Wlc ha question

hi all ,
our primary wlc has failed and we received a new one from rma.
Now If I set ha between the new wlc and existing one.will existing wlc push up configuration to new wlc (primary)?
release 7.4
thanks in advance

High Availability in Release 7.3 and 7.4
The new architecture for HA is for box-to-box redundancy. In other words, 1:1 where one WLC will be in an Active state and the second WLC will be in a Hot Standby state continuously monitoring the health of the Active WLC via a Redundant Port. Both the WLCs will share the same set of configurations including the IP address of the Management interface. The WLC in the Standby state does not need to be configured independently as the entire configuration (Bulk Configuration while boot up and Incremental Configuration in runtime) will be synced from the Active WLC to the Standby WLC via a Redundant Port. The AP's CAPWAP State (only APs which are in a run state) is also synced, and a mirror copy of the AP database is maintained on the Standby WLC. The APs do not go into the Discovery state when the Active WLC fails and the Standby WLC takes over the network's Active WLC.
There is no preempt functionality. When the previous Active WLC comes back, it will not take the role of the Active WLC, but will negotiate its state with the current Active WLC and transition to a Standby state. The Active and Standby decision is not an automated election process. The Active/Standby WLC is decided based on HA SKU (Manufacturing Ordered UDI) from release 7.3 onwards. A WLC with HA SKU UDI will always be the Standby WLC for the first time when it boots and pairs up with a WLC running a permanent count license. For existing WLCs having a permanent count license, the Active/Standby decision can be made based on manual configuration.
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html#pgfId-74573

Similar Messages

Centralized WLC Design Question

Dears,
In my scenario, i am designing CEntralized WLC deployment. I have 30 AP in Buidling X(200 Users) and 20 AP in Buidling Y(150 Users). I am planning to install HA WLC CLuster where Pimary & Secondary WLC will reside in physically different Data Centers A & B.
I have a wireless Design Question and i am not able to get clear answers. Please refer to the attached drawing and answer the following queries:
If Buidling X users want to talk to building Y Users, then how Control & Data Traffic flow will happen between Buidling X & Y. Would all the traffic will go to Primary WLC from Bldg X APs first and then it will be Re Routed back to Buidling Y APs? Can i achieve direct switching between Bldg X&Y APs without going toward WLC?
If Building X & Y Users want to access the internet, how would be traffic flow? Would the traffic from X&Y AP will go tunnel all the traffic towards WLC and then it will be routed to internet gateway?is it possible for Bldg X&Y AP to directly send traffic towards Internet Gateway without going to controllers?
I have planned to put WLC at physically different locations in different DC A & B. Is it recommended to have such a design? What would be the Failver traffic volume if Primary WLC goes down and secondary controller takes over?
My Reason to go for Centralized deployment is that i want to achieve Centralized Authentication with Local Switching. Please give your recommendations and feedback
Regards,
Rameez

If Buidling X users want to talk to building Y Users, then how Control & Data Traffic flow will happen between Buidling X & Y. Would all the traffic will go to Primary WLC from Bldg X APs first and then it will be Re Routed back to Buidling Y APs? Can i achieve direct switching between Bldg X&Y APs without going toward WLC?
Traffic flows to the WLC that is the primary for the AP's, then its routed over your network.
If Building X & Y Users want to access the Internet, how would be traffic flow? Would the traffic from X&Y AP will go tunnel all the traffic towards WLC and then it will be routed to Internet gateway?is it possible for Bldg X&Y AP to directly send traffic towards Internet Gateway without going to controllers?
The WLC isn't a router, so you would have to put the Internet traffic an a subnet and route.
I have planned to put WLC at physically different locations in different DC A & B. Is it recommended to have such a design? What would be the Failover traffic volume if Primary WLC goes down and secondary controller takes over?
Like I mentioned... earlier, the two HA WLC has to be on the same layer 2 subnet in order for you to use HA. The guide mentions an Ethernet cable to connect both the HA ports on the WLC.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

WLC license question

We have two 7510 WLC's and a bunch of AP's. I want to make sure I understand the license impact of what we are trying to do. Our AP's will not be up at all times and it's impossible to know when these AP's will be connected and booted up. They may be on for 2 days and then off for a month before booting up again. The question I have is once an AP registers to a WLC, is that license 'locked' and used regardless of whether the AP is up or not?

