Hi Experts,
I just implemented HA on a pair of WLC 5508, both with valid AP licensees (500 one od them and 50 the other). The HA AP SSO configuration is working properly, and after forcing the switch-over, the secondary WLC comes up and everything still working fine (the switch-over comes really clean), but we are facing a hard problem.
If you are connected (directly to the switch) in another VLAN rather than the admin VLAN, even if clients keep connected and can reach all destinations without any problem (you can even ping the WLC mgm ip 10.46.27.150), you cannot connect to the WLC via telnet, ssh or web, when the secondary WLC is working due to the switch-over. After switching-over to the primary again, you can connect without problems to the WLC again even from other subnets.
You can connect shh, telnet or web from other subnets at anytime when the primary WLC is working
We have a switch with two vlans:
VLAN 24 – normal users
VLAN 50 – wireless devices and users, we are using the port connected to the WLC as access cause we only want one SSID for all wireless users.
WLC ip: 10.46.27.150
Scenario A
When connected to the vlan 24, and the primary WLC, you can connect via https, ssh or telnet.
When connected to the vlan 50, and the primary WLC, you can connect via https, ssh or telnet.
Scenario B
When connected to the vlan 24 and secondary WLC is working due to failover, you cannot connect via SSH, https or telnet, but you can still ping the mgm ip 10.46.27.150.
When connected to the vlan 50, and the primary WLC, you can connect via https, ssh or telnet.
Two facts to have in mind:
I have no service port configured. I don’t know if its necessary to have it configured to entered the WLC form other subnets, but I don’t think this is important cause you can ping the mgm ip at anytime.
The port form the SW to the WLC is acces cause I’m only using one SSID.
I’m adding to .ppt documents:
- WLC1.ppt when the primary WLC is working.
- WLC2.ppt when the seconday WLC is working due to failover of the primary (notice that the WLC1 is up but the secondary retains the master role).
Thanks
