Migrate WLC 4400 to WLC 5500

Hi experts,
I want to Migrate WLC 4400 with WLC 5500, But i don't know how to do this.
Should i create new configuration or use my WLC 4400 config ?
I want to know about IOS for WLC 5500, should I upgrade my Access Point to connect with new WLC ?
I need a good method to migrate this WLC. So my WLC 5500 can run properly.
Thankyou for your help.

I have no idea how Ravi's answer is considered "correct" when he didn't address the most important aspect of your thread.
As far as I'm aware, you need to ensure both controllers are running the same firmware or 7.0.250.X.
Take a copy or export the config of the 4400 configuration to your TFTP server. Edit the file and change the necessary settings. Go to the 5500 and download this configuration file. Upgrade the firmware and the bootstrap if necessary.

Similar Messages

WLC Migration from 4400 to 5500

dear friends,
i have a existing wireless network setup in my office
existing wlc in 4402 and LAPs are 1130 & 1242 all are working fine
but we are now planning to use new 5500 series controllers for the same access points,
i want to ask that how i can done this job with very minore downtime and users disconnectivity + zero error results??
thanks

WLC Migration from 4400 to 5500
Hi, it would be better to bring up the 5508 on a different IP address and setup mobility between them and move the APs from the 4400 to the 5508.
The option off loding the configurarion of the 4400 to the 5508 i would not do it since it is 2 different platforms and the configuration file may get corrupted or not work as it should, also the 4400 requires AP manager interface mean while the 5508 not and other differences.

WLC 4400 and WLC 5500

We have a site with a WLC 4400 and we would like to setup a Controller failover. The WLC 4400 is EOS/EOL and the replacement available is WLC 5508. Can someone advice me on how to configure these units in Primary /Secondary mode so that if any of the Controllers fail, the other one can take over?
Thanks,

Hi Akil,
You are most welcome
Yes, you can configure 4400's and 5500's in a redundant configuration, but both should be runningthe
same code version. I believe the latest version that is compatible for both is 7.0.220.0.
this is the last version that supports the 4400 series.
Here's a note that reflects the support;
Note
Controllers do not have to be of the same model to be a member of a mobility group. Mobility groups can be comprised of any combination of controller platforms.
http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mobil.html
Cheers!
Rob
"Show a little faith, there's magic in the night" - Springsteen

WLC 5500 Bonjour issue

Hi,
I have a WLC 5500 with image 7.0.98, and I can not use bonjour services.
My broadcast and multicast are enabled.
Ethernet Multicast Forwarding............... Enable
Ethernet Broadcast Forwarding............... Enable
AP Multicast/Broadcast Mode................. Multicast Address : 235.0.0.1
IGMP snooping............................... Enabled
the only thing that makes me crazy, is that I am migrating from all the network 3com, to CISCO, now all my switches, and routers are Cisco, my new wlan is CISCO, but for some reasons I have to use for a while the old wireless 3com infraestructure, and I dont have any issue like this in 3com wireless.
I really does not what to do.
Any idea???

Just curious.. Since we are using Multicast - Multicast mode..make sure the Multicast routing should be enabled on..
>> MGMT interface and AP manager int's int VLAN where the routing is happening
>> VLAN on which the AP are lying
>> VLAN on whihc the clients are on.
Ex - If the Management and the AP manager is on VLAN 10 and AP are in VLAn 20 and CLients are on VLAN 30, then on VLANs 10, 20, 30 the multicast routing should be enabled..
Regards
Surendra

WLC 5500 and ISE

Hello,
I am going to deploy Cisco ISE with WLC 5500. I have two kinds of users one for which I want to deploy just open access Wi-Fi network, without working with Cisco ISE and Second group of Users for which I want to deploy Cisco ISE services like advanced authentication, posture and profiling. For both users I have just one WLC. Is there any problem to just deploy two SSID one for open access (without Cisco ISE) and second Secure with Cisco ISE ?

Thank you for helping.
I have read your proposed document, but didn't understand details beside SNMP probes.
The reason I don't want to enable ISE authentication/profiling and posture for guest is that I don't have enough licenses for all guests. I am planning to create separate SSID for guest which will have just open “authentication” without any key or ISE. In this case why ISE will profile guest users, it even doesn’t be associated with this WLAN profile?

