topic Re: Issue with redundancy in Wireless

Issue with redundancy

Liad Dayan — Sun, 04 Jul 2021 04:23:03 GMT

Hi guys,

I have 2 controllers.

1)5508 -LDPE

2)4404- normal(DATA+WPS)

---------

They both have the same 7.0.220.0 software version.

My Ap`s got Ip address of: 192.168.30.x/24

My Managment AP of 4404: 10.1.44.17

My Management of the 5508: 10.1.44.116

Now i got 87 AP connected to the 5508 controller. When i shutdown the 5508 my ap`s dont move to the 4402.

DTLS_CLIENT_ERROR: ../dtls/dtls_connection_db.c:2013 Max retransmission count reached!

%DTLS-3-HANDSHAKE_RETRANSMIT: Max retransmit count for 10.1.44.17 is reached.

Somone know what could be the reason?

Regards,

Re: Issue with redundancy

Scott Fella — Sun, 15 Jan 2012 17:25:07 GMT

It can be because of the lDPE code you have on your 5508 WLC. That encrypts DTLS payload differently and that is what you are seeing.

I'm also guessing that the wlc are in the same mobility group and that is us and working.

Thanks,

Scott Fella

Sent from my iPhone

Issue with redundancy

George Stefanick — Sun, 15 Jan 2012 17:25:42 GMT

Hello,

I will venture to say its becuase of the LDPE code. The APs when connected to the 5508 are using the special "LDPE" code which the 4400 doesnt support.

I have no experince with the LDPE as I dont know anyone who uses it. Perhaps one of the other guys here can comment further.

Issue with redundancy

George Stefanick — Sun, 15 Jan 2012 17:28:02 GMT

Althougt, I would think when the 5508 fails the APs should move over to the 4400 but they would need to download the 4400 version of the 7.0.220.0 code. So it wouldnt be a clean cut over ..

@ Scott -- LOL "that its U.S".. The last few post about country codes have been pretty common the last week or so !

Issue with redundancy

Liad Dayan — Sun, 15 Jan 2012 17:39:25 GMT

Hello,

when i use another subnet 10.x.x.x and shutting down the 5508 the ap moves to the second controller.

when i use 192.168.41.40 and shutting down the 5508 the ap isn't moving to the other controller and give me that error.

the controller are on the same subnet.

Regards

Re: Issue with redundancy

Scott Fella — Sun, 15 Jan 2012 17:53:39 GMT

You have some sort of acl or a FW between the different networks? If you say that the AP's join the 4404 when the AP's are in a 10.x.x.x then it should fail over. I'm guessing the 192.x.x.x is your dmz?

Thanks,

Scott Fella

Sent from my iPhone

Re: Issue with redundancy

Scott Fella — Sun, 15 Jan 2012 17:54:36 GMT

@George... It was like one post after the other on country codes! I actually started reading up on the different part numbers:)

Thanks,

Scott Fella

Sent from my iPhone

Re: Issue with redundancy

Stephen Rodriguez — Sun, 15 Jan 2012 20:22:20 GMT

@george yeah not a lot of ldpe in the US. IIRC correctly that is a specific code for European countries. Supposed to be similar to the DTLS license in e US.

Sent from Cisco Technical Support iPad App

Re: Issue with redundancy

Liad Dayan — Mon, 16 Jan 2012 08:20:51 GMT

We do have firewall between those subnets. - Checkpoint firewall.

yestarday we did permit to all traffic between those networks (permit any any).

and still he didnt move from one controller to onther.

You guys have any other suggestions?

Regards,

Re: Issue with redundancy

Scott Fella — Mon, 16 Jan 2012 10:25:36 GMT

It seems it is still something with the FW. When you have the AP in the inside, it works fine, so it point to something on the network and not the wireless. I would take a look at the logs at the FW to make sure nothing is getting dropped.

Thanks,

Scott Fella

Sent from my iPhone