Two wlc9800 in RMI-RP mode can be managed by a virtual IP?

[ag199]

Hi All,

I've tried to configured two WLC9800 in RMI-RP mode but i'm not able to reach them by a Virtual IP ( like classic HA mode ). There is a way to manage both WLCs using a single HA IP ( that can be used also by ap for joining ) ? Or i must manage WLCs with 2 different IPs ( one for the chassis1, and other for chassis2 ) and join APs using 2 different capwap entries ? I've see that when WLC switchover, i can reach the new active unit only by its RMI IP. Same thing for the standby unit.

Model: 9800-CL ( appliance )

IOS: 17.3.1 Amsterdam

CONFIG DETAILS ----------------------------------------------

###### wlc 1

interface Vlan10

 ip address 100.151.40.246 255.255.255.128 secondary

 ip address 100.151.40.254 255.255.255.128

redun-management interface Vlan10 chassis 1 address 100.151.40.246 chassis 2 address 100.151.40.247

manag gateway-failover ena

ip default-gat 100.151.40.129

###### wlc 2

interface Vlan10

 ip address 100.151.40.247 255.255.255.128

redun-management interface Vlan10 chassis 1 address 100.151.40.246 chassis 2 address 100.151.40.247

manag gateway-failover ena

ip default-gat 100.151.40.129

-------------------------------------------------------

I'd like to reach both WLC with HA address: 100.151.40.254 ( also in caso of switchover )

Many Thanks

[ienajymy76 · Accepted solution]

SOLVED --

I found that the problem was related to a browser issue:

SEC_ERROR_REUSED_ISSUER_AND_SERIAL

Cause:

After HA configuration on both 9800 you are no more able to login through HA ip, but only on RMI IP.

With Firefox reset at factory:

Resolution on Windows:

1. Close all instances of Firefox
2. Delete C:\Users\%userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles\%profile.default%\cert_override.txt
3. Delete C:\Users\%userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles\%profile.default%\cert8.db
4. Open the web GUI to the controller and set exceptions (see below for workflow).