WiSM2 n+1 HA

Hi,
I have a customer who are interested in buying an HA WiSM2 to complement their three active WiSM2 they have today and running this in a n+1 HA configuration. This I understand should be possible as of 7.4?
But i can't find anything in the configuration guide on how to set this up.
Do I just configure it as I would any other backup controller and it will automatically get its license activated if one of the other controllers die? Or is it something more in line with the AP SSO function where it "takes over" the controller that dies.

http://www.cisco.com/en/US/prod/collateral/wireless/ps6302/ps8322/ps10315/product_bulletin_c25-722724.html
Ability to use HA SKU in N:1 for controller resiliency when geographically separate from the primary
HA controller SKUs can now be deployed in a geographically separate location from the primary controller to provide N:1 controller resiliency.
Low-cost HA solution that allows wireless controller to be geographically dispersed and may reside in same or different L3 network than the primary wireless controller. The HA controller may be entirely different model than primary controller(s) and yet provide the HA capabilities.
Sent from Cisco Technical Support iPhone App

Similar Messages

  • How to remove the WiSM2 from the Catalyst 6500 series switch?

    Hello, can you explain to me how to safely remove the WiSM2 from the Catalyst 6500 series switch?
    According to the documentation "Catalyst 6500 Series Wireless Services Module 2 Installation and Verification Note":
    To remove the WiSM2, perform these steps:
    Step1     Shut down the module by one of these methods:
    In privileged mode from the router prompt, enter the hw-mod module mod shutdown command. NoteIf you enter this command to shut down the module, you must enter the following commands in global configuration mode to restart (power down, and then power up) the module:
    Router# no power enable module modRouter# power enable module mod
    If the module does not respond to any commands, press the SHUTDOWN button located on the front panel of the module.
    Step2     Verify that the WiSM2 shuts down. Do not remove the module from the switch until the POWER LEDis off.
    But, in the case of Step1 (1st methods) I do not see a option "shutdown"  in the command "hw-mod module 3"...
    All I prompted to enter is:
    c6500#hw-module module 3 ?
    boot           Specify boot options for the module through Power Management Bus control register
    reset          Reset specified component
    simulate  Simulate options for the module
    Is it hidden options? IOS version of c6500 is 12.2(33)SXJ1
    In the case of Step2 (2nd methods) there is not any button on the front panel of the module?
    And yet, it is better to remove the module configuration manually or use the command module clear-config prior to removing the module?

    Good catch.
    Which one is true, will get back to you on this if i've something soon.
    http://www.cisco.com/en/US/docs/wireless/module/wism2/installation/note/WiSM_2.html#wp34727
    The above link is procedure to remove wism2. This procedure doesn’t look like wism2 is hot swapable.
    http://www.cisco.com/en/US/docs/wireless/module/wism2/installation/note/WiSM_2.html#wp34621
    All modules, including the supervisor engine (if you have redundant supervisor engines), support hot swapping. You can add, replace, or remove modules without interrupting the system power or causing other software or interfaces to shut down. For more information about hot-swapping modules, see the Catalyst 6500 Series Switch Module Installation Guide.

  • WISM2-Cannot Login via WEB

    Hi everyone
    I cannot login the wism2 with browser.
    But I can use command to login the wism.
    like this:
    VSS-6509#session switch 2 slot 9 processor 1
    The default escape character is Ctrl-^, then x.
    You can also type 'exit' at the remote prompt to end the session
    Trying 172.16.31.2 ... Open
    User:admin
    Password:*********
    (WiSM-slot41-1) >
    notice:Sometimes I can login via the web.The interface and ip address configuration were correct.
    WISM2 log:
    *emWeb: Mar 08 05:20:38.189: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 05:04:38.105: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 04:48:38.032: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 04:32:37.951: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 04:16:37.861: #CLI-3-LOGIN_FAILED: cliutil.c:653 Login failed. User:nouser, Service type:-8. excessive failed login attempts.
    *emWeb: Mar 08 04:16:37.861: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 04:00:37.780: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 03:44:37.708: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 03:28:37.623: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 03:12:37.550: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 02:56:37.482: #CLI-3-LOGIN_FAILED: cliutil.c:653 Login failed. User:nouser, Service type:-8. excessive failed login attempts.
    *emWeb: Mar 08 02:56:37.482: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 02:40:37.396: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 02:24:37.308: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 02:08:37.191: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 01:52:37.103: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 01:36:37.022: #CLI-3-LOGIN_FAILED: cliutil.c:653 Login failed. User:nouser, Service type:-8. excessive failed login attempts.
    *emWeb: Mar 08 01:36:37.022: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 01:20:36.951: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 01:04:36.853: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 characters.
    *emWeb: Mar 08 00:48:35.253: #CLI-3-LOGIN_FAILED: cliutil.c:576 Login failed. User:nouser, Service type:-8. Username/Password length must be between 3 and 24 char

    You have radius setup for managment?  If you have radius setup, make sure you don't have the managmeent check box enabled unless you are using TACACS or Radius for management users.  Seem's like radius if sending a reject back to the WLC.

  • Cisco AP 2702 can't join WiSM2 7.6.130.0

    i got these msg log from AP. AP got ip address but can't discover WiSM2. other model 3502/2602 it's ok.
    IOS Bootloader - Starting system.
    flash is writable
    Antigua Board
    40MB format
    Tide XL MB - 40MB of flash
    Xmodem file system is available.
    flashfs[0]: 13 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 41158656
    flashfs[0]: Bytes used: 6153216
    flashfs[0]: Bytes available: 35005440
    flashfs[0]: flashfs fsck took 9 seconds.
    Base Ethernet MAC address: d4:6d:50:f9:eb:00
    Ethernet speed is 100 Mb - FULL Duplex
    Loading "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-mx"...#########################
    File "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-mx" uncompressed and installed, entry point: 0x2003000
    executing...
    Secondary Bootloader - Starting system.
    Antigua Board Pre-Pilot
    40MB format
    Tide XL MB - 40MB of flash
    Xmodem file system is available.
    flashfs[0]: 13 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 41158656
    flashfs[0]: Bytes used: 6153216
    flashfs[0]: Bytes available: 35005440
    flashfs[0]: flashfs fsck took 10 seconds.
    flashfs[1]: 0 files, 1 directories
    flashfs[1]: 0 orphaned files, 0 orphaned directories
    flashfs[1]: Total bytes: 12257280
    flashfs[1]: Bytes used: 1024
    flashfs[1]: Bytes available: 12256256
    flashfs[1]: flashfs fsck took 0 seconds.
    Base Ethernet MAC address: d4:6d:50:f9:eb:00
    Boot CMD: 'boot  flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx;flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx'
    Loading "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"...########################
    File "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx" uncompressed and installed, entry point: 0x1003000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 15-Aug-14 12:27 by prod_rel_team
    Antigua Board Pre-Pilot
    40MB format
    Tide XL MB - 40MB of flash
    Initializing flashfs...
    flashfs[2]: 13 files, 2 directories
    flashfs[2]: 0 orphaned files, 0 orphaned directories
    flashfs[2]: Total bytes: 40900608
    flashfs[2]: Bytes used: 6153216
    flashfs[2]: Bytes available: 34747392
    flashfs[2]: flashfs fsck took 11 seconds.
    flashfs[2]: Initialization complete.
    flashfs[3]: 0 files, 1 directories
    flashfs[3]: 0 orphaned files, 0 orphaned directories
    flashfs[3]: Total bytes: 11999232
    flashfs[3]: Bytes used: 1024
    flashfs[3]: Bytes available: 11998208
    flashfs[3]: flashfs fsck took 0 seconds.
    flashfs[3]: Initialization complete....done Initializing flashfs.
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP2702E-C-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FGL1849XBEM
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.72.236
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: D4:6D:50:F9:EB:00
    Part Number                          : 73-15823-03
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC18474C56
    Top Assembly Part Number             : 800-41175-02
    Top Assembly Serial Number           : FGL1849XBEM
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP2702E-C-K9
    % Please define a domain-name first.
    ipv6 enable
      ^
    % Invalid input detected at '^' marker.
    ipv6 address autoconfig
      ^
    % Invalid input detected at '^' marker.
    ipv6 address dhcp
      ^
    % Invalid input detected at '^' marker.
    Press RETURN to get started!
    *Mar  1 00:00:13.071: APAVC: Initial WLAN Buffers Given to System is  2500
    *Mar  1 00:00:13.119: APAVC:  WlanPAKs 42878 RadioPaks  42270
    *Mar  1 00:00:13.119: Starting Ethernet promiscuous mode
    *Mar  1 00:00:13.127: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    *Mar  1 00:00:15.119: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:15.119: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
    *Mar  1 00:00:15.259: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 15-Aug-14 12:27 by prod_rel_team
    *Mar  1 00:00:15.295: %CDP_PD-4-POWER_OK: Full power - HIGH_POWER inline power source
    *Mar  1 00:00:15.303: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    lwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:15.443: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:16.287: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:20.083: DPAA Initialization Complete
    *Mar  1 00:00:20.083: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:21.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:23.083: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:24.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Mar  1 00:00:27.291: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:00:28.291: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:29.259: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.201.1.184, mask 255.255.255.0, hostname APd46d.50f9.eb00
    bridge-group 1 source-learning
                    ^
    % Invalid input detected at '^' marker.
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:00:34.123: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    %Error opening flash:/capwap-saved-config (No such file or directory)
    APd46d.50f9.eb00#sh version
    Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 15-Aug-14 12:27 by prod_rel_team
    ROM: Bootstrap program is C2700 boot loader
    BOOTLDR: C2700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB5m, RELEASE SOFTWARE (fc2)
    APd46d.50f9.eb00 uptime is 4 minutes
    System returned to ROM by power-on
    System image file is "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"
    cisco AIR-CAP2702E-C-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FGL1849XBEM
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.72.236
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: D4:6D:50:F9:EB:00
    Part Number                          : 73-15823-03
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC18474C56
    Top Assembly Part Number             : 800-41175-02
    Top Assembly Serial Number           : FGL1849XBEM
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP2702E-C-K9
    Configuration register is 0xF
    ================
    APd46d.50f9.eb00#show ip interface brief
    Interface                  IP-Address      OK? Method Status                Protocol
    BVI1                       10.201.1.184    YES DHCP   up                    up  
    GigabitEthernet0           unassigned      NO  unset  up                    up  
    GigabitEthernet1           unassigned      NO  unset  up                    down
    ===============
    (WiSM-slot4-1) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.6.130.0
    Bootloader Version............................... 1.0.16
    Field Recovery Image Version..................... 7.0.43.32
    Firmware Version................................. FPGA 1.6, Env 0.0, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... WISM2
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1293
    Redundancy Mode.................................. Disabled
    IP Address....................................... 10.201.255.250
    Last Reset....................................... Software reset
    System Up Time................................... 1 days 16 hrs 59 mins 28 secs
    System Timezone Location......................... (GMT +8:00) HongKong, Bejing, Chongquing
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... MY  - Malaysia
    still got log:
    Not in Bound state.
    *Mar  1 02:59:49.139: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 02:59:52.211: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.201.1.184, mask 255.255.255.0, hostname APd46d.50f9.eb00
    Not in Bound state.
    *Mar  1 03:00:45.639: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 03:00:48.711: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.201.1.184, mask 255.255.255.0, hostname APd46d.50f9.eb00

