So join wrong WLC

[radwango1]

We have 2 wlc, one virtual and one 2504

After power outage all the APs join the virtual instead of the AP WHICH RELATED to 2504 have different subnet 

i changed the ip, default gateway and controller manually 

i still have the same problem, all ap join the virtual wlc 

any help

[larsrugaard]

Hi

We had the same problem - it seems that if the WLC's are in same mobility-group the AP will know the other WLC's IP - and in case of outage for the first WLC they will try to join the other WLC (since they will know the IP from the mobility-group config)

Solution is to add a mac-filter to your virtual WLC, which will only accept known AP mac-addresses

Cheers

Lars

[radwango1]

Good idea 

but for me it is not clear how to do that in the vwlc 

can u help?

[larsrugaard]

On "Security -> AP Policies" tick the "Authorize MIC APs against auth-list or AAA"-Box and click "Apply"

In the future, when you want AP's to join this WLC, on "Security -> AP Policies" press the "Add"-Button - and enter the MAC-adress from the AP in question

The WLC will ignore any Join-request from an AP which MAC-addres is not in the list