I agree with Steve and Vikas.
The WLC calculates the license for currently connected APs. The AP that joins the WLC consumes the 1 space in the WLC license once it is connected. Once it is disassociated you can simply bring another different AP and connect it.
Same way, if you have a license for 100 APs, it is possible that you connect 100 APs then remove them and bring different 100 APs and they should join without a prblem.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

WLC Redundancy Question

Hi Community,
I have one question regarding the redundancy feature for two WLC 2106. We have installed on a customer site 2 WLC's 2106 and 6 AP's. Primary and Backup WLC works fine. No the customer asks the question if there is a option to copy the guest access wlan user from the primary controller to the backup controller? The lobby user activates a new user on the primary controller and if the primary controller fails, then the user did not get access to the wlan guest network.
Any ideas?
Thanks for help.
Rene

Hi Jerry,
Mobility - it's used for client so that they can roam without any issue and one tunnle will be stablish between wlc-1 and wlc-2. if wlc-1 goes down the client will be local to the wlc-2 and if the guest user is not present on wlc-2 then it will not be able to access network.
HA for AP - primary, secondary are used to achieve this.
HA for WLC (WLC redundency) - suppose you have two WLCs if one goes down then second will start serving without any issue. For that master wlc will push all the config to second wlc and some other mechanism to achieve this. This functionality is not yet support.
Thannks

WLC Failover Question

Hi All
Can anyone give me a definitive answer to this question please?
If you are using a pair of wireless LAN controllers configured with primary and secondary controllers for the access points and the primary controller fails - do the access points reboot before associating to the secondary controller. I can't see why they would need to but documentation suggests they do.
Additionally, has anyone significantly reduced the failover time? If so, what is the lowest practical failover time. I know the actual failover time can be reduced to 3 seconds but I think that is likely to cause other problems.
Thanks guys.
Regards
Roger

As far I know, In this case the AP does not reboot, only changes its lwapp status to discovery and begins with the discovery proccess.
You can see in the AP if it is restarted; when it places registered in the second WLC, Wireless tab and select the AP affected; normaly in the first tab you can see bottom right the AP up time and the AP association time; if this AP has rebooted this value will close to 00:00.
Normaly I set the Ap heartbeat timeout to 5 seconds, I don´t know if is the best value and my failover time is bigger than your, I don´t know how critical are your network, but a prefer a higher heartbeat timeout to avoid unnecessary AP changes that spend more time.
Best Regards.

WLC DHCP question

Hi all
Is it possible to issue a static IP address to a user using the WLC's built-in DHCP server? Each time I connect to a different WLAN and then reconnect to the WLC WLAN, I get a different IP address, even though I've reconnected before the lease time for the IP is set to expire.
Our code version is 4.0.217.0, and the WLC is installed into a 2811.
Thanks

Anthony,
As fas as I am aware in your version of code - no. according to:-
http://www.cisco.com/en/US/docs/wireless/controller/4.0/configuration/guide/c40wlan.html#wp1108097
HTH.

WLC 2106 question

Hello,
What is the recomended way to connect 5 APs 1242 to a wlc 2106?
Connect directly the 5 APs to the wlc and use one port for the management interface and connection to the switch or to connect the APs to a switch and use one connection for the wlc?
Thanks in advance.

Depends on the AP.
One FastEthernet connection to the switch doens't "really" create a bottleneck. Your AP might. If you, say, you have 1130 or older then I'd say no significant bottleneck because the APs are also FastEthernet.
If you use the newer ones, like the 1250 and newer, which has GigEthernet and/or higher throughput (if you enable 802.11n) the yes. The switch AND the WLC 2100 are both the bottleneck.

WLC Desgin Question

Hallo toghether,
i plan to install a WLC 5508 controller with nearly 100 AP´s and 300 wireless clients.
so i need some information or best partice tipps for the pysical port configuration. If i have understood this right. all Traffic from tahe Clientinto the network
is capsulated in the LWAPP)/CAPWAP tunnel and is encapsulated in the WLC. is this correct. My plan is to use one physical Interface for Management and AP Controll. and i have to map 1 physical inteface for ecach SSID (Vlan). If all traffic which comes from the AP to the WLC (mangaement taffic and data traffic) is capsulated in the tunnel, the complete traffic pass the physical Interface from the Manaement Vlan ? is this correct? IF yes i think this could be a performance problem becaus all traffic from all ap´s must pass a 1GB Uplink for all traffic and the wlc forwards this traffic to the spciefied VLAN´s to the core switch? Can me help somebody to understand this better or give me some design tipp how it works better?
Thanks a lot

Hello Carsten,
You are right about the performance issue.
The solution of this (just like Rasika recommended) is to use Link Aggregatoin (LAG).
enabling LAG on WLC will make all WLC connected ports behave like one big port. It is idea is almost the same like etherchannels on switches (but it is not exactly the same).
you can read more about LAG here:
https://supportforums.cisco.com/docs/DOC-20587
The config guide also has some info about LAG.
HTH
Amjad
Rating useful replies is more useful than saying "Thank you"

