Wireless Access

Reply
Contributor II
Posts: 90
Registered: ‎12-06-2014

Controller High Avaialbility

Hello, Im going to be setting up a new 7200 controllers for HA to an active already configured 7200. Active/standby configuration. I see how to complete this in the user guide. A few questions I dont see or overlooked are: 

 

When the second controller is setup in the HA group as standby, does the config from the active controller sync to the standby? 

After the HA group and config - is a controller reboot required? 

As for inter-controller heartbeat, is there a crossover cable that needs to be connected between the 2 controllers? 

 

thanks 

Guru Elite
Posts: 8,322
Registered: ‎09-08-2010

Re: Controller High Avaialbility

1) no, this is done via the master/local relationship or the master/backup relationship

2) no reboot required 

3) inter-controller heartbeats are sent over the existing network. 


Thanks, 
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 90
Registered: ‎12-06-2014

Re: Controller High Availability

So if I make one controller active, does it take the master role and the standby becomes backup, or do I need to configure that separately?

Jeremy Rouse
Technical Specialist II, Bird Rock Systems, Inc.
Phone: (858) 346-1384

"We Build Rock Solid Solutions"
www.birdrockusa.com
Guru Elite
Posts: 8,322
Registered: ‎09-08-2010

Re: Controller High Availability

If you are doing master-local and the LMS-IP is pointed to the local, the APs will build a standby tunnel to the master when you assign an HA group. 


Thanks, 
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 90
Registered: ‎12-06-2014

Re: Controller High Availability

Ok, so I take it you're telling me that redundancy (master/local) is a requirment before building an HA group?

Guru Elite
Posts: 8,322
Registered: ‎09-08-2010

Re: Controller High Availability

No. It's just the more common method.

 

If you are doing master/master-standby, you can still use AP fast failover, but intercontroller heartbeats are not supported for this topology.

 

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 90
Registered: ‎12-06-2014

Re: Controller High Availability

thanks resolved 

Occasional Contributor II
Posts: 12
Registered: ‎09-21-2016

Re: Controller High Availability

I think this is the part where I get a little mixed up.

 

If using master-backup master (no locals) configuration and ultimately using HA, then what IP is passed to the APs as the standby controller.

 

For the example configuration below (for my lab environment)

 

interface vlan 1
        ip address 10.3.1.99 255.255.255.0

 

master-redundancy
  master-vrrp 1
  peer-ip-address 10.3.1.249 ipsec 38abf8a843e037c768d137a778b65eed67f6cf96dc6903b6

 

vrrp 1
  priority 110
  ip address 10.3.1.250
  vlan 1
  no shutdown

 

ha group-profile "HA Group 1"
   preemption
   state-sync
   pre-shared-key b5ea51fbaaeee697dc7e290426df8eb71d601534bac85c53
   controller 10.3.1.249 role standby
   controller 10.3.1.99 role active

 

 

Essentially I would provide the LMS IP for an AP group as the 10.3.1.99 address, and it will provide 10.3.1.249 as the standby controller. Totally ignoring the VRRP address of 10.3.1.250.

 

Limited lab, so I'm not sure if I can actually produce a failover situation to see if this works. I'm looking to see what configuration the AP received.

 

Occasional Contributor II
Posts: 12
Registered: ‎09-21-2016

Re: Controller High Availability

[ Edited ]

I've clarified my own confusion by carefully reading (and re-reading the User Guide). It would totally ignore VRRP address.

 

ap-system profile would have to be configured as such

lms-ip 10.3.1.99

bklms-ip 10.3.1.249

 

posted config was correct for the most part except the following corrections

 

ha group-profile "HA Group 1"
   preemption
   state-sync
   pre-shared-key b5ea51fbaaeee697dc7e290426df8eb71d601534bac85c53
   controller 10.3.1.249 role dual
   controller 10.3.1.99 role dual

 

Can someone verify my statements?

Search Airheads
Showing results for 
Search instead for 
Did you mean: