topic Re: Mobility Secure Mode in Wireless

Mobility Secure Mode

mfalcao230 — Sun, 04 Jul 2021 02:19:11 GMT

Hello,

We are working with WLC 5508 version 7.0.98.0 and we want to secure (encrypt) mobility messages between controllers but the command "config mobility secure-mode enable" apparently doesn't exist in this WLC version.

Does anybody know how to configure secure mode for mobility messages (udp port 16667) on this WLC version?

Thanks in advance.

Regards,

Mario

Re: Mobility Secure Mode

Nicolas Darchis — Mon, 25 Oct 2010 06:20:44 GMT

Hi Mario,

This is not possible anymore. If you check the 7.0 config guide there is no mention of secure mode anymore.

In the 5.1-5.2-6.0 config guides, they added a note to say that the secure mode was not supported even if command was present in command line.

So this is not configurable since some versions already.

I heard something is coming to replace this need but no idea what it will be yet.

Regards,

Nicolas

===

Please rate posts that you find useful

Re: Mobility Secure Mode

Surendra BG — Mon, 25 Oct 2010 06:27:10 GMT

Hi,

Here is the bug ID..CSCtd14357

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtd14357

Regards

Surendra

Re: Mobility Secure Mode

mfalcao230 — Mon, 25 Oct 2010 12:55:03 GMT

Hello,

Thanks for the answers. We supposed that this feature was deprecated but we doubt since we found references to this mode in the 7.0 configuration guide and command reference guide.

Regards,

Mario

Re: Mobility Secure Mode

Nicolas Darchis — Mon, 25 Oct 2010 13:50:33 GMT

Can you mention where in the config guide ? This needs to be tackled and removed actually.

Re: Mobility Secure Mode

mfalcao230 — Tue, 26 Oct 2010 02:24:01 GMT

We found the following references:

1) WLC Configuration guide 7.0: page 809 (Chapter 14-5)

"All mobility message exchanges between controllers are carried out using UDP packets on port 16666. IPsec encryption can also be configured for
the inter-controller mobility messages, in which case port 16667 is used."

2) WLC Command Reference 7.0: page 663 (Chapter 2-649)

"config mobility secure-mode"

Regards,

Mario

Re: Mobility Secure Mode

Surendra BG — Tue, 26 Oct 2010 02:27:00 GMT

Thanks for the update!! We will take care of this issue and we will make sure that this wont happen in future!!

Regards

Surendra

Re: Mobility Secure Mode

Surendra BG — Tue, 26 Oct 2010 05:25:28 GMT

Great!!

i have checked the documantation and found that the there is some issues with the doc.. coz.. based on the Bug which i have provided.. you no longer see the command in 6.0 WLC configuration guide.. however we are able to see this on 7.0.. we will take care of this. and thanks for noticing this and helping us to improve..

Regards

Surendra