Wlc 5500 authentication timeout

I have a WLC 5500 controller. I have two WLANS (OBSD-Internal and OBSD-BYOD). I have authentication setup to the WLC for the BYOD WLAN using LDAP (users connect with an AD user account). They are required to re authenticate every few minutes. This only happens on the BYOD WLAN (not Internal)

Scott-
Here are the results of the sho WLAN cmd:
(Cisco Controller) >show wlan 3
WLAN Identifier.................................. 3
Profile Name..................................... OBSD BYOD
Network Name (SSID).............................. OBSD-BYOD
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Number of Active Clients......................... 25
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. Infinity
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ g9c-guest
Multicast Interface.............................. Not Configured
--More-- or (q)uit
WLAN ACL......................................... Guest WiFi Internet Only
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Global Servers
--More-- or (q)uit
   Accounting.................................... Global Servers
   Dynamic Interface............................. Disabled
Local EAP Authentication......................... Disabled
Security
   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Disabled
   CKIP ......................................... Disabled
   Web Based Authentication...................... Enabled
ACL............................................. Web Auth
Web Authentication server precedence:
1............................................... local
2............................................... radius
3............................................... ldap
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Local Authentication................... Disabled
   H-REAP Learn IP Address....................... Enabled
--More-- or (q)uit
   Client MFP.................................... Optional but inactive (WPA2 not configured)
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Mobility Anchor List
WLAN ID     IP Address            Status

WLC 5500 802.1x problems

So here is the problem that i have.
I have a WLC 5500 in site A ( let´s say city A too ) with its own set of wlans ( wlan 1 , wlan 2 ... ) that are used to differentiate different types of users ( teachers, students, etc ) using a RADIUS server and a AD for this client and using 802.1x. Everything on site A is working fine.
Now i´m trying so set an access point in site B ( in city B ) with its own set of wlans ( wlan X, wlan Y ... ) that is also used to differentiate clients, site B as its own DHCP, its own RADIUS and its own AD. I´ve managed to connect the access point to the WLC and set wlans for site B. My problem now is that when a user tries to connect to wlan X and he is suppose to be in wlan Y, he is not forwarded to wlan Y and is left in wlan X. I´ve also configured HREAP.
Does anyone as any idea why the clients aren't being assigned to the correct wlan??
I´ve checked in the Radius server and its sending the correct wlan to the user.
I now that the text is probably a little bit confusing, but i hope that someone can help me.
Thanks in advanced.

You are right, it is not supported:
Note: If the APs are in H-REAP mode and locally switched at the remote site, the dynamic assignment of users to a specific VLAN based on the RADIUS server configuration is not supported.
Since you can't do dynamic vlan, why not have two policies, one for teachers and the other for students. You will need to have then in seperate groups in AD also. Then filter on the ssid and the AD group, so if students try to access the teachers ssid using their credentials, they get rejected and vice versa.
I don't know what you mean by connecting two site without h-reap. The only other way is switching the AP to local mode, which you better have some good bandwidth.
Scott

WLC 5500

Dear All,
i have WLC 5500 with 50 AP Base license with LAP 3500i APs,
so, do i need license for the WLC to work with the cleanair technology even it software ver 7 ?????
and also i have WCS with base license so do i need a license also for the WCS to work with clean air technology????
thanks
Ahmed

You do not need extra license for either WLC or WCS to work with cleanair. But if you buy 10 AP pack 3500 APs, you will get WCS Plus upgrade license (for 100 APs) for free.
More info can be found here:
http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps10981/qa_c67-604158.html
zhenning

WLC 5500 with multiple APs

We have a WLC 5500 apliance, but i have a problem, the APs have a administrative IP in a diferent segment, only conected to WLC the AP have same segment of the management interface, the 5500 don´t have APmanager interface.
How configurate the WLC to conected and administrate all AP with different segment IP
Product Version.................................. 6.0.182.0
chasis: AIR-CT5508-K9

You may check this article about the discovery process:
http://tiny.cc/lqu1zw
Now, with what Steve above is trying to say is that with 5508 the management interface itself is the AP manager interface (by default). so, management and ap-manager interfaces are merged into one interface with same IP address. You can change this behavior but this is the default.
The article will tell you what mechanisms can be used to direct the APs to join the WLC even if they are on different subnet.
HTH
Amjad
Rating useful replies is more useful than saying "Thank you"

Can we create Mobility group between WISM2 and WLC 5500

Dears,
I need your feedback urgent please,
Can we create Mobility Group between WISM2 and WLC 5500
Firmware for WISM2 > 7.4.121.0
Firmware for WLC5500 > 6.0.196.0
I created Mobility Group with (IP address , MAC Address and Mobility group name) for Foreign Controller. if any configuration required from my side.
Wait your feedback urgent please
Regards,

