topic Cisco WLC 5508 HA AP-SSO not possible in Wireless

Cisco WLC 5508 HA AP-SSO not possible

Mike Farnschlaeder — Sun, 04 Jul 2021 06:30:32 GMT

Hi!

A custommer of mine tried to configure HA AP-SSO with two 5508 controllers. After rebooting the primary controller changed into Maintanence Mode.

Version 7.3.101.0

(Cisco Controller) >show redundancy summary

Redundancy Mode = SSO ENABLED

Local State = MAINTENANCE

Peer State = UNKNOWN - Communication Down

Unit = Primary

Unit ID = 25:94:0F:AE:C9:00

Redundancy State = Non Redundant

Mobility MAC = 25:94:0F:AE:C9:00

Maintenance Mode = Enabled

Maintenance cause= Incompatible Software license

Redundancy Management IP Address................. 10.90.249.8

Peer Redundancy Management IP Address............ 10.90.248.8

Redundancy Port IP Address....................... 169.254.249.10

Peer Redundancy Port IP Address.................. 169.254.248.10

License Store: Primary License Storage

StoreIndex: 0 Feature: base Version: 1.0

License Type: Permanent

License State: Active, Not in Use

License Count: Non-Counted

License Priority: Medium

License Store: Primary License Storage

StoreIndex: 1 Feature: base-ap-count Version: 1.0

License Type: Permanent

License State: Active, In Use

License Count: 50 /50 (Active/In-use)

License Priority: Medium

License Store: Evaluation License Storage

StoreIndex: 0 Feature: base-ap-count Version: 1.0

License Type: Evaluation

License State: Inactive

Evaluation total period: 8 weeks 4 days

Evaluation period left: 8 weeks 4 days

License Count: 500 / 0 (Active/In-use)

License Priority: None

Der sekundäre Controller war aktiv, hatte aber nicht die aktuelle Konfig vom Master übernommen. The secondary controller did not take the masters config.

What did he do wrong? Licence problem?

He told me that both controllers have a 50 AP license.

Thanks in advance for any help. I have no experince so far with 7.3

Cisco WLC 5508 HA AP-SSO not possible

Stephen Rodriguez — Mon, 11 Feb 2013 16:00:51 GMT

Can you share a show interface sumamry from both controllers?

and really dumb question, but he/you do have a cable in the RP port on both controlllers? Are you going straight back to back, or are you going through a switch?

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

Cisco WLC 5508 HA AP-SSO not possible

Scott Fella — Mon, 11 Feb 2013 18:18:50 GMT

v7.3 is your issue.... doesn't work well! Take a look at this thresd

https://supportforums.cisco.com/message/3838459#3838459

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

Cisco WLC 5508 HA AP-SSO not possible

hranevuts — Mon, 18 Feb 2013 17:04:29 GMT

I also encountered the same issue

May I know if this is a software issue?

It's a fresh installation and once HA is configured, after reboot, the standby unit showed the same error message

The primary unit has a base AP license while the secondary is a HA SKU unit with no AP license

I read the other thread and planning to upgrade though

Hopefully it will resolve this issue

Cisco WLC 5508 HA AP-SSO not possible

Mike Farnschlaeder — Tue, 19 Feb 2013 15:34:22 GMT

Hi!

This is what the Cisco TAC suggested, but I am not sure if it helps. My customer will check this on the weekend.

I can see that after configuring HA and rebooting primary the Secondary is on Maintenance Mode.. To resolve this issue please check the below config..

1>> Please enable all the ports on the Secondary WLC

config port adminmode all enable

2>> Reboot the Secondary WLC.

This will resolve the issue and let me know how this works out!!