WLC 4400 question

Hi
The scenario is as follows:
We deployed a WLAN with a WLC 4400 and several LWAPs. The main configuration include 2 SSID, one for guest access (internet and a limited access to internal resources) and one with complete access to the internal resources. For the "guest" SSID the access control is done trough an ACL placed in the core cat 6500 switch. This ACL blocks the access from "guests" to several subnets including the subnet where the WLC resides.
No one "guest" WLAN user can ping or access any host located in the subnet where the WLC is configured, but they can ping and access the WLC via https!!!
The goal is to block the acces to "guest" users to the WLC. And let the WLAN users with complet access to manage wirelessly the WLC.
Can this be done?
I know that the wireless administration can be enabled or disabled but it applies to all the WLAN users no just the "guest" users.
Any idea or suggestion is quite welcome
Roger

Hi Roger,
You can configure CPU ACL if you are running 4.0 release on your controller. In CPU ACL you can deny telnet as well as HTTP access from client subnet to the management ip address of the controller which will block the access of guest user to access the controller via web or cli and also you can block the icmp traffic from guest user subnet to the controller ip address.
You can configure acl from cli or web but to apply that acl to cpu you an do it via cli only.
HTH
Ankur
*Pls rate all helpfull post

WLC/WCS question...

I have inherited some minor admin tasks for one WCS and 4 WLC. The issue is that when onsite techs run reports it shows an AP down say in room 101. The real issue I think is that in room 101 the MAC address listed for that room in the WLC is not that same as the one listed in the WCS, how do these get updated?

Ok. When you say the mac addy is different do you mean the addy of the hardwire ethernet adapter or the radios? They will show as different based on the base address and then the radio base addresses. If non of those match then you have assigned the wrong AP to the maps section of the WCS. Verify the serial number as a quick way to make sure the right AP is in the right physical location. You can get it in the WCS and then compare it to the label on the actual AP in the room.

WLC easy question

Hi, Ive got a WLC and stupidly highlighted an AP and selected remove AP. how do I get it to register again withthe controller. WLC is version 7.0.116.0

Make sure on the Security | AAA | AP Policies tab that you don't have the last two checkbox enabled. By default, Accept Manufactured Installed Certificate (MIC) is the only one checked.
Sent from Cisco Technical Support iPhone App

WLC Upgrade question

Hi
one of the WLC 5500 series is running 6.0.199.4 can I upgrade directly to 7.4
appreicate feedback
Paul

HI Paul,
Go for 7.4.121.0 MD, it si very stable version(even cisco recommanded this).
Here is the link.
http://software.cisco.com/download/release.html?mdfid=282600534&flowid=7012&softwareid=280926587&release=7.6.120.0&relind=AVAILABLE&rellifecycle=ED&reltype=latest
Upgrade FUS:
via GUI:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_1_7_0_0.html#wp53877
Via CLI:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/fus_rn_OL-31390-01.html#wp43765
Regards
Dont forget to rate helpful posts

VMWare WLC setup question with dual VLAN at sites

Multisite in same town design.
VMWare WLC deployed at main site runs all remotes. (7 sites). Sites are around town and not on same campus. Flexconnect local deployed on Cisco 2702e APs. Setup for two SSID's, one for data connections, other for Cisco 7921g wireless phones. Each site has its own DHCP scope.
I tried to setup 2 seperate WLAN ID for each site however it does not like the reused SSID name. I do not want to have to setup 7 profiles on everyones laptop to go between buildings. Seen a post mentioning to use AP groups however the video link was removed so it went into a deadend.

Thanks Scott,
so what I had setup before was under each WLAN, was each the interfce pull down to the interface vlan. I have now changed that to management and setup AP groups, each with the site's data and voice vlan defined under the AP group WLAN tab. So instead of the multiple SSID listed, now only two are listed.
I will have to take my test AP out to one of the other sites and move it to one of the new AP groups but this appears to be working on my current group I am testing from.

WLC Design Questions

Looking for a "recommended" design.
Looking at a remote location that contains no Cisco switches or router. 5 AP's total. Seems kinda of pointless to setup a 4402 Controller for 5 AP's. What is the recommended REAP mode implementation (real world) for AP's? Other alternatives?

Hi,
be careful, you don't have infrastructure at the remote site ?
You can directly connect up to 3 APs to a 2006 controller. But I don't know, if you can use 1130/1240 APs because they are LWAPP-converted APs, so they only use L3-LWAPP. I think with L3-LWAPP there must be an L3-Link between AP and controller, but I am not sure. By the way POE is an extra, controller 2006 has no POE enabled Ports.

WLC CLI question...

From the CLI how can I look at the number of APs connected to it?
I think its (Cisco Controller) show>known ap summary
MAC Address State # APs # Clients Last Heard
But just wanted to verify this....
Thx

Hi Jimmy,
You should also use this command :)
show ap summary
Hope this helps!
Rob

Wlc ha question

Similar Messages

Maybe you are looking for