Hi,
Controllers do not have to be of the same model to be a member of a mobility group. Mobility groups can be comprised of any combination of controller platforms.
Thats enough :)
Regards
Dont forget to rate helpful posts

Overwrite image webauth-bundle WLC 5500

Hi,
Does any one knows how to replace an image in webauth-bundle on WLC 5500?
When I run "show custom-web webauth-bundle", I do see the files:
aup.html
login.html
yourlogo.jpg
But, the size of yourlogo.jpg is too big and need to replace with a smaller one.
I have tried (with the appropiate IP and filename):
transfer download mode tftp
transfer download datatype image
transfer download serverip tftp-server-ip-addres
transfer download filename {filename.jpg | filename.gif | filename.png}
but, it does not work.
Thanks very much.

If the size changes, then yes you will need to define that on the html. Anyways, you will need to tar up the files and upload it to the WLC. That is the only way to update a custom webauth, either being a change to the html, image or maybe the AUP.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Wplus Base Licence WLC 5500

Hi, I have a WLC 5500 with Software Version, 6.0.196.0, License Level Base, according to the "Release Notes for Cisco Wireless LAN Controllers and Lightweight Access Points for Release 6.0.196.0", says that the base license includes all features present in the wplus license. In the monitor page from the WLC the Licence Level say "base", and when I go to Managment License Level, and I set the License Level to "wplus" a messages say: Setting wplus as next level failed. Only with the version of Operating system is enough to have the functions of Wplus Licence, although the level of license showing base license, in the monitor page of the WLC.
Thanks

Thanks leolahoo,
Your indicate that in the version 7 these functions are operative, but because the guide says that from version 6.0.196 they are available?
WPlus License Features Included in Base License
All features included in a Wireless LAN Controller WPlus license are now included in the base license; this change is introduced in release 6.0.196.0. There are no changes to WCS BASE and PLUS licensing.
These WPlus license features are included in the base license:
•Office Extend AP
•Enterprise Mesh
•CAPWAP Data Encryption
The licensing change can affect features on your wireless LAN when you upgrade or downgrade software releases, so you should be aware of these guidelines:
•If you have a WPlus license and you upgrade from 6.0.18x to 6.0.196.0: Your license file contains both Basic and WPlus license features. You won't see any disruption in feature availability and operation.
•If you have a WPlus license and you downgrade from 6.0.196.0 to 6.0.188 or 6.0.182: The license file in 6.0.196.0 contains both Basic and WPlus license features, so you won't see any disruption in feature availability and operation.
•If you have a base license and you downgrade from 6.0.196.0 to 6.0.188 or 6.0.182: When you downgrade, you lose all WPlus features.

Migrate WLC 4400 to WLC 5508

I'm looking for some suggestion. We have a WLC 4402 and will be upgrading to WLC5508. The WLC 4402 will be moved to a smaller office to provide wireless coverage there.
Would it be better to upgrade the 4402 with the 5508, then wipe it clean and configure it for the new office from scratch.
Or configure the 5508 from scratch then change the settings in 4402 to reflect the new office.
Is there a way to use WCS to move all of the configurations from 4402 to 5508

Abhishek,
I strongly recommend you delete your post. It's going nowhere. You've posted a link which points to another link that no longer exist. FAIL!
Aqeel,
Delete your post. You're not reading AND understanding the OP. Your solution is irrelevant because it talks about how to upgrade the WLC firmware.
Gents,
May I recommend you consider getting PROPER TRAINING? Cisco has a wealth of Cisco Training for staff which could potentially benefit. Get yourselves properly trained before making any posts.

WLC 5500 mobility group failover

Hey
I have a Question i am testing mobility group with
Failover for redundend connection between 2
Cisco 5500 Wlc.
On both the controllers i got the mobility working
And both the controllers have the same version
And configuration.
But when i unplug the main controller the access-
Points don't convers to the second one
The just keep on creaming can't find the main controller
Also with this thus the second wlc need to have the same
Interface ip address like managment..??
Thanks

What do you mean by "convers". An AP will only join one wlc and when that primary wlc is no longer available, should failover to the other/secondary wlc. Mobility is required for an AP to know about all the other APs in that mobility group. And if not configured correct, your AP will only be able to join that wlc.
Thanks,
Scott Fella
Sent from my iPhone

