Wireless Access

Hi,

I have 2 WLAN ctrl 7005. In the master I can see all my AP provisioned via DHCP, however in my backup ctrl I' m not able to provision the same AP. I'm new in ARUBA and I'm trying to set-up master and backup ctrl. Can you please aslo indicate a guide guide/best practice?

Thans

On the current master, do you see the backup as "backup master"?

The backup master has no function until it is a master. You cannot configure anything on it and you cannot view statistics. It just synchronized it's configuration with the master and waits until the master is no longer reachable to take over.

So, following thi guide

https://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/13066/1/Redundancy_Design_Guide.pdf

this is ehat I have done so far

 

 

(SMPWAP1) #show vrrp 


Virtual Router 1:
    Description 
    Admin State UP, VR State BACKUP
    IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
    Priority 100, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type NONE ********
    tracking is not enabled

(SMPWC2) #show vrrp 


Virtual Router 1:
    Description 
    Admin State UP, VR State BACKUP
    IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
    Priority 10, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type NONE ********
    tracking is not enabled

The only thing that I haven't done is the lms-ip because I don't have the command in my OS. So, Can you please tell me if something is missing from the conf? How can I see if the 2 AP are in sync?

Have you configured the master redudancy as well? See below for an example :

 

master-redundancy
master-vrrp 2
peer-ip-address 192.168.68.221 ipsec password123

!

 

This is explained further in the User Guide

What 192.168.68.221 stays for? Management IP interface of my controller? VRRP IP?

---

@Federico87 wrote:

So, following thi guide

https://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/13066/1/Redundancy_Design_Guide.pdf

this is ehat I have done so far

 

 

(SMPWAP1) #show vrrp 


Virtual Router 1:
    Description 
    Admin State UP, VR State BACKUP
    IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
    Priority 100, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type NONE ********
    tracking is not enabled

(SMPWC2) #show vrrp 


Virtual Router 1:
    Description 
    Admin State UP, VR State BACKUP
    IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
    Priority 10, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type NONE ********
    tracking is not enabled

The only thing that I haven't done is the lms-ip because I don't have the command in my OS. So, Can you please tell me if something is missing from the conf? How can I see if the 2 AP are in sync?

---

It seems that both controllers are in state backup, which could mean that a third device has control of the VRRP on that VLAN.  Do you have a separate router on that same subnet that is doing HSRP?  That router might have taken control of the VRRP on that VLAN.  I would configure your VRRP with the same password on both controllers, so that your router does not participate in the VRRP conversation.

Hi,

this is the actual status. Was a my copy/paste error

(SMPWC2) #show vrrp


Virtual Router 1:
Description
Admin State UP, VR State BACKUP
IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
Priority 10, Advertisement 1 sec, Preemption Enable Delay 0
Auth type NONE ********
tracking is not enabled

(SMPWAP1) #show vrrp


Virtual Router 1:
Description
Admin State UP, VR State MASTER
IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
Priority 100, Advertisement 1 sec, Preemption Enable Delay 0
Auth type NONE ********
tracking is not enabl

So..looking to my configration, wha remains to do?

(SMPWAP1) #show configuration | begin vrrp
vrrp 1
  ip address 10.222.123.254
  vlan 1230
  preempt delay 0
  no shutdown

vrrp 1
  priority 10
  ip address 10.222.123.254
  vlan 1230
  preempt delay 0
  no shutdown
!

Someone suggested to configure the master controlelr with an IP, but which IP should I put under master controller? IP manafement interface? Virtual VRRP IP?
Thanks

The .254 address is the VRRP or the virtual address that your access points will terminate on.  A controller that has priority will answer to that virtual address and handle access points.  That is the master.  The backup will answer at .254 when the master is unreachable.  You would set your aruba-master ip address to .254 so that when access points come up, they can terminate on the virtual ip address.  The VRRP only sets up ip address redundancy.  To setup redundancy where controller configurations are synchronized, you need to setup master redundancy.  To setup master redundancy, you need to configure the current master first, and the backup device second.  When you configure master redundancy, the global configuration on the backup will be replaced and synchronized with the configuration of the master, so configure the master controller first like this:

 

SWPWAP1:

config t

master-redundancy
master-vrrp 1

peer-ip-address <management ip address of swpwap2 on vlan 1230> ipsec password123

 

SWPWAP2:

config t

master-redundancy
master-vrrp 1

peer-ip-address <management ip address of swpwap1 on vlan 1230> ipsec password123

 

After you do that, you should be able to type "show switches" on WAP1 and see wap2 as a "backup master"

 

 

 

 

Hi,

First of all, thank you very much for your detailed answer.

