am I correct in thinking that I should set these two controllers in the same group of mobility?

  2. am I right in thinking I have to manually configure each access point to point to the controller, I want that he be associated? In other words, is there a function for AUTOMATIC load balancing? (NOTE: the customer just bought and install WCS)

  3. once exceed US 50 APs, any other configuration change will have to happen?

  It's all a bit sketchy for me because we are right on the edge. Then. at the moment we are N + 1 request to balance between the two. Once exceed US 50 APs, we are no longer N + 1 and must elect which APs are a priority in case of failover.

  Some advice on the installation of this second WLC, in the network and any recommendations you may have to manage these 47 existing APs is appreciated.

  See you soon-

  Thus, when you set a primary controller and secondary, you specify the name of the controller. 5.2 and above you can also specify the IP address of the management of this controller. The AP will learn about these controller through mobility group set on the controllers.

  Lose the controller, I didn't set the priority after the fact. I meant that if you try to set priority (for the event that a controller has been lost), then you would create the priority on high tab override the configuration of the AP. When you first install, you would like this.

  If you don't set a primary/secondary, the AP should know the controllers of each controller, and when the controller sends its replies of discovery, it must specify only one to balance the load of. Or something like that.

  The bottom line, is that if you do not have a primary/secondary set, then the AP discovery process should get your AP on the less busy controller. It is the primary/secondary definitions which kind of replace it, which is what I called a "manual"... balancing

  -What helps more?

• How to retrieve the RADIUS shared secret key on the WLC 5508

  Hi all

  The wirelss privious admin left our company and did not let the other know the shared secret key on the WLC 5508 Radius.

  The 5508 WLC runs on the 7.0.98.0 code. I can access the viao WLC CLI and GUI. I can also access the Win2003 Radius Server, but the button displays an asterisk for me. I have listed partial RADIUS config of the WLC below. How can I get the RADIUS shared secret key? Thanks in advance.

  (Cisco Controller) > show RADIUS summary

  Vendor Id backward compatibility... People with disabilities
  Call Station Id... lower case
  Dial the Station Id Type... IP address
  Aggressive failover... Activated
  Keywrap.......................................... People with disabilities
  Rescue test:
  Test Mode.................................... Off
  Probe of username... cisco-probe
  Interval (in seconds)... 300
  MAC for authentication Messages... hyphen delimiter
  MAC for Accounting Messages... hyphen delimiter

  Authentication servers

  The State of the Port Address Type server all RFC3576 IPSec - AuthMode idx / phase 1/group/life/Auth/BA
  ---  ----  ----------------  ------  --------  ----  -------  ------------------------------------------------
  1 NM 10.xx.18.48 1645 on 2 off off - no/unknown/group-0/0 None/None

  Accounting servers

  The State of the Port Address Type server all RFC3576 IPSec - AuthMode idx / phase 1/group/life/Auth/BA

  -Other - or ITU (q)
  ---  ----  ----------------  ------  --------  ----  -------  ------------------------------------------------
  1 N 10.xx.18.48 1646 enabled 2 N/A disabled - no/unknown/group-0/0 None/None

  Kind regards

  Robert

  You can retrieve the RADIUS shared secret key as other passwords that are stored on the WLC by using the procedure at the following link:

  https://supportforums.Cisco.com/community/NetPro/wireless-mobility/begin-wireless/blog/2011/11/04/recover-wepadminguest-account-password-from-WLC

  NOTE: WPA keys are not available through these methods.

  Basically, you can enable password in clear text on the wlc with 'config passwd-cleartext enable' and then issue a "view orders of the running-config' - your RADIUS configuration command should now display the shared secret.