    Hello
    we had this problem too. I've figured out that the AP's which came factory preloaded with the
    LWAPP image version
    PRE { font-family: "Liberation Serif",serif; }P { margin-bottom: 0.08in; }
    8.0.72.236 and 15.3(3) JA (without 1)
    Version 15.3(3)JA
    LWAPP image version 8.0.72.236
    remained stuck on
    *Mar 1 00:09:24.639: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar 1 00:09:28.735: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.0.60, mask 255.255.255.0, hostname AP881d.fcaf.a71c
    Not in Bound state.
    *Mar 1 00:10:21.139: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.######### ######### ip IP information
    In our case we wanted to use the DNS Entry CISCO-CAPWAP-CONTROLLER.domain.name to discover the controller. As older APs (1240) were able to connect I tried with the recovery image (downloaded on Support)
    15.3(3)JA1 containing
    PRE { font-family: "Liberation Serif",serif; }P { margin-bottom: 0.08in; }
    Version Suffix: k9w8-.153-3.JA1 8.0.110.0
    Image Name: ap3g2-k9w8-mx.153-3.JA1
    Version Directory: ap3g2-k9w8-mx.153-3.JA1
    Ios Image Size: 11407872
    Total Image Size: 13496832
    Image Feature: WIRELESS LAN|LWAPP
    Image Family: AP3G2
    Wireless Switch Management Version: 8.0.110.0
    with this image the AP could join the Controller via DNS.
    So If you have an AP preloaded with Image 15.3.JA (without 1) try this:
    ping CISCO-CAPWAP-CONTROLLER.localdomain  as stated by mykhuzaimi above
    OR
    capwap ap controller ip address <IP-address> as stated by mykhuzaim above
    set option 43
    Load image ap3g2-rcvk9w8-tar.153-3.JA1.tar
    Unfortunately all workaround require manual interventions......
    Saluti Mauro

  • WiSM2 WLC 7.2 Maximum Allowed Clients under Global Parameters 802.11a/n b/g/n

    Hello everyone,
    Just loaded the 7.2.103.0 software onto the brand new WiSM2. Going throught the options and have found that under the global parameters for 802.11a/n, 802.11b/g/n radios is now the "Maximum Allowed Clients" option. The allowed setting is from 1 - 200 clients.
    Does that mean only 200 clients will be allowed to associate to the WLC on that radio at a maximum?
    Doesn't seems to make sense... I have the 500 AP license on this WiSM2... I know this option used to be an optional setting under a WLAN in previous releases.
    Any ideas?
    Regards,
    Sasha.

    Does that mean only 200 clients will be allowed to associate to the WLC on that radio at a maximum?
    As what Scott has responded, this means 200 clients per WAP.
    If you do exceed 200 clients per WAP (or whatever value you put in there) the clients will just get a nag and the system will let you in eventually.

  • WISM1 (WLC 6.0.182) to WISM2 (WLC 7.2.115.1) migration

    Hi all,
    I plan to replace 2 x WISM1 (WLC 6.0.182) by 2 x WISM2 (WLC 7.2.115.1). One WISM in each Catalyst 6500. I am sorry it is a little long but I have no lab and I need your advice.
    Summarized migration plan is the following :
    Upgrade of the 4 WLC (WISM1)  from 6.0.182 to 7.0.240
    AP pre-download from the 4 WLC (WISM1)
    Transfert WLC 7.0.240 image to the 4 WLC (last compatible version)
    Transfert WLC 7.0.240 image from the 4 WLC to AP and swap AP primary and secondary image
    So, AP primary image is 7.0.240, AP secondary image is 6.0.182
    Scheduled reboot of the 4 WLC
    So, 4 WLC (WISM1) and AP are running WLC 7.0.240
    Move AP from the 2 WLC of the1st WISM1 to the 2 WLC of 2sd WISM1 Swap AP primary and secondary controller with NCS
    Backup the configuration file 
    of one WLC of the 1st WISM1
    of one WLC of the 2st WISM1
    Replace the 1st WISM1 by one WISM2
    WISM2 upgrade from the current WLC version to 7.0.240
    Import the saved configuration file (WISM1) to WISM2 (7.0.240)
    Check the configuration via HTTPS
    Move AP from the 2 WLC of the 2sd WISM1 to the 1st WISM2 Swap AP primary and secondary controller with NCS
    Replace the 2sd WISM1 by one WISM2
    WISM2 upgrade from the current WLC version to 7.0.240
    Import the saved configuration file (WISM1) to WISM2 (7.0.240)
    Check the configuration via HTTPS
    Upgrade WISM2 from 7.0.240 to 7.2.115.1
    AP pre-download etc.
    etc.
    Please, what do you think about this migration plan ?
    Do you have a better/simplier solution ?
    Thanks

