topic Re: Prevent Access Points from joining other WLCs in Wireless

Prevent Access Points from joining other WLCs

danibqb01 — Mon, 05 Jul 2021 19:20:01 GMT

I have a pair of 5508-HA-SSO, when I need to restart both simultaneously (Active and Standby), the Access Points end up associating in other Wireless Controllers that we have on the network with other software versions. There are Mobility Groups configured between the WLCs.

Is there any configuration on the Wireless Controller that I can enable or disable to prevent this from happening? I want Access Points to wait for the 5508-HA-SSO pair to be available without having to be associated with other WLCs.

Re: Prevent Access Points from joining other WLCs

Scott Fella — Mon, 27 Jul 2020 19:33:27 GMT

Well in that design, you should not have setup mobility or any dhcp option 43 or dns resolution that would make ap’s find another controller. What you can do is define aaa ap policy that only allows certain ap’s using their Mac address to join. This would mean you have to define all the Mac address to the appropriate controller. I think you need to clean up the mobility first and then look at how the ap’s might be discovering the other controllers.

Re: Prevent Access Points from joining other WLCs

danibqb01 — Mon, 27 Jul 2020 21:35:12 GMT

I have some SSIDs configured with mobility anchors.

The option of adding the APs mac-address in "AP Policies" for authorization I found interesting, perhaps for the design I have today, this would be the best solution.

Re: Prevent Access Points from joining other WLCs

Scott Fella — Mon, 27 Jul 2020 22:11:12 GMT

It’s not bad unless you have to manage a large list and having to deal with RMA’s or migration for example. You can always build a script or excel spreadsheet that you can import your show ap summary and then build your cli commands.

Re: Prevent Access Points from joining other WLCs

danibqb01 — Tue, 28 Jul 2020 17:07:09 GMT

Thanks a lot for the help!

Re: Prevent Access Points from joining other WLCs

Scott Fella — Tue, 28 Jul 2020 18:01:12 GMT

No problem.