Mobility Secure Mode

[mfalcao230]

Hello,

We are working with WLC 5508 version 7.0.98.0 and we want to secure (encrypt) mobility messages between controllers but the command "config mobility secure-mode enable" apparently doesn't exist in this WLC version.

Does anybody know how to configure secure mode for mobility messages (udp port 16667) on this WLC version?

Thanks in advance.

Regards,

Mario

[Nicolas Darchis]

Hi Mario,

This is not possible anymore. If you check the 7.0 config guide there is no mention of secure mode anymore.

In the 5.1-5.2-6.0 config guides, they added a note to say that the secure mode was not supported even if command was present in command line.

So this is not configurable since some versions already.

I heard something is coming to replace this need but no idea what it will be yet.

Regards,

Nicolas

===

Please rate posts that you find useful

[Surendra BG · Accepted solution]

Hi,

Here is the bug ID..CSCtd14357

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtd14357

Regards

Surendra

[mfalcao230]

Hello,

Thanks for the answers. We supposed that this feature was deprecated but we doubt since we found references to this mode in the 7.0 configuration guide and command reference guide.

Regards,

Mario

[Nicolas Darchis]

Can you mention where in the config guide ? This needs to be tackled and removed actually.

[mfalcao230]

We found the following references:

1) WLC Configuration guide 7.0: page 809 (Chapter 14-5)

"All mobility message exchanges between controllers are carried out using UDP packets on port 16666. IPsec encryption can also be configured for
the inter-controller mobility messages, in which case port 16667 is used."

2) WLC Command Reference 7.0: page 663 (Chapter 2-649)

"config mobility secure-mode"

Regards,

Mario

[Surendra BG]

Thanks for the update!! We will take care of this issue and we will make sure that this wont happen in future!!

Regards

Surendra

[Surendra BG]

Great!!

i have checked the documantation and found that the there is some issues with the doc.. coz.. based on the Bug which i have provided.. you no longer see the command in 6.0 WLC configuration guide.. however we are able to see this on 7.0.. we will take care of this. and thanks for noticing this and helping us to improve..

Regards

Surendra