    Also  you would enable Authorize MIC APs against  auth-list to avoid AP's  fallback to the WiSM1. So, if I understand you, it would be enable on  WISM1. This way AP's trying to fallback to the WISM1 will be refused and  reconnect to the WISM2 that's right ?
    Yes... this will prevent access point from joining the WiSM1... AP's that are already on WiSM1 will stay, it just prevents any AP's that has already been migrated to WiSM2 to fail to WiSM1.
    How  can I get the configuration from WiSM1 to the WiSM2 ?
    Well you would backup your config and open it up in a text editor... then you would edit the file, by changing the hostname and ip address, etc.  Make sure you have a trailing space at the end of each command that you change.  This is important or else the config will not take.  Also you will have to edit the password for the management since it is encrypted in the backup config.  replace it with:
    config mgmtuser password
    Save the config and do a restore on the WiSM2 and verify that the setting are okay prior to moving all the ap's over.  I would move one to test your wlans and make sure its fine before moving more.
    Thanks,
    Scott
    Help out other by using the rating system and marking answered questions as "Answered"

  • Unable to get access to wism2

    Hello,
    I have next issue: 
    When i was trying to configure redundancy, i lost access to wism2 module. When i ping service port, it reply me, but i unable to get access via "session slot proc".
    some brief information:
    cisco WS-C6509-E
    SN-1#sh module
    Mod Ports Card Type                              Model              Serial No.
      2    4  WiSM 2 WLAN Service Module             WS-SVC-WISM2-K9    SAL1739DEGF
      5    5  Supervisor Engine 2T 10GE w/ CTS (Acti VS-SUP2T-10G       SAL1739D9EL
    SN-1#sh run | i wism
    wism service-vlan 222
    wism module 2 controller 1 allowed-vlan 1-1001,1006-4094
    SN-1#sh wism module 2 controller 1 status
    WiSM Controller 1 in Slot 2 configured with auto-lag
    Operational Status of the Controller : Oper-Up
    Service VLAN                         : 222
    Service Port                         : 3
    Service Port Mac Address             : 6c20.562c.5a61
    Service IP Address                   : 192.168.1.101
    Management IP Address                : 10.32.252.21
    Software Version                     : 7.5.102.0
    Port Channel Number                  : 547
    Allowed-vlan list                    : 1-1001,1006-4094
    Native VLAN ID                       : 1
    WCP Keep Alive Missed                : 0
    any idea?

    Also, a have found a difference between second wism2 module
    SN-1(config)#do sh wism module 2 cont 1 sta
    WiSM Controller 1 in Slot 2 configured with auto-lag
    Operational Status of the Controller : Oper-Up
    Service VLAN                         : 999
    Service Port                         : 3
    Service Port Mac Address             : 6c20.562c.5a61
    Service IP Address                   : 192.168.1.101
    Management IP Address                : 10.32.252.21
    Software Version                     : 7.5.102.0
    Port Channel Number                  : 547
    Allowed-vlan list                    : 1-1001,1006-4094
    Native VLAN ID                       : 1
    WCP Keep Alive Missed                : 0
    SN-2#sh wism module 2 controller 1 status
    WiSM Controller 1 in Slot 2 configured with auto-lag
    Operational Status of the Controller : Oper-Up
    Service VLAN                         : 999
    Service Port                         : 3
    Service Port Mac Address             : 6c20.562c.4b61
    Service IP Address                   : 192.168.1.102
    Management IP Address                : 10.32.252.12
    Software Version                     : 7.5.102.0
    Port Channel Number                  : 547
    Allowed-vlan list                    : 1-1000,1006-4094
    WCP Keep Alive Missed                : 0
    As you can see there is no native vlan on working wism and i cant turn off it on unavailable wism.

