Wireless Access

Reply
Occasional Contributor II
Posts: 17
Registered: ‎07-25-2011

Deploying 2nd Controller with redundancy?

Hi 1st post, I'm in the process of planning deployment of a  2nd 3600 controller. We are adding for increased capacity and redundancy. Currently our AP's are deployed over multiple logical segments, 10.x.x.x. & 172.x.x.x.. I'm not sure how best to proceed. Would creating multiple VRRP interfaces relative to the respective logical segments work? Or would it be better to consolidate the AP's on a single segment and have just that VRRP configuration? Thanks in advance.

Frequent Contributor II
Posts: 108
Registered: ‎08-31-2010

Re: Deploying 2nd Controller with redundancy?

I have a pair of controllers and I am moving towards a master/local configuration. What I do know is check out the VRDs for your implementation. I am going my way so I could get APs to register with both controllers at the same time for load sharing. Add for the APs in my setup the are all on other subnets and I have done the DNS entry for aruba-master so they know where to register (which is a vrrp address). If you go master/active master/standby no APs can register with the standby... Not sure if that helps?
Aruba Employee
Posts: 148
Registered: ‎11-25-2009

Re: Deploying 2nd Controller with redundancy?

I completly agree with Nik. 

 

If you have 2 controllers, its good to do a Master/Local and load balance the APs. and use the LMS and Bkp-Lms or VRRP  or both  to switch between the controllers in case of redundancy. please check the the following VRD. 

 

http://www.arubanetworks.com/pdf/technology/VRD_Aruba%20Mobility%20Controllers_8.pdf

Vinod Kumaar AVM ACMX, ACDX
Principal Network Engineer
Customer Advocacy | Aruba Networks Inc.

Did something you read in the Community solve a problem for you? If so, click "Accept as Solution" in the bottom right hand corner of the post.
Occasional Contributor II
Posts: 17
Registered: ‎07-25-2011

Re: Deploying 2nd Controller with redundancy?

I understand the load balancing with the Master/local and plan to take advantage of that. I've been reading the recommended VRD and it seems to indicate in an 802.1X authentication environment, which we are mostly, that having a single AP VLAN is recommended. Which would seem to answer my initial question. Does anyone have any other thoughts or input relative to configuring VRRP's on multiple segments with 802.1X authentication?

Frequent Contributor II
Posts: 108
Registered: ‎08-31-2010

Re: Deploying 2nd Controller with redundancy?

Look into using vlan pools which tie into the vap configuration, and maybe if you can get these vlans routed by the core lan switch this may be a bit easier? Just a suggestion that might work for you?
Guru Elite
Posts: 21,492
Registered: ‎03-29-2007

Re: Deploying 2nd Controller with redundancy?


bjackson wrote:

I understand the load balancing with the Master/local and plan to take advantage of that. I've been reading the recommended VRD and it seems to indicate in an 802.1X authentication environment, which we are mostly, that having a single AP VLAN is recommended. Which would seem to answer my initial question. Does anyone have any other thoughts or input relative to configuring VRRP's on multiple segments with 802.1X authentication?


You do not need multiple VRRPs on multiple segments.  No matter what subnet an AP is in, it still contact the controller or controllers on the same ip address.  The controller does not need an ip address on every subnet where APs reside; the access points only need to be able to route to the management ip address of the controller.  Sometimes it is not practical to have an instance of the same VLAN at every location where you need an AP, so being able to put an AP on ANY vlan, as long as it can route to the controller keeps you from having to redesign your network to accomodate access points.

 

 

I hope this makes sense.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 17
Registered: ‎07-25-2011

Re: Deploying 2nd Controller with redundancy?

Thanks, that did make sense and reduced my confusion. ;-).

What about the VRD recommending a single VLAN when using 802.1X authentication? We've been doing that over two VLAN's with acceptable performance to date.

Guru Elite
Posts: 21,492
Registered: ‎03-29-2007

Re: Deploying 2nd Controller with redundancy?


bjackson wrote:

Thanks, that did make sense and reduced my confusion. ;-).

What about the VRD recommending a single VLAN when using 802.1X authentication? We've been doing that over two VLAN's with acceptable performance to date.


I would say it is there just to make is easier, but it will certainly work very well with the way you have it.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: