Wireless Access

Reply
Frequent Contributor II
Posts: 144
Registered: ‎01-21-2015

Need some clarity on VRRP

Hi all,

Currently I am trying to understand aruba VRRP and deployment model and really need some help from you guys.

I  set up a lab with two 7210 controller with master-active and master-backup topology [master redundancy].

Now some question is popping up in my heads.

1. If master and backup both goes down and backup come up first then who will hold the license?

2. Which IP I need to configure in Windows radius [Controller management ip or VRRP ip] ?

3. We have to publish VRRP ip using DHCP option 43 or not ?

4. Can I configure APs in different subnet than the VRRP ip?

5. For captive portal I have to manually configure everything on both controller [certs, custom html page]?

 

rana
Frequent Contributor II
Posts: 144
Registered: ‎01-21-2015

Re: Need some clarity on VRRP

someone please help me...

thanks

rana
Guru Elite
Posts: 8,322
Registered: ‎09-08-2010

Re: Need some clarity on VRRP

1. Controllers hold licenses for 30 days. The licenses will still live on the master, but the backup will still function.

2. Depends on how you source it under Authentication > Advanced

3. Yes, or via aruba-master.domain.xyz

4. Yes, APs should not be in the same subnet as the controller

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 951
Registered: ‎04-13-2009

Re: Need some clarity on VRRP


Rana wrote:

...

5. For captive portal I have to manually configure everything on both controller [certs, custom html page]?

 

Yep, certs are controller specific and so are custom captive portal pages (IIRC).

 

 

Cheers

James

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Need some clarity on VRRP

Hi Rana,

 

Here are the answers for your questions,

1. If master and backup both goes down and backup come up first then who will hold the license?

In this case, standby master will holds the responsibility and if the preemption is enabled, once the Primary master comes up it will take over.

 

2. Which IP I need to configure in Windows radius [Controller management ip or VRRP ip] ?

You mean, as a RADIUS client ? we should configure both master and standby as RADIUS clients in the server.

 

3. We have to publish VRRP ip using DHCP option 43 or not ?

Yes. we have to configure VRRP ip as the master IP, eitherthrough option 43 or DNS.

 

4. Can I configure APs in different subnet than the VRRP ip?

Off course we can. we should ensure that the VRRP ip is reachable from the AP :)

 

5. For captive portal I have to manually configure everything on both controller,

Need more clarity on this . you mean local user DB ? if so .it will be synced between Master and Standby :)

We have to configure only VLANs, DHCP, VLAN interfaces and routes in both the controllers manually.

 

Hope you answers fro all your questions, please feel free for any further query on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Frequent Contributor II
Posts: 144
Registered: ‎01-21-2015

Re: Need some clarity on VRRP

Thanks all of you.

When I enabled database synchronization somethins is not getting synced.

Is there any list of things which will not get sysned..

I found the below list of the things...

- VLANs
- VLAN interfaces
- Spanning tree configuration
- clock summer-time config
- certificate
- Custom captive portal page
- clock timezone
- login banner
- location setting
- tunnel interfaces
- snmp-server configurations
- ethernet port configurations
- port-channels

rana
Search Airheads
Showing results for 
Search instead for 
Did you mean: