topic Re: HA Configuration dcloud 9800 in Wireless

HA Configuration dcloud 9800

jasonjefrey1 — Mon, 17 Jul 2023 19:48:19 GMT

Hi everyone

What is the recommended IP Add to use when configuring HA? The wireless management IP range or the controller management IP range the one we use to login via the web?

Thanks

jason

Re: HA Configuration dcloud 9800

jasonjefrey1 — Mon, 17 Jul 2023 19:49:28 GMT

I mean the IP add used on the RMI RP ports

Re: HA Configuration dcloud 9800

Ambuj M — Mon, 17 Jul 2023 20:29:20 GMT

RMI must be in the same subnet as the Wireless Management Interface.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-1/config-guide/b_wl_17_11_cg/b_wl_16_12_cg_chapter_01111111.html#id_109551

Re: HA Configuration dcloud 9800

jasonjefrey1 — Mon, 17 Jul 2023 20:44:05 GMT

Hi @Ambuj M

Thank you! Let me go and configure it now.

Jason

Re: HA Configuration dcloud 9800

jasonjefrey1 — Mon, 17 Jul 2023 21:14:44 GMT

@Ambuj M

And the two controllers must both have management wireless interfaces in the same range like 1.1.1.1/24 and 1.1.1.2/24?

Re: HA Configuration dcloud 9800

Ambuj M — Mon, 17 Jul 2023 21:37:06 GMT

yes. Assuming you are not actually using 1.1.1.1, since its own by cloudflare now.

Re: HA Configuration dcloud 9800

jasonjefrey1 — Mon, 17 Jul 2023 22:13:13 GMT

Hi @Ambuj M

Thank you, yeah, I am not using 1.1.1.1 - I just used it as an example thanks

Re: HA Configuration dcloud 9800

Mark Elsen — Tue, 18 Jul 2023 06:09:40 GMT

- Also note when you are configuring controllers (HA mode or other stuff) , you can always have a checkup of the configuration with the CLI command show tech wireless ; feed the output into :
https://cway.cisco.com/wireless-config-analyzer/
Strongly advised !

Re: HA Configuration dcloud 9800

jasonjefrey1 — Tue, 18 Jul 2023 12:26:42 GMT

@Ambuj M

Sorry, bro; another question. I deleted the hostname, and it took away the trustpoint. Now when I use the CLi "wireless config vwlc-ssc key-size 2048 signature-alog sha256 password $$$$ - its not creating the certificate. is the another easy way to create certificate ?

Re: HA Configuration dcloud 9800

Ambuj M — Tue, 18 Jul 2023 13:02:44 GMT

no worries, can you share the output for "show crypto key mypubkey all"

Re: HA Configuration dcloud 9800

grahamlogan429 — Thu, 20 Jul 2023 11:56:48 GMT

When configuring High Availability (HA) for networking devices, the recommended IP address to use depends on the specific requirements and design of your network setup. There are typically two main types of IP addresses involved in configuring HA for networking devices: the wireless management IP range and the controller (or management) IP range.

Wireless Management IP Range: The wireless management IP range is used for communication between the access points (APs) and the wireless controller or wireless management system. This IP range is typically used for control plane traffic and managing the wireless infrastructure.
Controller (or Management) IP Range: The controller IP range, also known as the management IP range, is used for accessing and managing the networking device itself. This IP range is used for configuration, monitoring, and control of the networking equipment.

Re: HA Configuration dcloud 9800

jasonjefrey1 — Tue, 18 Jul 2023 14:03:49 GMT

@Ambuj M

Kindly see the attached

Re: HA Configuration dcloud 9800

jasonjefrey1 — Tue, 18 Jul 2023 15:18:04 GMT

Hi @grahamlogan429

Thanks for the clarification; we want the first one for control plane traffic.

Re: HA Configuration dcloud 9800

jasonjefrey1 — Tue, 18 Jul 2023 19:53:25 GMT

When calculating the hexadecimal value for option 43 in the HA setup, should we calculate it as one controller or two?

Re: HA Configuration dcloud 9800

Ambuj M — Tue, 18 Jul 2023 20:27:43 GMT

You still have the self signed certificate trustpoint TP-self-signed-2327769474, if this is the one references before you can still use it.

Re: HA Configuration dcloud 9800

Ambuj M — Tue, 18 Jul 2023 20:29:50 GMT

only the primary controller, once HA is formed HA controller IP is over written by primary controller IP.

I would also recommend that you open a separate discussion for each new topic, its easier for the community member to track and help and its convenience for other community members when they are searching community topics.

Re: HA Configuration dcloud 9800

Mark Elsen — Wed, 19 Jul 2023 06:04:48 GMT

>...should we calculate it as one controller or two
One controller ,

Re: HA Configuration dcloud 9800

jasonjefrey1 — Wed, 19 Jul 2023 06:07:25 GMT

Thank you

Re: HA Configuration dcloud 9800

jasonjefrey1 — Wed, 19 Jul 2023 06:11:09 GMT

@Ambuj M

Thank you! The HA is working. I just need to sort out the self-signed certificate. I'll try rebooting the APs and see how it goes. Thank you for your advice. It's much appreciated.

Jason