cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5494
Views
5
Helpful
23
Replies

No https access to standby WLC 3504 in HA

pfaiscacisco
Frequent Visitor
Frequent Visitor

Hi,

I can't get http/https/ssh sessions to standby WLC 3504 when primary is off, version 8.10.185, all clients communications work well...

The WLC respond to pings

Is it normal or is there any configuration to solve this?

Thank you

Cheers

 

23 Replies 23

Hi,

pfaiscacisco_0-1689330879338.png

 

first I think SSO not work with this config 
second 
try using .14 instead of .15

Hi,

Not work?  Why?

"Like on other WLC, WLC 3504 supports both AP SSO and Client SSO"

Arshad Safrulla
VIP Alumni
VIP Alumni

How do you access the WLC for management? If it is via service port, make sure both service ports are connected to the correct switch and switchports are configured correctly. (switchport mode, vlan etc.)

If you are access it via the data ports or management VLAN, as @Flavio Miranda  mentioned compare the switchport configuration form the switches where the WLCs are connected. 

Hi,

Via management vlan ..

The settings on the switch are the same on all ports:

-----------------------

switchport trunk allowed vlan 3,4,10
switchport mode trunk

----------------------

Thanks

Ambuj M
VIP
VIP

I am assuming you are using the same IP as primary to access, once HA is formed, the HA controller IP is overwritten by Primary, so if primary fails, the IP of primary should still be used for accessing HA controller.

If Yes then clear arp cache, browser history, try again, else try console and verify config as Flavio recommended.

-hope this helps-

Thanks,

We've done all that

WLC responds to pings

I forced by console the configuration of the access to http/https

We looked at the firewall and only no response from wlc, timeout

Cheers

whiteyang
Visitor

 can try reload standby wlc.  It recovered after reload.    ssh  could work.(http can't access,but telnet 443 it's ok)

 It is easy to appear after doing HA failover

As far as I know https will only work on the active WLC.

------------------------------
Please click Helpful if this post helped you and Accept as Solution if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390
AP supported channel lookup: https://apchannels.cisco.com/
Review Cisco Networking for a $25 gift card