Cisco 9800-CL HA setup issue

[pgill.uwo@gmail.com]

Trying to setup redundancy on 9800-Cl in Esxi environment. Have three NICs - Gi1 ( OOB ) , Gi2 ( trunk ) , Gi3 ( HA ) . After issuing following commands  and reloading controllers one of the controller goes into recovery mode and HA is not formed. Commands used :
chassis redundancy ha-interface gig3

& 

redun-management interface Vlan40 chassis 1 address 192.168.31.4 chassis 2 address 192.168.31.5

IOS version in use 17.3.6. Getting following message on controller which goes into recovery mode %RIF_MGR_FSM-6-RMI_LINK_domn. RMI link is down.

Looking for help and recommendation to resolve issues.

Thanks

[Sandeep Choudhary]

Hi, 

Please follow this post and try to setup the HA between two 9800-CL WLCs.

https://rowelldionicio.com/cisco-catalyst-9800-cl-high-availability/

https://wifininjas.net/2019/08/21/wn-blog-011-cisco-c9800-cl-wlc-redundancy-ha-sso/

Regards

Dont forget to rate helpful posts

[marce1000]

  - Have  a checkup of the current controller configuration (before the HA attempt) with the CLI command : show  tech   wireless , have the output analyzed by  https://cway.cisco.com/tools/WirelessAnalyzer/  , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer.         

 M.   

[balaji.bandi · Accepted solution]

Since this is virtual first you need to check the GIG3 how this is extended in vswitch - check VLAN 40

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213915-configure-catalyst-9800-wireless-control.html

[marce1000]

 - Also note that you can get additional (state) info's on the RP (Gi3) with the command show platform hardware chassis active qfp datapath pmd ifdev  (you will also get info on the state of other interfaces). You may compare this with before or after connecting attempts to the redundancy controller. Also correlate the observed outputs with the intended networking settings on the virtual environment (hypervisor)

 M.

[pgill.uwo@gmail.com]

Thanks All. Both 9800-CL controllers needed to be on same ESxi host for HA ( Gi3 ) to work. I had 9800CL controllers on two separate ESXi hosts. Once I moved them to single ESXi host issue was Fixed.

[aeccles]

Does anyone know if this can work when the controllers are on different host servers?  Having both controllers on the same host greatly reduces the benefit of HA.  None of the configuration guides address this and so far our time working with TAC hasn't produced a resolution.

[balaji.bandi]

May be explain your scenario or if you looking different DC, then try n+1 deployment.

[aeccles]

Sure thing.  Our situation is very similar to the original post... We are trying to setup redundancy on 9800-Cl in a VMWare Esxi environment. We have followed the deployment guide and have a functioning controller with APs joined and active clients. 

The issue is that we are unable to establish HA between the WLCs.  We have multiple ESXi Host servers in a cluster, and we would like to be able to have WLC1 and WLC2 on different host servers.  All of our attempts to get this working fail.  The HA link will not establish.

All of the documentation we've found - such as this: Configure Catalyst 9800 Wireless Controllers in High Availability (HA) Client Stateful Switch Over (SSO) in IOS-XE 16.12 - Cisco Only covers instances when WLC1 and WLC2 are on the same host.

What we need are the configuration steps for setup where the WLCs are on different hosts.  We worked with TAC multiple times and have not found a solution.  We don't even know if it is a supported scenario.

If anyone has this running or can provide info on it, I'd greatly appreciate it.

[marce1000]

 >..Does anyone know if this can work when the controllers are on different host servers?  Having both controllers on the same host greatly reduces the benefit of HA.  None of the configuration guides address this and so far our time working with TAC hasn't produced a resolution.
  - In that case , you need to make sure that the external vlans 'bridging' between the two controllers   , use the same vlan tagging as defined for inner HA on the 9800CL pair , 

 M.