Cisco WLC 5508 HA AP-SSO not possible

hranevuts — Wed, 20 Feb 2013 14:07:14 GMT

Hi,

Just to update,

In my case, upgrading to 7.4.100 solved the issue

Another one of the 7.3.101 HA bugs I suppose

Cisco WLC 5508 HA AP-SSO not possible

Scott Fella — Thu, 21 Feb 2013 13:17:49 GMT

We ran into some issues with the 7.4 in HA and had to downgrade some clients to the 7.3.112.0 code that just came out a week or two agao.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

Re: Cisco WLC 5508 HA AP-SSO not possible

Andrew Vlasek — Thu, 28 Feb 2013 16:14:19 GMT

I had issues running HA after upgrading from 7.3.110.0. to 7.3.112.0, so maybe it just doesn't work. After the upgrade completed everything appeared to be working fine but when I did a force-switchover none of my 8021x secured SSIDs worked and I had to reboot all APs anyway to make it come back online properly... so much for HA. I unfortunately never tested it fully with the 7.3.110.0 code because I upgraded to it after my new 5508 pair was in production. I upgraded to 7.3.112.0 only because their was a security vulnerability. To me it seems Cisco is not doing enough validation testing of the code and possibly moving a little too fast with their progression in wireless. Can anybody confirm they have tested it even working? I am running all 3602i APs. I have a TAC case open. Also the upgrade from 7.3.110.0 to 7.3.112.0 took almost two hours because of the firmware upgrade(1.7) that was also recommended!

Re: Cisco WLC 5508 HA AP-SSO not possible

Scott Fella — Thu, 28 Feb 2013 16:23:46 GMT

Interesting....

Sent from Cisco Technical Support iPhone App

Cisco WLC 5508 HA AP-SSO not possible

Mats Nilson — Thu, 18 Apr 2013 18:31:04 GMT

Hi Scott or others listening.

I have come inte problems efter what I presume the "wrong" controller was defined as primary.

After configuration of redundancy IP's on both units I enabled HA SSO on the primary first and not enabling it on the secondary. After the HA SSO was enabled the unit didn't become manageble.

Since I could connect to its Redundancy management IP I could SSH into the unit:

I checked the redundancy status

(Cisco Controller) >show redundancy summary

Redundancy Mode = SSO ENABLED

Local State = MAINTENANCE

Peer State = UNKNOWN - Communication Down

Unit = Primary

Unit ID = 6C:20:56:BD:60:60

Redundancy State = Non Redundant

Mobility MAC = 6C:20:56:BD:60:60

Maintenance Mode = Enabled

Maintenance cause= Incompatible Software license

Redundancy Management IP Address................. 10.128.112.202

Peer Redundancy Management IP Address............ 10.128.112.203

Redundancy Port IP Address....................... 169.254.112.202

Peer Redundancy Port IP Address.................. 169.254.112.203

(Cisco Controller) >show license summary

License Store: Primary License Storage

StoreIndex: 0Feature: base Version: 1.0

License Type: Permanent

License State: Active, Not in Use

License Count: Non-Counted

License Priority: Medium

License Store: Evaluation License Storage

StoreIndex: 0Feature: base-ap-count Version: 1.0

License Type: Evaluation

License State: Active, Not in Use, EULA not accepted

Evaluation total period: 8 weeks 4 days

Evaluation period left: 8 weeks 4 days

License Count: 500 / 0 (Active/In-use)

License Priority: None

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version.................................. 7.3.112.0

Bootloader Version............................... 1.0.16

Field Recovery Image Version..................... 7.0.112.21

Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2

Build Type....................................... DATA + WPS

System Name...................................... XXXX

System Location.................................. XXXX

System Contact...................................

System ObjectID.................................. 1.3.6.1.4.1.9.1.1069

Redundancy Mode.................................. SSO

IP Address....................................... 10.128.112.200

Last Reset....................................... Software reset

System Up Time................................... 0 days 0 hrs 13 mins 56 secs

System Timezone Location.........................

Configured Country............................... SE - Sweden

Operating Environment............................ Commercial (0 to 40 C)

Internal Temp Alarm Limits....................... 0 to 65 C

Internal Temperature............................. +37 C

External Temperature............................. +18 C

Fan Status....................................... OK

State of 802.11b Network......................... Disabled

State of 802.11a Network......................... Disabled

Number of WLANs.................................. 2

Number of Active Clients......................... 0

Burned-in MAC Address............................ 6C:20:56:BD:60:60

Power Supply 1................................... Present, OK

Power Supply 2................................... Absent

Maximum number of APs supported.................. 0

I then did disable redundancy but unfortunately the unit went unreachable

(Cisco Controller) >config redundancy mode none

All unsaved configuration will be saved.

