topic Re: 9800 wireless controller flex profile when controller is down in Wireless

9800 wireless controller flex profile when controller is down

paul-d — Wed, 27 Nov 2024 16:27:46 GMT

Hi I have a 9800 WLC with a number of 9120 AP's. My question is if I configure an SSID with PSK, and egress that traffic locally using a flex policy, IF the wireless controller and the AP lose connectivity the clients connected to the SSID still work as normal? is there a kind of fall back state for flex?

Re: 9800 wireless controller flex profile when controller is down

Mark Elsen — Wed, 27 Nov 2024 16:30:05 GMT

- Yes, if you are using flexconnect local switching then the clients can keep working ,

Re: 9800 wireless controller flex profile when controller is down

MHM Cisco World — Wed, 27 Nov 2024 16:36:54 GMT

central Authc
1- enable the user will still send/receive data until the re-auth timer is end after that the user can not access network

2- disable the user not effect if capwap is down

MHM

Re: 9800 wireless controller flex profile when controller is down

Flavio Miranda — Wed, 27 Nov 2024 16:55:41 GMT

@paul-d

There is no fallback. Either is flex or local switching. If flexconnect is configured, the client can survive on WLC outage. No new client will be accepted, however.
There are advantages and disadvantages on both modes. It depends on your needs.

Re: 9800 wireless controller flex profile when controller is down

Haydn Andrews — Wed, 27 Nov 2024 21:13:35 GMT

For a PSK you can do flexconnect local switching and local authentication, this will allow new clients to connect, but will be full auth I believe on a roam if the WLC is down.

Bit of an old guide but this has some general guidlelines and restrictions of Flexconnect in it
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/flexconnect.html

Re: 9800 wireless controller flex profile when controller is down

srimal99 — Thu, 28 Nov 2024 09:31:45 GMT

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9800-series-wireless-controllers/cat-9800-flexconnect-branch-deployment-guide-og.html

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213911-understand-catalyst-9800-wireless-contro.html#toc-hId-2039008903

Configuration and deployment guides.

*******Please rate all helpfull posts************

Re: 9800 wireless controller flex profile when controller is down

Rich R — Thu, 28 Nov 2024 17:15:01 GMT

not really @Flavio Miranda - Flexconnect is the AP mode which allows WLANs to use local switching and authentication.
What matters for standalone mode (when AP loses CAPWAP connection to WLC) is that the WLAN must be:
Local switching + local authentication + local DHCP then it will keep operating as normal.

So it's not flex or local, it's flex + local switching versus flex + central switching (which is also possible but will stop working when WLC is lost)