topic Hello All,We bought a WLC HA in Wireless

Cisco high availability -- sso

Shawn Purdy — Sun, 04 Jul 2021 08:01:49 GMT

Hello all,

I'm having a grand ole time with the new Cisco HA setup. When I purchased my HA setup it had 7.3 code on it. When I configured it in our lab and tested HA it worked fine. When moved it to production we added about 7 AP's on it and tested it again. When we brought down the primary controller it switched over to the secondary controller with no problem. However the AP's did not move over. After researching this problem (via this message board and many others), it was recommended that I move off of 7.3 and to go to 7.4. When I upgraded both controller to 7.4 it broke the HA link between the primary and secondary controller. The primary controller works but the secondary will not pair back up with the primary controller. I opened a TAC case and the only suggestion was to blow away the config and start over.. Are there any other suggestions besides that?

Sent from Cisco Technical Support iPad App

Cisco high availability -- sso

Shawn Purdy — Mon, 07 Oct 2013 18:56:53 GMT

Here is the error message that I get when I boot up the secondary controller. I've underlined the error i get when it tries to peer up to the primary controller.

Fastpath CPU0.04: Core 4 Initialization and FIPS self-test: ok
Fastpath CPU0.05: Core 5 Initialization and FIPS self-test: ok
Fastpath CPU0.06: Core 6 Initialization and FIPS self-test: ok
Fastpath CPU0.07: Core 7 Initialization and FIPS self-test: ok
Fastpath CPU0.08: Core 8 Initialization and FIPS self-test: ok
Fastpath CPU0.09: Core 9 Initialization and FIPS self-test: ok
Starting Switching Services: ok
Starting QoS Services: ok
Starting Policy Manager: ok
Starting Data Transport Link Layer: ok
Starting Access Control List Services: ok
Starting System Interfaces: ok
Starting Client Troubleshooting Service: ok
Starting Management Frame Protection: ok
Starting Certificate Database: ok
Starting VPN Services: ok
Starting Licensing Services: LICENSE_PRINT:cnfgrCslLicense:ERROR:license request Failed for units: 500 rc:User failed to accept EULA
ok
Starting Redundancy: Starting Peer Search Timer of 120 seconds

Found the Peer. Starting Role Determination...

Heartbeat Category: Standby reload.
Restarting system ..
^C

Updating license storage ... Done.
Restarting system.

WLCNG Boot Loader Version 1.0.1 (Built on Apr 11 2009 at 13:32:33 by cisco)
Board Revision 1.3 (SN: FCW1717L0NM, Type: AIR-CT5508-K9) (G)

Verifying boot loader integrity... OK.

OCTEON CN5645-NSP pass 2.1, Core clock: 600 MHz, DDR clock: 330 MHz (660 Mhz data rate)
FPGA Revision 1.7
Env FW Revision 1.8
USB Console Revision 2.2
DRAM: 1024 MB
Flash: 32 MB
Clearing DRAM........ done
Network: octeth0', octeth1
' - Active interface
E - Environment MAC address override
CF Bus 0 (IDE): OK
IDE device 0:
- Model: STEC M2T CF 1.0.0 Firm: K1367MIX Ser#: STIM2Q5413071071501
- Type: Hard Disk
- Capacity: 977.4 MB = 0.9 GB (2001888 x 512)

Press now to access the Boot Menu...

Loading primary image (7.4.110.0)
100%

34513219 bytes read
Launching...
init started: BusyBox v1.6.0 (2010-05-13 17:50:10 EDT) multi-call binary
starting pid 821, tty '': '/etc/init.d/rcS'

Set PLX switch MPS settings .............!!!!!!!
Detecting Hardware ...
set smp_affinity for irq 48
003f
DP from CGE5.0 ...
starting pid 1067, tty '/dev/ttyS0': '/usr/bin/gettyOrMwar'
Setting up ZVM
Exporting LD_LIBRARY_PATH

Cryptographic library self-test....passed!
XML config selected
Validating XML configurat
Read HA Config before validation
octeon_device_init: found 1 DPs
readCPUConfigData: cardid 0x6070001
Cisco is a trademark of Cisco Systems, Inc.
Software Copyright Cisco Systems, Inc. All rights reserved.

