topic Re: WLC 9800 Flex APs won't go standalone on wan link failure in Wireless

WLC 9800 Flex APs won't go standalone on wan link failure

pallaruelo — Mon, 05 Jul 2021 18:57:30 GMT

Dear Community,

I've recently installed some 9800 WLCs for one of my customers. 1 central WLC cluster and some remote locations. All APs on remote locations are tagged with Flex profiles.

But it seems the APs won't turn standalone when there is a WAN failure on remote site. Wifi doesn't work.

In previous AireOS equipment (5508, 3504, etc..) it seems it was included.

Did I miss something when I configured Flex profile on the new 9800 WLC ? I think about the option "Flex Resilient" in Flex Profile, but infortunately there is no available documentation about this !!

Many thanks,

Franck.

Re: WLC 9800 Flex APs won't go standalone on wan link failure

Scott Fella — Mon, 20 Apr 2020 15:54:30 GMT

Have you followed this guide:

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213945-understand-flexconnect-on-9800-wireless.html#anc6

Re: WLC 9800 Flex APs won't go standalone on wan link failure

pallaruelo — Mon, 20 Apr 2020 16:14:01 GMT

Hi @Scott Fella

Yes I did. FlexConnect works fine. But not when the WAN link is down.

The feature "Flex Resilient" is not clearly explained. Maybe that's the solution !

Re: WLC 9800 Flex APs won't go standalone on wan link failure

Scott Fella — Mon, 20 Apr 2020 19:35:30 GMT

In FlexConnect local switching, the standalone mode is the same as AireOS. If this is not the case, you should open a TAC case.

Re: WLC 9800 Flex APs won't go standalone on wan link failure

p.lan — Tue, 04 Jan 2022 17:35:19 GMT

I saw that option and thought something similar, but it looks like "Flex Resilient" is referring to APs only in flex+bridge mode?

WLC-01(config-wireless-flex-profile)#?
  acl-policy           ACL policy description 
  arp-caching          enable arp-caching
  cts                  Enable/Disable cts features for all APs in this profile
--- Omitted --
  office-extend        Enables the OfficeExtend AP mode for a flexconnect AP
  predownload          enable predownload
  resilient            Enables/Disables Standalone mode in flex+bridge AP
  umbrella-profile     umbrella profile description
  vlan-name            Enter vlan name

I too can not find any additional documentation on that option.

Re: WLC 9800 Flex APs won't go standalone on wan link failure

glennnlxl — Wed, 06 Jul 2022 20:10:28 GMT

Did you manage to find a resolution? We're seeing a similar issue, in some cases the APs stop responding and require a reboot to reconnect after WAN /Connectivity to Controller is restored. (No DHCP on AP MGMT subnet may be a factor there)

Re: WLC 9800 Flex APs won't go standalone on wan link failure

p.lan — Mon, 10 Apr 2023 17:05:04 GMT

Super late on the reply, but yes, disabling all 4 WLAN switching options in the policy profile resulted in us having our flex APs remain up if the WLC was powered down/unreachable. We previously had Central Auth enabled and nothing else, and recent guides from Cisco now outline more clearly that if Central Association is not enabled, neither should Central Auth. Disabling that gave us the flex AP resilience to remain up if the WLC is down.

This means to disable Central Switching, Auth, DHCP and Association. The AP takes care of all of that. Be mindful if you are using AAA RADIUS, as disabling Central auth will result in AAA being sourced from each AP individually.

Re: WLC 9800 Flex APs won't go standalone on wan link failure

Scott Fella — Mon, 10 Apr 2023 18:02:02 GMT

Central authentication when using FlexConnect is fine to have. It really depends on what you want as your design. If for example a site WAN goes down, it doesn't matter if you are using central auth or have it disabled, 802.1x will still fail. Just keep in mind that there are options and you have to determine what works best for you. Guides are guides and recommendations differ from time to time and whom you speak with., but doesn't mean either are wrong, maybe one is preferred more than another.

Re: WLC 9800 Flex APs won't go standalone on wan link failure

jeffreyw44712 — Tue, 24 Jun 2025 17:25:28 GMT

How to get a Flex-AP staying up when it lost connectivity to its WLC?

I've tried your solution "disabling all 4 WLAN switching options in the policy profile resulted in us having our flex APs remain up if the WLC was powered down/unreachable...disable Central Switching, Auth, DHCP and Association." but it didn't work. (WLC code 17.9.3.50)

My Flex-AP rebooted and started WLC discovery. Can anyone shed some light on this?

Re: WLC 9800 Flex APs won't go standalone on wan link failure

Mark Elsen — Tue, 24 Jun 2025 18:01:02 GMT

- @jeffreyw44712 Please start a new thread and describe your issue from scratch ==> reviving too old threads usually does not make sense , because the owner is no longer involved e.g , your problem could be unrelated totally or different, etc...