  • AP SSO WISM2 WLC 7.4.121

    HI everyone,
    I'm currently doing a proof of concept on the AP SSO feature running on WLC 7.4.121.
    The first thing I would like be sure is that client SSO is not avalaible in 7.4.X release, i need to upgarde to 7.5.X, Am I right ?
    The second thing I would like to share and investigate with you is about AP SSO not currently working in my topology.
    I have 2 seperate C6500 (SUP720-3B) switches with 1 WISM2 in each and both switches interconnected trough a 10G port.
    I enable AP SSO on both WLC that synchronize themselves trough the 10G port on a special redundancy VLAN.
    They both synchronize, and everything is working (both AP database on primary and standby WLC).
    What I can't understand is when forcing switchover on the primary (redundancy force-switchover command), the fallback is doing great to the standby WLC but the AP still get into CAPWAP DISCOVER state because of a timeout with the following logging message
    *Feb 14 15:36:37.727: %CAPWAP-3-ERRORLOG: Sequence number (0) mismatch in request messageDeleting clients for centrally switched wlan 1Deleting clients for centrally switched wlan 1Sending hreap clients to wlc on HA eventAP1cdf.0f66.90b4#% Cannot enable CDP on this interface, since CDP is not running% Cannot enable CDP on this interface, since CDP is not running., 5)14 15:37:22.934: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(CAPWAP_WTP_EVENT_REQUEST*Feb 14 15:37:22.934: %CAPWAP-3-ERRORLOG: GOING BACK TO DISCOVER MODE
    So the SSID is unavalaible for a certain period of time as it would be with N+1 redundancy.
    I also saw that some documentation said that tle WLC needs to be run on a VSS (
    http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113681-high-availability-dg-00.html) and some other say the contrary (http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1130-ag-series/qa_c67-714540.html)
    Did you manage to get AP SSO working and did you ever have this issue ?
    Thank for you help !

    HI Max,
    The first thing I would like be sure is that client SSO is not avalaible in 7.4.X release, i need to upgarde to 7.5.X, Am I right ?The second thing I would like to share and investigate with you is about AP SSO not currently working in my topology.
    Yes you need 7.5 version on WLC for Client SSO.
    I never seen this tiype of error, You must contatc TAC and tell them about this issue.
    Regards
    Dont forget to rate helpful posts

  • Wism2 in High Availability - FUS Upgrade

    Hello all,
    what is the procedure to be followed when upgrading the FUS on a WISM-2 in HA cluster?
    Is it the same procedure that applies when upgrading the wism's code in HA?
    Thank you
    Edited:
    The procedure is exactly the same as upgrading. First upgrade the image and then FUS.make sure that you are connected using console connection and definitely perform this within a maintenance window of at least 1 hour. 

    Hi,
    Thanks for sharing this info.
    Snipped from this guide also explains how its done:
    https://supportforums.cisco.com/discussion/12190806/wism2-high-availability-fus-upgrade
    The FUS image can be upgraded while the controllers have HA enabled. The secondary controller will 
    get upgraded just like it does when upgrading the regular code. However, when you initiate the reboot 
    on the primary controller both controllers will be unreachable until the FUS upgrade completes on both 
    the active and the standby in the HA pair. This process will take around 30 to 40 minutes to complete 
    just like in a non-HA FUS upgrade.

  • Why is the WiSM2 not recomended in the Sup slots?

