cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1847
Views
3
Helpful
6
Replies

9800 wireless controller flex profile when controller is down

paul-d
Level 2
Level 2

Hi I have a 9800 WLC with a number of 9120 AP's. My question is if I configure an SSID with PSK, and egress that traffic locally using a flex policy, IF the wireless controller and the AP lose connectivity the clients connected to the SSID still work as normal? is there a kind of fall back state for flex?

6 Replies 6

Mark Elsen
Hall of Fame
Hall of Fame

 

   - Yes, if you are using flexconnect local switching then the clients can keep working , 

 M.



-- Let everything happen to you  
       Beauty and terror
      Just keep going    
       No feeling is final
Reiner Maria Rilke (1899)

central Authc 
1- enable the user will still send/receive data until the re-auth timer is end after that the user can not access network 

2- disable the user not effect if capwap is down

MHM

@paul-d 

 There is no fallback. Either is flex or local switching.  If flexconnect is configured, the client can survive on WLC outage. No new client will be accepted, however. 
  There are advantages and disadvantages on both modes. It depends on your needs. 

 

 

not really @Flavio Miranda - Flexconnect is the AP mode which allows WLANs to use local switching and authentication.
What matters for standalone mode (when AP loses CAPWAP connection to WLC) is that the WLAN must be:
Local switching + local authentication + local DHCP then it will keep operating as normal.

So it's not flex or local, it's flex + local switching versus flex + central switching (which is also possible but will stop working when WLC is lost)

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

Haydn Andrews
VIP Alumni
VIP Alumni

For a PSK you can do flexconnect local switching and local authentication, this will allow new clients to connect, but will be full auth I believe on a roam if the WLC is down.

Bit of an old guide but this has some general guidlelines and restrictions of Flexconnect in it
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/flexconnect.html

 

*****Help out other by using the rating system and marking answered questions as "Answered"*****
*** Please rate helpful posts ***
Review Cisco Networking for a $25 gift card