So, following you indication, I still have problem to make the redudancy work

 

First controller (master)

 

(SMPWAP1) #show ip interface brief
Interface IP Address / IP Netmask Admin Protocol
vlan 1230 10.222.123.2 / 255.255.255.0 up up 

(SMPWAP1) #ping 10.222.123.3
Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 10.222.123.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0.275/0.34/0.508 ms
(SMPWAP1) #show switches
All Switches
------------
IP Address Name Location Type Model Version Status Configuration State Config Sync Time (sec) Config ID
---------- ---- -------- ---- ----- ------- ------ ------------------- ---------------------- ---------
10.222.123.2 SMPWAP1 Building1.floor1 master Aruba7005 6.4.4.5_54063 up UPDATE SUCCESSFUL 0 1
10.222.123.3 SMPWC2 Building1.floor1 standby Aruba7005 6.4.4.5_54063 up UPDATE SUCCESSFUL 8 1
Total Switches:2


(SMPWAP1) #show vrrp 


Virtual Router 1:
    Description 
    Admin State UP, VR State MASTER
    IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
    Priority 100, Advertisement 1 sec, Preemption Enable Delay 0
    Auth type NONE ********
    tracking is not enabled

Configuration

 

controller-ip vlan 1230

interface vlan 1230
	ip address 10.222.123.2 255.255.255.0
!
master-redundancy
  master-vrrp 1
  peer-ip-address 10.222.123.3 ipsec 8c50d77a6ed8e2d36d1463fb2baa06a8c1d8202c54afa07e
!
vrrp 1
  ip address 10.222.123.254
  vlan 1230                                       
  preempt delay 0
  no shutdown

Second controller (backup)

 

(SMPWC2) #show ip  interface brief 

Interface                   IP Address / IP Netmask        Admin   Protocol
vlan 1230                 10.222.123.3 / 255.255.255.0     up      up  

(SMPWC2) #ping 10.222.123.2
Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 10.222.123.2, timeout is 2 seconds:
!!!!!
Success 

(SMPWC2) #show switches 

All Switches
------------
IP Address    Name    Location          Type     Model      Version        Status  Configuration State  Config Sync Time (sec)  Config ID
----------    ----    --------          ----     -----      -------        ------  -------------------  ----------------------  ---------
10.222.123.3  SMPWC2  Building1.floor1  standby  Aruba7005  6.4.4.5_54063  up      UPDATE SUCCESSFUL    0                       1

Total Switches:1

Virtual Router 1:
 Description
 Admin State UP, VR State BACKUP
 IP Address 10.222.123.254, MAC Address 00:00:5e:00:01:01, vlan 1230
 Priority 10, Advertisement 1 sec, Preemption Enable Delay 0
 Auth type NONE ********
 tracking is not enabled

Configuration

 

controller-ip vlan 1230

interface vlan 1230
	ip address 10.222.123.3 255.255.255.0
!
master-redundancy
  master-vrrp 1
  peer-ip-address 10.222.123.2 ipsec 20ba409b68f513af9b2c32c7c88c71b7da2e6bd2acd3644b
!
vrrp 1
  priority 10
  ip address 10.222.123.254
  vlan 1230
  preempt delay 0
  no shutdown          

Thanks!

 

That looks correct!  If you are using DNS-Based discovery, make sure that aruba-master.<domain.com> points to 

10.222.123.254

Great! I don't use DNS-base discover,so I can skip it.

Coming back to my originale questiom, despite the conf seems ok, the backup still is not able to add access poit! What I'm missing again?

The backup cannot do anything at all unless the master fails....

Ok,
So, if I want add APs to the backup I need to shutdown the master, do my configuration and then resume my master controller. Is it correct?