Cisco AireOS Version 7.4.110.0
Firmware Version FPGA 1.7, Env 1.8, USB console 2.2
Initializing OS Services: ok
Initializing Serial Services: ok
Initializing Network Services: ok
Initializing Licensing Services: ok

License daemon start initialization.....

License daemon running.....
Starting Statistics Service: ok
Starting ARP Services: ok
Starting Trap Manager: ok
Starting Network Interface Management Services: ok
Starting System Services: ok
Starting FIPS Features: ok : Not enabled
Starting Fastpath Hardware Acceleration: ok
Starting Fastpath Console redirect : ok
Starting Fastpath DP Heartbeat : ok
Fastpath CPU0.00: Starting Fastpath Application. SDK-1.8.0, build 269. Flags-[DUTY CYCLE] : ok
Fastpath CPU0.00: Initializing last packet received queue. Num of cores(10)
Fastpath CPU0.00: Init MBUF size: 1856, Subsequent MBUF size: 2040
Fastpath CPU0.00: Core 0 Initialization and FIPS self-test: ok
Fastpath CPU0.00: Initializing Timer...
Fastpath CPU0.00: Initializing Timer...done.
Fastpath CPU0.00: Initializing Timer...
Fastpath CPU0.00: Initializing NBAR AGING Timer...done.
Fastpath CPU0.01: Core 1 Initialization and FIPS self-test: ok
Fastpath CPU0.02: Core 2 Initialization and FIPS self-test: ok
Fastpath CPU0.03: Core 3 Initialization and FIPS self-test: ok
Fastpath CPU0.00: Received instruction to get link status
Fastpath CPU0.04: Core 4 Initialization and FIPS self-test: ok
Fastpath CPU0.05: Core 5 Initialization and FIPS self-test: ok
Fastpath CPU0.06: Core 6 Initialization and FIPS self-test: ok
Fastpath CPU0.07: Core 7 Initialization and FIPS self-test: ok
Fastpath CPU0.08: Core 8 Initialization and FIPS self-test: ok
Fastpath CPU0.09: Core 9 Initialization and FIPS self-test: ok
Starting Switching Services: ok
Starting QoS Services: ok
Starting Policy Manager: ok
Starting Data Transport Link Layer: ok
Starting Access Control List Services: ok
Starting System Interfaces: ok
Starting Client Troubleshooting Service: ok
Starting Management Frame Protection: ok
Starting Certificate Database: ok
Starting VPN Services: ok
Starting Licensing Services: LICENSE_PRINT:cnfgrCslLicense:ERROR:license request Failed for units: 500 rc:User failed to accept EULA
ok
Starting Redundancy: Starting Peer Search Timer of 120 seconds
^C

Redundancy Link is down. Entering maintenance mode to avoid network conflict.
Entering maintenance mode...
ok
Starting LWAPP: ok
Starting CAPWAP: ok
Starting LOCP: ok
Starting Security Services: ok
Starting Policy Manager: ok
Starting Authentication Engine: ok
Starting Mobility Management: ok
Starting AVC Services: ok
Starting Virtual AP Services: ok
Starting AireWave Director: ok
Starting Network Time Services: ok
Starting Cisco Discovery Protocol: ok
Starting Broadcast Services: ok
Starting Logging Services: ok
Starting DHCP Server: ok
Starting IDS Signature Manager: ok
Starting RFID Tag Tracking: ok
Starting RF Profiles: ok
Starting Power Supply and Fan Status Monitoring Service: ok
Starting Mesh Services: ok
Starting TSM: ok
Starting CIDS Services: ok
Starting Ethernet-over-IP: ok
Starting DTLS server: enabled in CAPWAP
Starting CleanAir: ok
Starting WIPS: ok
Starting SSHPM LSC PROV LIST: ok
Starting RRC Services: ok
Starting SXP Services: ok
Starting Alarm Services: ok
Starting FMC HS: ok
Starting IPv6 Services: ok
Starting Config Sync Manager : ok
Starting Hotspot Services: ok
Starting PMIP Services: ok
Starting Portal Server Services: ok
Starting mDNS Services: ok
Starting Management Services:
   Web Server:    CLI: ok
   Secure Web: ok
   License Agent: ok

