topic Re: AP Flex Connect in Wireless

AP Flex Connect

hs08 — Tue, 28 May 2024 06:12:12 GMT

Hello,

When we use Flex Connect, what happen with the AP when the controller goes down? Is the AP can serve the client? Will client will disassociate when move across AP?

Re: AP Flex Connect

Mark Elsen — Tue, 28 May 2024 07:37:13 GMT

- AP can still server the client , clients can roam and or will not dissociate ,

Re: AP Flex Connect

hs08 — Tue, 28 May 2024 07:53:20 GMT

hello @Mark Elsen

My understanding is we still need controller to make client roaming seamlessly because the authentication will occur on each AP and not centralize in the controller. Please correct me if my understanding is wrong.

Re: AP Flex Connect

JPavonM — Tue, 28 May 2024 08:03:19 GMT

In Cisco, APs have cached credentials but as authentication is central, the roaming depend on the WLC. If authentication would be "local", the AP will be the authenticator to talk to the RADIUS servers, but in a WAN down scenario that might not work.

Here you will find all scenarios for Flexconnect APs, it is for AireOS but if Cisco has not added a specific one for IOSXE it is becuase the scenarios are the same ones:

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112042-technote-wlc-00.html

Re: AP Flex Connect

hs08 — Tue, 28 May 2024 08:09:03 GMT

Currently we not use Radius for the authentication, just using WPA2-PSK. Two question that i have :

If controller down then the AP is rebooted, will the AP operate normally?
If controller down, will client disassociate for a few second if move/roam across AP for reauthenticate?

Re: AP Flex Connect

RxTx — Tue, 28 May 2024 08:54:35 GMT

From my work experience with vWLC sw 8.10.196.0 and AP 2702 and 3702 with wifi using WPA2-PSK, all AP and vWLC are in LAN, and enabled:

FlexConnect Local Switching

FlexConnect Local Auth

Learn Client IP Address

Flexconnect Arp-Cache

when vWLC it is unavailable:

- I can see brief wifi clients re-associate to AP (disconnection/connection), this are fixed clients, IoT devices on N network running Tasmota where I can see in client console what it is happen.

- New wifi client can connect to AP without problem and can move from one AP to another without problem.

when vWLC it is available and AP reconnect to wlc again I can see all wifi client re-associate to AP (disconnection/connection) and this can be a problem.

Re: AP Flex Connect

Rich R — Tue, 28 May 2024 12:32:29 GMT

Hi @hs08 - refer to the document @JPavonM linked for a comprehensive feature matrix.

It all depends how the WLAN (SSID) is configured. If it is configured for local switching and authentication then it can operate more or less independently of the WLC. There is always going to be brief disruption when roaming - that's what the roaming assist features are for but they are not all supported for local authentication. Refer to the config guide for your WLC and code version for more details on each feature.
- What model of WLC are you using?
- What version of software are you using?