  -Pat

• Cisco WLC 8540 HA Timer

  Dear Experts,

  I prepare a project for a wireless solution Documentation and we use wlc 8540 in HA mode. For HA, WLC will send keepalive updates on each 100msec to check the unit of the Hotstandby State via the RP Port. But in the documentation, I am obliged to put the correct failover time. So can I assume that the 101st msec, failover happen? and for that I need to provide some docs cisco which mentions exact switching timers.

  can you please guide me on this. ?

  see you soon,

  Thank you

  Waqas

  Hi Waqas,

  Try this document: high availability Tech Note

  The time it takes for failover in the event of power failure on an Active zone also depends on the Keepalive timer configured on the WLC (configured for 100 msec by default). The algorithm to determine the failover is listed here:

  • The WLC Eve sends Keepalive to the WLC Active and waits for and acknowledgement within 100 msec according to the default timer. This can be configured in varies from 100 to 400 ms.
  • If there is no recognition of Keepalive in 100 msec, WLC Eve immediately sends an ICMP message to the active WLC via redundant management interface to verify if it is a failover of the box or some problem with redundant connection Port.
  • If there is no response to the ICMP message, the WLC Eve gets aggressive and immediately sends another Keepalive message to the WLC Eve and expected receipt of 25% less time (i.e. 75 ms or 25% less than 100 msec).
  • If there is no recognition of Keepalive in 75 msec, the WLC Eve immediately sends another ICMP message to the active WLC via redundant management interface.
  • Yet once, if there is no answer for the second ICMP message, the WLC Standby gets more aggressive and immediately sends another Keepalive message to the WLC standby and waiting for an acknowledgement in extra time 25% Real Timer less than the last Keepalive timer (i.e. 50 msec or last Keepalive timer of 75 MS - 25% less of 100 msec).
  • If there is no acknowledgement of the third package Keepalive less than 50 msec, the WLC Eve immediately sends another ICMP message to the active WLC via redundant management interface.
  • Finally, if there is no response from the third package ICMP, Standby WLC says the WLC Active died and the role of the WLC assets.

  Network failover

  In the case of a failover of network (i.e. the WLC Active cannot reach its gateway for some reason any), it may take 3-4 seconds for a complete failover based on the number of access points in the network.

  See you soon,.

  Ric

• Deploy a new 5508 as a secondary WLC in network

  Hi friends,

  I am really poor deployed WLC.

  I need to deploy a new WLC 5508 networked as a secondary controller. The primary WLC (5508) has been configured as a single from now and good work WLC... Now, I need deploy the new 5508 as secondary controller.

  I could connect to the console and make the basic configs. (Service and management int IP interface addresses etc)

  Now, I have to perform two tasks:

  (1) I should synchronize the configuration of the primary 5508 for 5508 high school which I just added. Please guide me how do?

  (2) I need to set up the HA (failover) using the RP or giving the Pri/Sec/Ter static by AP.

  Please help me ASAP as I am not very used to WLC deployments.

  Thank you

  Francis

  Hello

  1. It is a model of HA - SKU (secondary) license?
  2. Or do you have at least 50 AP secondary license to WLC?

  If you have any of the above then go through this guide:

  http://networkguy.de/?p=558

  http://www.Cisco.com/c/en/us/TD/docs/wireless/controller/TechNotes/7-5/H...

  Concerning

  Remember messages useful rates

• WLC 5508 licenses

  I recently deployed a 5508 with basic license and license for 11 AP now, I want to add that another controller for redundancy wanted to know how the licenses work?  Do I need to get more than 11 licenses for this one also?

  And as I add licenses of AP for the PDC I have to add the same number to one side too?

  Mohammad,

  Yes, the licensing of the WLC must match if you are wanting to use them for redundancy/failover.  Each WLC will require unique licenses.

  HTH,
  Steve

  ----------------------------------------------------------------------------------------------------------

  Remember messages useful rate or highlight the question as answered while we found later.

• How to create a network redundant ISP failover using 2 Airport Extreme

  Hello friends,

  I have 2 different lines of rented ISP related to my Airport Extreme 2. Was curious to know if these 2 AEs can be interconnected somehow to create a network of ISP failover. Users on AE 1 traffic would be transparent reassigned to the AE 2 and vice versa, if corresponding ISP fails. When the access provider is in place, they will return to their AE in elementary school.

  Thank you.

  Not without a smart dual wan router. That is to say done good load sharing.

  Extreme is about as simple a router you can find... He has the absolute minimum of functionality.

  Users on AE 1 traffic would be reassigned transparent to the AE 2 and vice versa

  You can do this by using some manual intervention... a simple change of entry door is usually sufficient.