HA on WLC 5500 - setting username loop

Hello everyone!
My bckup WLC controler seems to stumble in the setting of authentication phase. A week ago I actualy successfully implemented and tested HA scenario with two 5500 controllers (one of them with the HA SKU code). Both of them were upgraded to 7.4.100 version, but today the bckup controller has gone insane! The HA sceanrio was broken down and the bckup controller loops in "Enter credentials" loop forever!
It doesn't matter what I enter, how many signs, it just loops endlessly... I bolded the console output underneath... The catch is that it doesn't matter what I put in it yust ignores the input and asks me for credentals again!
Here's some of the output....
Starting WIPS: ok
Starting SSHPM LSC PROV LIST: ok
Starting RRC Services: ok
Starting SXP Services: ok
Starting Alarm Services: ok
Starting FMC HS: ok
Starting IPv6 Services: ok
Starting Config Sync Manager : ok
Starting Hotspot Services: ok
Starting PMIP Services: ok
Starting Portal Server Services: ok
Failed to add bonjour service from xml to MSAL-DB, RC :7 :
Failed to add bonjour service from xml to MSAL-DB, RC :7 :
Failed to add bonjour service from xml to MSAL-DB, RC :7 :
Failed to add bonjour service from xml to MSAL-DB, RC :7 :
Failed to add service from xml to profile DB : 7
Failed to add service from xml to profile DB : 7
Failed to add service from xml to profile DB : 7
Failed to add service from xml to profile DB : 7 Starting mDNS Services: ok
Starting Management Services:
   Web Server:    CLI: ok
   Secure Web: Web Authentication Certificate not found (error). If you cannot access management interface via HTTPS please reconfigure Virtual Interface.
   License Agent: ok
(Cisco Controller)
Welcome to the Cisco Wizard Configuration Tool
Use the '-' character to backup
Would you like to terminate autoinstall? [yes]: yes
System Name [Cisco_db:e5:c4] (31 characters max):
AUTO-INSTALL: process terminated -- no configuration loaded
Enter Administrative User Name (24 characters max): AdminUser     - you set the username
Enter Administrative Password (3 to 24 characters): *******      - and passs
Re-enter Administrative Password                 : *******            - confirm pass
Enter Administrative User Name (24 characters max):              - here it goes again!!!!!
This loops now forever...
Thanks,
Drejc

