Cisco WLC 5508 HA AP-SSO not possible

[Mike Farnschlaeder]

Hi!

A custommer of mine tried to configure HA AP-SSO with two 5508 controllers. After rebooting the primary controller changed into Maintanence Mode.

Version 7.3.101.0

(Cisco Controller) >show redundancy summary

Redundancy Mode = SSO ENABLED

Local State = MAINTENANCE

Peer State = UNKNOWN - Communication Down

Unit = Primary

Unit ID = 25:94:0F:AE:C9:00

Redundancy State = Non Redundant

Mobility MAC = 25:94:0F:AE:C9:00

Maintenance Mode = Enabled

Maintenance cause= Incompatible Software license

Redundancy Management IP Address................. 10.90.249.8

Peer Redundancy Management IP Address............ 10.90.248.8

Redundancy Port IP Address....................... 169.254.249.10

Peer Redundancy Port IP Address.................. 169.254.248.10

License Store: Primary License Storage

StoreIndex: 0 Feature: base Version: 1.0

License Type: Permanent

License State: Active, Not in Use

License Count: Non-Counted

License Priority: Medium

License Store: Primary License Storage

StoreIndex: 1 Feature: base-ap-count Version: 1.0

License Type: Permanent

License State: Active, In Use

License Count: 50 /50 (Active/In-use)

License Priority: Medium

License Store: Evaluation License Storage

StoreIndex: 0 Feature: base-ap-count Version: 1.0

License Type: Evaluation

License State: Inactive

Evaluation total period: 8 weeks 4 days

Evaluation period left: 8 weeks 4 days

License Count: 500 / 0 (Active/In-use)

License Priority: None

Der sekundäre Controller war aktiv, hatte aber nicht die aktuelle Konfig vom Master übernommen. The secondary controller did not take the masters config.

What did he do wrong? Licence problem?

He told me that both controllers have a 50 AP license.

Thanks in advance for any help. I have no experince so far with 7.3

[Stephen Rodriguez]

Can you share a show interface sumamry from both controllers?

and really dumb question, but he/you do have a cable in the RP port on both controlllers?  Are you going straight back to back, or are you going through a switch?

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

[Scott Fella]

v7.3 is your issue.... doesn't work well!  Take a look at this thresd

https://supportforums.cisco.com/message/3838459#3838459

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[hranevuts]

I also encountered the same issue

May I know if this is a software issue?

It's a fresh installation and once HA is configured, after reboot, the standby unit showed the same error message

The primary unit has a base AP license while the secondary is a HA SKU unit with no AP license

I read the other thread and planning to upgrade though

Hopefully it will resolve this issue

[Mike Farnschlaeder]

Hi!

This is what the Cisco TAC suggested, but I am not sure if it helps. My customer will check this on the weekend.

I can see that after configuring HA and rebooting primary the Secondary is on Maintenance Mode.. To resolve this issue please check the below config..

1>> Please enable all the ports on the Secondary WLC

config port adminmode all enable

2>> Reboot the Secondary WLC.

This will resolve the issue and let me know how this works out!!

[hranevuts]

Hi,

Just to update,

In my case, upgrading to 7.4.100 solved the issue

Another one of the 7.3.101 HA bugs I suppose

[Scott Fella]

We ran into some issues with the 7.4 in HA and had to downgrade some clients to the 7.3.112.0 code that just came out a week or two agao.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[mclean.danny]

Thanks Mike, this fixed my issue. I am running 7.6.130, what a random fix to this issue. Thanks Cisco! Not only am I certified to configure and troubleshoot your products but I also have random knowledge of your shortcomings.

[Andrew Vlasek]

I had issues running HA after upgrading from 7.3.110.0. to 7.3.112.0, so maybe it just doesn't work. After the upgrade completed everything appeared to be working fine but when I did a force-switchover none of my 8021x secured SSIDs worked and I had to reboot all APs anyway to make it come back online properly... so much for HA. I unfortunately never tested it fully with the 7.3.110.0 code because I upgraded to it after my new 5508 pair was in production. I upgraded to 7.3.112.0 only because their was a security vulnerability. To me it seems Cisco is not doing enough validation testing of the code and possibly moving a little too fast with their progression in wireless. Can anybody confirm they have tested it even working? I am running all 3602i APs.  I have a TAC case open. Also the upgrade from 7.3.110.0 to 7.3.112.0 took almost two hours because of the firmware upgrade(1.7) that was also recommended!

[Scott Fella]

Interesting....

Sent from Cisco Technical Support iPhone App

[Mats Nilson]

Hi Scott or others listening.

