WLC 5508 HA is not happening

[kamlenegi]

Hi,

Can anyone suggest me what could be the cause of below error:

(Cisco Controller) >show redundancy summary
            Redundancy Mode = SSO ENABLED
                Local State = MAINTENANCE
                 Peer State = UNKNOWN - Communication Down
                       Unit = Primary
                    Unit ID = 80:E0:1D:C0:8F:E0
           Redundancy State = Non Redundant
               Mobility MAC = 80:E0:1D:C0:8F:E0
Maintenance Mode = Enabled
Maintenance cause= Incompatible Software license

both controller software version: 7.6.130

Detail of Primary controller IP address:

(Cisco Controller) >show redundancy summary
            Redundancy Mode = SSO ENABLED
                Local State = ACTIVE
                 Peer State = UNKNOWN - Communication Down
                       Unit = Primary
                    Unit ID = 80:E0:1D:C0:91:C0
           Redundancy State = Non Redundant
               Mobility MAC = 80:E0:1D:C0:91:C0

Redundancy Management IP Address................. x.x.x.13
Peer Redundancy Management IP Address............ x.x.x.14
Redundancy Port IP Address....................... 169.254.11.13
Peer Redundancy Port IP Address.................. 169.254.11.14

(Cisco Controller) >show license summary

License Store: Primary License Storage
StoreIndex:  0  Feature: base                              Version: 1.0
        License Type: Permanent
        License State: Active, Not in Use
        License Count: Non-Counted
        License Priority: Medium
License Store: Primary License Storage
StoreIndex:  1  Feature: base-ap-count                     Version: 1.0
        License Type: Permanent
        License State: Active, In Use
        License Count: 25 /25 (Active/In-use)
        License Priority: Medium
License Store: Evaluation License Storage
StoreIndex:  0  Feature: base-ap-count                     Version: 1.0
        License Type: Evaluation
        License State: Inactive
            Evaluation total period:  8 weeks  4 days
            Evaluation period left:  8 weeks  4 days
        License Count: 500 / 0 (Active/In-use)
        License Priority: None

HA controller IP address:

Redundancy Management IP Address................. x.x.x.14
Peer Redundancy Management IP Address............ x.x.x.13
Redundancy Port IP Address....................... 169.254.11.14
Peer Redundancy Port IP Address.................. 169.254.11.13
 

(Cisco Controller) >show license summary

License Store: Primary License Storage
StoreIndex:  0  Feature: base                              Version: 1.0
        License Type: Permanent
        License State: Active, Not in Use
        License Count: Non-Counted
        License Priority: Medium
License Store: Evaluation License Storage
StoreIndex:  0  Feature: base-ap-count                     Version: 1.0
        License Type: Evaluation
        License State: Active, Not in Use, EULA not accepted
            Evaluation total period:  8 weeks  4 days
            Evaluation period left:  8 weeks  4 days
        License Count: 500 / 0 (Active/In-use)
        License Priority: None

Thanks

Kamlesh

[Leo Laohoo]

Maintenance cause= Incompatible Software license

Uhhhh ... That's because both units are running 500 AP license.   

I think you need to contact your authorized Cisco SE/AM because if you're going to "convert" one (of the two WLC) to HA SKU then you're going to LOOSE 450 APs in license.  

The HA unit must only have 50 AP license in order to be converted with an HA license.

[Scott Fella · Accepted solution]

To me it seems like your primary does have license of 25 and your HA doesn't.  Now if the HA unit is indeed an HA sku, then you don't need to have any license and all you have to do is enable secondary unit: config redundancy unit secondary.  If the HA unit is not an HA sku, then you need a minimum of 50 ap license.  The sku on the box for the HA should have this part number: air-ct5508-ha-k9.  This will only be found on the box and not on the unit itself. 

-Scott

[kamlenegi]

Thanks Scott,

air-ct5508-ha-k9 is mentioned in packing box.

so I need to config HA unit: config redundancy unit secondary.

then : config redundancy mode sso  in both wlc.

then it will come up, or do I need some more configuration.

Thanks

Kamlesh

[Rahul O S]

Do u see the secondary unit online when you take the console.

Can you check the the ether channel settings on the switches too.

Regards

Rahul O.S
 

[kamlenegi]

Hi Rahul,

It is resolved, I was missing config redundancy unit secondary command in secondary box.

do you know the communication between AP & WLC through capwap? it is certificate base authentication or what would be the certification validation period? what happen when if certificate expire?

thanks

kamlesh

[Rahul O S]

Hi

please let me know what information do you need on AP & WLC thru capwap.

regards

rahul o.s

[kamlenegi]

Hi Rahul,

Actually I have seen certificate expiration date after 10 years, what will happen after 10 years between AP & WLC? will both communicate or not?

start date: 22:35:31 UTC Aug 27 2015
end   date: 22:45:31 UTC Aug 27 2025

Thanks

Kamlesh

[Rahul O S]

To allow additional usage of hardware, beyond the 10 year certificate date, Cisco is providing a software maintenance release with a feature to ignore the validity period of the certificates in the CAPWAP authentication process.

Maintenance releases with the feature to ignore the validity period of the certificates are being created for AireOS 7.0, 7.4 and 8.0.

Cisco has released the fix to Cisco.com in AireOS 7.0.252.0 and 7.4.140.0

Cisco will release to Cisco.com a rebuild of AireOS 8.0 (as version 8.0.120.0) before July 2015.

*Note: Cisco has a beta version of AirOS 8.0 MR2 that does contain the needed commands to work around this issue and can be used until the official AireOS 8.0 MR2 (8.0.120.0) is released on Cisco.com, see the following URL for details:

https://supportforums.cisco.com/document/12492986/80mr2-beta-availability

Regards

Rahul

[kamlenegi]

Hi Scott,

You were right, HA build after giving config redundancy unit secondary command.

Thanks

[mohanak]

Refer link : https://supportforums.cisco.com/discussion/11733166/cisco-wlc-5508-ha-ap-sso-not-possible