Hello everyone!
I found a solution to my problem, so I thought I can share it with the community....
I enterted the boot loader menu at startup and changed the primary image to a backup and erased the config. Restart
ed the machine and voila!!! It looks like some xml file vere corrupted on master controller and it went nuts (if you take a look at the first post you'll see that it's something wrong with the xml files...)....
Here's the log of described scenario....
============================================================
Boot Loader Menu
============================================================
1. Run primary image (7.4.100.0) - Active
2. Run backup image (7.0.98.218)
3. Change active boot image
4. Clear configuration
5. Format FLASH Drive
6. Manually update images
Enter selection: 3
--> Changing... done.
============================================================
Boot Loader Menu
============================================================
1. Run primary image (7.4.100.0)
2. Run backup image (7.0.98.218) - Active
3. Change active boot image
4. Clear configuration
5. Format FLASH Drive
6. Manually update images
Enter selection: 4
Launching...
Re-building configuration filesystem
Done.
Restarting system.
WLCNG Boot Loader Version 1.0.1 (Built on Apr 11 2009 at 13:32:33 by cisco)
Board Revision 1.3 (SN: FCW1711L08R, Type: AIR-CT5508-K9) (G)
Verifying boot loader integrity... OK.
OCTEON CN5645-NSP pass 2.1, Core clock: 600 MHz, DDR clock: 330 MHz (660 Mhz data rate)
FPGA Revision 1.3
Env FW Revision 1.6
USB Console Revision 1.27
DRAM: 1024 MB
Flash: 32 MB
Clearing DRAM........ done
Network: octeth0', octeth1
' - Active interface
E - Environment MAC address override
CF Bus 0 (IDE): OK
IDE device 0:
- Model: STEC M2T CF 1.0.0 Firm: K1367MIX Ser#: STIM2M9413044104219
- Type: Hard Disk
- Capacity: 977.4 MB = 0.9 GB (2001888 x 512)
Press now to access the Boot Menu...
Loading backup image (7.0.98.218)
100%
30626094 bytes read
Launching...
init started: BusyBox v1.6.0 (2010-05-13 17:50:10 EDT) multi-call binary
starting pid 831, tty '': '/etc/init.d/rcS'
type = block
dump-device = 254:4
disrupt
level = header
compress = none
Generating Secure Shell DSA Host Key ...
Generating Secure Shell RSA Host Key ...
Generating Secure Shell version 1.5 RSA Host Key ...
Detecting Hardware ...
set smp_affinity for irq 48
003f
Talwar DP from CGE5.0 ...
starting pid 1032, tty '/dev/ttyS0': '/usr/bin/gettyOrMwar'
Cryptographic library self-test....passed!
XML config selected
Validating XML configuration
Cisco is a trademark of Cisco Systems, Inc.
Software Copyright Cisco Systems, Inc. All rights reserved.
Cisco AireOS Version 7.0.98.218
Firmware Version FPGA 1.3, Env 1.6, USB console 1.27
Initializing OS Services: ok
Initializing Serial Services: ok
Initializing Network Services: ok
Initializing Licensing Services: ok
Starting ARP Services: ok
Starting Trap Manager: ok
Starting Network Interface Management Services: ok
Starting System Services: ok
Starting FIPS Features: ok : Not enabled
Starting Fastpath Hardware Acceleration: ok
Starting Fastpath Console redirect : ok
Starting Fastpath DP Heartbeat : ok
Fastpath CPU00: Starting Fastpath Application. SDK-1.8.0, build 269. Flags-[DUTY CYCLE] : ok
Fastpath CPU00: Initializing last packet received queue. Num of cores(10)
Fastpath CPU00: Init MBUF size: 1856, Subsequent MBUF size: 2040
Fastpath CPU00: Core 0 Initialization and FIPS self-test: ok
Fastpath CPU03: Core 3 Initialization and FIPS self-test: ok
Fastpath CPU04: Core 4 Initialization and FIPS self-test: ok
Fastpath CPU05: Core 5 Initialization and FIPS self-test: ok
Fastpath CPU06: Core 6 Initialization and FIPS self-test: ok
Fastpath CPU07: Core 7 Initialization and FIPS self-test: ok
Fastpath CPU08: Core 8 Initialization and FIPS self-test: ok
Fastpath CPU09: Core 9 Initialization and FIPS self-test: ok
Fastpath CPU00: Initializing Timer...
Fastpath CPU01: Core 1 Initialization and FIPS self-test: ok
Fastpath CPU02: Core 2 Initialization and FIPS self-test: ok
Fastpath CPU00: Initializing Timer...done.
Fastpath CPU01: Received instruction to get link status
Starting Switching Services: ok
Starting QoS Services: ok
Starting Policy Manager: ok
Starting Data Transport Link Layer: ok
Starting Access Control List Services: ok
Starting System Interfaces: ok
Starting Client Troubleshooting Service: ok
Starting Management Frame Protection: ok
Starting Certificate Database: ok
Starting VPN Services: ok
Starting Licensing Services: ok
Starting LWAPP: ok
Starting CAPWAP: ok
Starting LOCP: ok
Starting Security Services: ok
Starting Policy Manager: ok
Starting Authentication Engine: ok
Starting Mobility Management: ok
Starting Virtual AP Services: ok
Starting AireWave Director: ok
Starting Network Time Services: ok
Starting Cisco Discovery Protocol: ok
Starting Broadcast Services: ok
Starting Logging Services: ok
Starting DHCP Server: ok
Starting IDS Signature Manager: ok
Starting RFID Tag Tracking: ok
Starting Power Supply and Fan Status Monitoring Service: ok
Starting Mesh Services: ok
Starting TSM: ok
Starting CIDS Services: ok
Starting Ethernet-over-IP: ok
Starting DTLS server: enabled in CAPWAP
Starting CleanAir: ok
Starting WIPS: ok
Starting SSHPM LSC PROV LIST: ok
Starting RRC Services: ok
Starting FMC HS: ok
Starting Management Services:
   Web Server: ok
   CLI: ok
   Secure Web: Web Authentication Certificate not found (error). If you cannot access management interface via HTTPS please reconfigure Virtual Interface.
   License Agent: ok
(Cisco Controller)
Welcome to the Cisco Wizard Configuration Tool
Use the '-' character to backup
Would you like to terminate autoinstall? [yes]: yes
System Name [Cisco_db:e5:c4] (31 characters max):
AUTO-INSTALL: process terminated -- no configuration loaded
Enter Administrative User Name (24 characters max): yourusername
Enter Administrative Password (24 characters max): *******
Re-enter Administrative Password                 : *******     - now the loop dissapears!!!!
Service Interface IP Address Configuration [static][DHCP]: static
Service Interface IP Address: 192.168.200.1
Service Interface Netmask: 255.255.255.0

Migrate WLC 4400 to WLC 5500

Similar Messages

Maybe you are looking for