I have come inte problems efter what I presume the "wrong" controller was defined as primary.

After configuration of redundancy IP's on both units I enabled HA SSO on the primary first and not enabling it on the secondary. After the HA SSO was enabled the unit didn't become manageble.

Since I could connect to its Redundancy management IP I could SSH into the unit:

I checked the redundancy status

(Cisco Controller) >show redundancy summary

Redundancy Mode = SSO ENABLED

     Local State = MAINTENANCE

      Peer State = UNKNOWN - Communication Down

            Unit = Primary

         Unit ID = 6C:20:56:BD:60:60

Redundancy State = Non Redundant

    Mobility MAC = 6C:20:56:BD:60:60

Maintenance Mode = Enabled

Maintenance cause= Incompatible Software license

Redundancy Management IP Address................. 10.128.112.202

Peer Redundancy Management IP Address............ 10.128.112.203

Redundancy Port IP Address....................... 169.254.112.202

Peer Redundancy Port IP Address.................. 169.254.112.203

(Cisco Controller) >show license summary

License Store: Primary License Storage

StoreIndex:  0Feature: base                              Version: 1.0

License Type: Permanent

License State: Active, Not in Use

License Count: Non-Counted

License Priority: Medium

License Store: Evaluation License Storage

StoreIndex:  0Feature: base-ap-count                     Version: 1.0

License Type: Evaluation

License State: Active, Not in Use, EULA not accepted

    Evaluation total period:  8 weeks  4 days

    Evaluation period left:  8 weeks  4 days

License Count: 500 / 0 (Active/In-use)

License Priority: None

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version.................................. 7.3.112.0

Bootloader Version............................... 1.0.16

Field Recovery Image Version..................... 7.0.112.21

Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2

Build Type....................................... DATA + WPS

System Name...................................... XXXX

System Location.................................. XXXX

System Contact...................................

System ObjectID.................................. 1.3.6.1.4.1.9.1.1069

Redundancy Mode.................................. SSO

IP Address....................................... 10.128.112.200

Last Reset....................................... Software reset

System Up Time................................... 0 days 0 hrs 13 mins 56 secs

System Timezone Location.........................

Configured Country............................... SE  - Sweden

Operating Environment............................ Commercial (0 to 40 C)

Internal Temp Alarm Limits....................... 0 to 65 C

Internal Temperature............................. +37 C

External Temperature............................. +18 C

Fan Status....................................... OK

State of 802.11b Network......................... Disabled

State of 802.11a Network......................... Disabled

Number of WLANs.................................. 2

Number of Active Clients......................... 0

Burned-in MAC Address............................ 6C:20:56:BD:60:60

Power Supply 1................................... Present, OK

Power Supply 2................................... Absent

Maximum number of APs supported.................. 0

I then did disable redundancy but unfortunately the unit went unreachable

(Cisco Controller) >config redundancy mode none 

All unsaved configuration will be saved.

And the system will be reset. Are you sure? (y/n)y

- No connectivity on either management or redundancy management IP

How can I recover this unit, and why did this happen? How can I veryfy the HA-SSO licence?

- Above license info doesn't make sense

[Scott Fella]

Might want to look at this thread.

https://supportforums.cisco.com/message/3910794#3910794

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

[Mats Nilson]

Hi again.

Since I had another site with similar setup where the primary las left in active state, and the secondary in disabled state, I wanted to bring the primary up first on this site too, before enabling HA-SSO on the secondary.

I didn't anticipate any problem doing so as this worked on the other site.

- How can I remotely identify a HA SKU wlc?

Anyway the other thread was rather discouraging, but I assume 7.3.112 should work, Especially since I have this other site up and running w/o problems yet.

I'm not 100% about the state of my primary - will a reboot/powertoggle activate all ports again?

We have several more sites upcoming (two major) - is 7.3.112 in working order or is another code upcoming in 7.3?

I would like to see an updated HA-SSO software matrix.

Thanks in advance

[Scott Fella]

The compatibility matrix is really what code works with what. Currently still there is no stable version for HA using AP SSO that we have seen. I have seen issues on both the v7.3 versions and the v7.4. I have had clients that just bring up the primary HA and leave the other disconnected. I have had other customers replace the HA with a licensed 5508 to run the normal way with redundancy and I have had customers go to v7.4 and just use the N+1 configuration.

Sent from Cisco Technical Support iPhone App

[Scott Fella]

You should take a look at this support link

https://supportforums.cisco.com/docs/DOC-32259

Sent from Cisco Technical Support iPhone App