    I have a situation where a customer doesn't have the required power units installed in theior 6500 for me to provision a WiSM2.
    They use a VSS paiur with a single Sup720 in each. They have no intention of adding a second Sup to each chassis.
    I need to justify why they can't use slot 6 (which has power reserverd) if I am to get them to upgrade the PSU's. The documentation I've found says it is supported but not recomended. Does anyone know of any cast iron reason why this is not recomended.
    Cheers in advance
    Rhodri

    WiSM2 Power Requirements
    http://www.cisco.com/en/US/docs/wireless/module/wism2/installation/note/WiSM_2.html#wp73014
    WiSM2, Initial System Configuration with Sup 720
    http://www.cisco.com/en/US/products/hw/modules/ps2706/products_tech_note09186a0080bb2500.shtml#init-syst
    Configuring Sup720 or 2T and WiSM-2  communication in a VSS mode
    http://www.cisco.com/en/US/products/hw/modules/ps2706/products_tech_note09186a0080bb2500.shtml#t6

  • Whats the difference between the module WS-SVC-WISM2-1-K9(=) and WS-SVC-WISM2-HA-K9

    whats the difference between the module WS-SVC-WISM2-1-K9(=) and WS-SVC-WISM2-HA-K9 ?
    and difference betwenn WS-SVC-WISM2-HA-K9 and WS-SVC-WISM2HA-K9= ?
    Thanks.
    Reference:
    http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/relevant-interfaces-and-modules.html#aism

    Hey Gary,
    Please refrain from double posting the same subject matter.
    https://supportforums.cisco.com/message/3353771#3353771

  • WISM2 in Maintenance mode

    After enable HA, both WISM2 modules are stay in Maintanance mode.
    How can I undo this state.

    That is a known bug. Have you tried power cycling the WiSM2 modules? You have to maybe shut one down or both to get it out of maintenance mode. I know you have to remove AP SSO also and then re-enable that again. There isn't a good way to do it without powering down the WiSM2.
    Sent from Cisco Technical Support iPhone App

  • WiSM2 upgrade and HA

    hello, experts!!!
    seeking advise....
    wism2 and wism2-HA with code 7.3
    should i upgrade to 8.0 prior to HA config?
    thanks in advance!

    hmmm... bootstrap and firmware...
    firmware upgrade to 8.0 MR1 i can do...
    but bootstrap upgrade to 1.9.0., no idea...:( any links with procedure? we are talkin' about bootstrap for the WiSM2, right?
    the download page for WiSM2 does not seem to have any 'bootstrap' for download.
    Thanks!