Cisco high availability -- sso

Sandeep Choudhary — Tue, 08 Oct 2013 06:36:03 GMT

HI Shawn,

As per the logs:

Starting Licensing Services: LICENSE_PRINT:cnfgrCslLicense:ERROR:license request Failed for units: 500 rc:User failed to accept EULA

Means you did not accept the licence:

If you are prompted to accept the end-user license agreement (EULA), read and accept the terms of the agreement.

Typically, you are prompted to accept the EULA for evaluation, extension, and rehost licenses. The EULA is also required for permanent licenses, but it is accepted during license generation.

The main problem is : It is not able to start the licensing services.

So Even I feel you must blow away the config and start over.

Hope it helps.

Regards

Re: Cisco high availability -- sso

Shawn Purdy — Tue, 08 Oct 2013 13:05:46 GMT

Thanks for the response. I don't recall seeing that during the setup. Since this is the secondary controller and it doesn't have a license, where should I have seen that?

Sent from Cisco Technical Support iPad App

Re: Cisco high availability -- sso

Sandeep Choudhary — Tue, 08 Oct 2013 13:25:14 GMT

Hi Shawn,

Before activating the licence ,you must accept the EULA. If you didnt then I believe u must start from begining.

Just for refrence:

http://www.cisco.com/en/US/docs/ios-xml/ios/csa/command/csa-l1.html#wp2340844241

Regards

Re: Cisco high availability -- sso

Shawn Purdy — Wed, 09 Oct 2013 20:18:51 GMT

I found the problem here. According to Cisco the error message is a non issue. The following bug ID indicates the exact message I am getting and says that it is a cosmetic error and does not affect functionality.

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuf73280

As for the controllers not pairing up......simple fix. For some odd reason the actual physical interface was shutdown. Not sure how and why this happened, but for some reason I believe its related to the code upgrade. I've seen in the past that after a code upgrade the interface of the controller would get disabled.

Once I reenable the interface everything peered back up.

Thanks for the assistance.

Cisco high availability -- sso

pchinchk — Tue, 03 Dec 2013 04:33:03 GMT

worked for me. thanks Sandeep.

i had 5508 (7.4.110.0) in which the standby WLC was showing up this error and getting into maintenance mode.

broke HA and accepted the EULA.

Cisco high availability -- sso

luceroc — Wed, 08 Jan 2014 22:12:23 GMT

I had the same problem and the interfaces shut down administratively when you disable the HA configuration config redundancy mode disable. I did not consider that until I walked up to the WLC in the rack. Had been doing things from across the bench via GUI. Once I re enabled I happened to be using the service port but could have I guess from the CLI as well. Things began to reboot and do what I expected when configuring the AP-SSO. Thanks for the thread!!

Hello All,We bought a WLC HA

Marcelo Kiraly — Tue, 15 Apr 2014 18:44:59 GMT

Hello All,

We bought a WLC HA but the sku received is AIR-CT5508-K9 not a AIR-CT5508-HA-K9. That is right for you?

The HA controller was sent for you also AIR-CT5508-K9 like for us?

WLCNG Boot Loader Version 1.0.18 (Built on Oct 5 2012 at 00:04:18 by cisco)
Board Revision 1.3 (SN: FCWXXXXXX, Type: AIR-CT5508-K9) (G)

Thanks