And the system will be reset. Are you sure? (y/n)y

- No connectivity on either management or redundancy management IP

How can I recover this unit, and why did this happen? How can I veryfy the HA-SSO licence?

- Above license info doesn't make sense

Cisco WLC 5508 HA AP-SSO not possible

Scott Fella — Fri, 19 Apr 2013 01:04:43 GMT

Might want to look at this thread.

https://supportforums.cisco.com/message/3910794#3910794

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

Cisco WLC 5508 HA AP-SSO not possible

Mats Nilson — Fri, 19 Apr 2013 07:27:23 GMT

Hi again.

Since I had another site with similar setup where the primary las left in active state, and the secondary in disabled state, I wanted to bring the primary up first on this site too, before enabling HA-SSO on the secondary.

I didn't anticipate any problem doing so as this worked on the other site.

- How can I remotely identify a HA SKU wlc?

Anyway the other thread was rather discouraging, but I assume 7.3.112 should work, Especially since I have this other site up and running w/o problems yet.

I'm not 100% about the state of my primary - will a reboot/powertoggle activate all ports again?

We have several more sites upcoming (two major) - is 7.3.112 in working order or is another code upcoming in 7.3?

I would like to see an updated HA-SSO software matrix.

Thanks in advance

Re: Cisco WLC 5508 HA AP-SSO not possible

Scott Fella — Fri, 19 Apr 2013 12:37:56 GMT

The compatibility matrix is really what code works with what. Currently still there is no stable version for HA using AP SSO that we have seen. I have seen issues on both the v7.3 versions and the v7.4. I have had clients that just bring up the primary HA and leave the other disconnected. I have had other customers replace the HA with a licensed 5508 to run the normal way with redundancy and I have had customers go to v7.4 and just use the N+1 configuration.

Sent from Cisco Technical Support iPhone App

Re: Cisco WLC 5508 HA AP-SSO not possible

Scott Fella — Sat, 20 Apr 2013 10:46:59 GMT

You should take a look at this support link

https://supportforums.cisco.com/docs/DOC-32259

Sent from Cisco Technical Support iPhone App

Cisco WLC 5508 HA AP-SSO not possible

Mats Nilson — Tue, 30 Apr 2013 10:53:00 GMT

Isn't there a way to break HA SSO without the unit going into safe mode shutting down all ports?

The primary wich we upgraded to 7.3.112 still went into maintenance mode after enabling HA SSO.

The secondary has no connection to the primary, so it is still possible to manage via SSL and SSH.

I assume that this primary has lost its AP license count, but I'm confused since I checked the AP count to be 250 before enabling HA SSO. After the primary went into maintenance mode I SSH:d into the redundancy mgmt addr.

First I tried with just resetting the unit; no luck, so then I configured the unit as secondary by "config redundancy unit secondary", "config port adminmode all enable", saved config, and disabled HA-SSO by "config redundancy mode none".

None of these commands served its purpose of bringing the unit into service.

The HA Deployment guide has several faulty statements on how the WLC are restored from maintenance mode.

This code should be OK but i guess that the base licence were lost earlier on the prime.

Sincere regards

Cisco WLC 5508 HA AP-SSO not possible

Ralph Olsen — Wed, 29 May 2013 12:05:55 GMT

I had the same issue with a HA setup running 7.3.112.0. The HA-SKU unit booted, found the peer and move to mainenance mode.

I did the following config on the HA-SKU unit

"config redundancy unit primary"

"config redundancy unit secondary"

and then reload it again. This worked for me!

Thanks Mike, this fixed my

mclean.danny — Tue, 29 Sep 2015 15:35:41 GMT

Thanks Mike, this fixed my issue. I am running 7.6.130, what a random fix to this issue. Thanks Cisco! Not only am I certified to configure and troubleshoot your products but I also have random knowledge of your shortcomings.