  • Unable to access WEB UI of WiSM2

    Bear with me as this is my first install of a 6500 and WiSM module.
    The backgroud is that we are small, but management used to be in networking and basically forced the the purchase of a 6509E.  Most of my experience is with 3560X and 2950 switches.
    I have followed the basic deployment guide here:http://www.cisco.com/c/en/us/support/docs/interfaces-modules/catalyst-6500-series-7600-series-wireless-services-module-wism/112968-wism2-deploy-guide-00.html.  My problem is that I have a flat network (see why I didn't want a 6500) so the management network and the production network is on VLAN 1.  Yes I know how bad this is, but apparently wireless is more important than adhering to good security practices.
    My problem is I am unable to access the Web UI of the controller.  I am however able to ping the address for the management IP.  I will give as much output as I can think would be helpful right now (and more if needed), but any assistance I can get would be appreciated.
    #show module
    Mod Ports Card Type                              Model              Serial No.
      2    4  WiSM 2 WLAN Service Module             WS-SVC-WISM2-K9    SAL172579DM
      6    5  Supervisor Engine 2T 10GE w/ CTS (Acti VS-SUP2T-10G       SAL1706YCQJ
    Mod MAC addresses                       Hw    Fw           Sw           Status
      2  30f7.0d0b.9820 to 30f7.0d0b.982f   1.1   12.2(18r)S1  15.1(1)SY1   Ok
      6  ccef.4838.97d5 to ccef.4838.97dc   1.4   12.2(50r)SYS 15.1(1)SY1   Ok
    Mod  Sub-Module                  Model              Serial       Hw     Status
      6  Policy Feature Card 4       VS-F6K-PFC4        SAL17299W2L  2.1    Ok
      6  CPU Daughterboard           VS-F6K-MSFC5       SAL1706YBTQ  1.5    Ok
    Mod  Online Diag Status
      2  Pass
      6  Pass
    #sh wism module 2 controller 1 st
    WiSM Controller 1 in Slot 2 configured with auto-lag
    Operational Status of the Controller : Oper-Up
    Service VLAN                         : 50
    Service Port                         : 3
    Service Port Mac Address             : 6c20.562c.2c61
    Service IP Address                   : 192.168.2.51
    Management IP Address                : 40.96.0.2
    Software Version                     : 7.0.116.0
    Port Channel Number                  : 403
    Allowed-vlan list                    : 1
    Native VLAN ID                       : 1
    WCP Keep Alive Missed                : 0
    #do sh wism st
    Service Vlan : 50, Service IP Subnet : 192.168.2.1/255.255.254.0
          WLAN
    Slot  Controller  Service IP       Management IP    SW Version    Controller Type    Status
    ----+-----------+----------------+----------------+------------+------------------+---------------
    2     1           192.168.2.51     40.96.0.2        7.0.116.0    WS-SVC-WISM-2-K9   Oper-Up
    HQR1#sh ip int brief
    Interface              IP-Address      OK? Method Status                Protocol
    TenGigabitEthernet2/1  unassigned      YES unset  up                    up
    TenGigabitEthernet2/2  unassigned      YES unset  down                  down
    GigabitEthernet2/3     unassigned      YES unset  up                    up
    GigabitEthernet2/4     unassigned      YES unset  administratively down down
    GigabitEthernet6/1     unassigned      YES unset  up                    up
    GigabitEthernet6/2     unassigned      YES unset  down                  down
    GigabitEthernet6/3     unassigned      YES unset  down                  down
    TenGigabitEthernet6/4  unassigned      YES NVRAM  administratively down down
    TenGigabitEthernet6/5  unassigned      YES NVRAM  administratively down down
    Port-channel403        unassigned      YES unset  up                    up
    Vlan1                  40.96.0.1       YES NVRAM  up                    up
    Vlan50                 192.168.2.1     YES NVRAM  up                    up

    Well I feel stupid, apparrently, either by default or by my commands "Web mode" and Secure Web Mode" was disabled.  after enabling, it works.

  • Prime infrastructure 2, wism2 Lrad Audit

    Hi,
    Im abit lost to what the Audit is showing.
    When I audit my 2 Wism2 blades from Primeinfrastructure 2 I get ALOT of rows with:
    (Type)Configuration Name                               Audit Status                            Attribute     PI Value   Controller Value
    (LradIfDot11nDual) 34:a8:4e:4e:e2:10/0/0      Not present in controller             -                -                        -
    The only thing that is changing between the messages is the mac text after the (Lrad...).
    Even if I refresh config from the Wism2 I still have all rows left when doing another audit.
    But When I audit my 5 5508 WLC I dont have the missmatch.
    Both the Wism2's and 5508 should have the same config.
    I can see that the Audit say that its in the PI and missing on the controller, but the value i "-" everywhere so what does it do, where do I enable or disable the setting.
    Im dont want to restore PI's values untli I know what it is that Im restoring onto the Wism2.
    Any help or insigt to what it is would be gratefully appreciated.
    //Anders

    Thanks for your input.
    I looked up the AP via one of the macs in the missconfig (the mac is only viewable when I went into the info on the AP, its not displayed in the summary when searching for it) .
    Noticed that it had lost its templates, ap groups and moved to another controller. Just the default setting was active. Applied the correct templates and moved it to the wism2 blade.
    Now the row is gone from the audit :)
    Even though its not the identical, your solution helped me find my solution. I will mark your answer as correct and people reading have 2 answers :)

Maybe you are looking for