HSRP and other settings in HA SSO recommended design

[Andrey128]

Hi,

for HA SSO following topology is being used:

Core 1 is primary for spanning tree and HSRP VLANs used for SSIDs offered by WLC1(primary) & WLC2(stanby).

WLC1 & WLC2 configured in HA SSO mode and connected via etherchannel to core switches.

My concern is: should VLAN for management interface have HSRP enabled?

If slot on core1 get faulty and WLC1 physically lost connection to network, then WLC2 become active but for HSRP management interface VLAN still hosted on core1. Can this bring total wifi outage?! 

[Scott Fella · Accepted solution]

I would be careful and understand SSO. You have two checks, one is from the RP port and the other is if the gateway is not reachable. If one of the checks fails, then the device goes into maintenance mode to prevent a split brain. You should test prior to making any changes in production.

[Deepak Kumar · Accepted solution]

Hi,

Is it possible for MLAG? If yes then your issue will resolve with MLAG, but as a reply to your question:

Yes, you required as HSRP Virtual IP address for management interface as well. Otherwise, Gateway will unreachable and the device will be gone in maintenance mode.

Regards,

Deepak Kumar