To change the UAC and SUAC for a client in a cluster deployment

MVP
MVP
Requirement:

There could be scenarios were the user could connect properly on one controller but not on the other. In such case, we could try moving the client in question from one Controller to another in Cluster deployment for troubleshooting purpose and validate the behavior. 



Solution:

Cluster deployment provides WLAN admin the option to switch their UAC and SUAC.  Below are the steps to perform the same.

 

  • Check on MM using "global-user-table list | include <client-ip>" to identify on which controller the client is connected.
  • Check the current index value for the client mac-address using "show aaa cluster essid <essid> users"
  • Check the bucketmap for the SSID on which the user is connected to identify the UAC and SUAC "show aaa cluster essid <essid> bucketmap"
  • Now change the UAC for the client using "cluster-debug bucketmap essid <essid> bucketindex <index value> active <<0-11> standby <0-11> 

 



Configuration:
  • Check on MM using "global-user-table list | include <client-ip>" to identify on which controller the client is connected.
(VMM) [mm] (config) #show global-user-table list 

Global Users
------------
    IP              MAC            Name   Current switch  Role           Auth  AP name            Roaming   Essid      Bssid              Phy   Profile    Type   User Type
----------     ------------       ------  --------------  ----           ----  -------            -------   -----      -----              ---   -------    ----   ---------
10.23.195.229  e4:46:da:23:70:39          10.23.195.57    authenticated        ac:a3:1e:c6:36:38  Wireless  Corporate  ac:a3:1e:e3:63:80  g-HT  Corporate  Linux  WIRELESS

 

  • Check the current index value for the client mac-address using "show aaa cluster essid <essid> users"
(VMC) [MDC] #show aaa cluster essid 
<essid_val>             essid value

(Rohit-VMC-195.57) [MDC] #show aaa cluster essid Corporate users 

Active Users for ESSID : Corporate
-----------------------------------
BUCKET  MAC                IP             Active UAC    Standby UAC
------  ---                --             ----------    -----------
106     e4:46:da:23:70:39  10.23.195.229  10.23.195.57  10.23.195.62

 

  • Check the bucketmap for the SSID on which the user is connected to identify the UAC and SUAC "show aaa cluster essid <essid> bucketmap"
(VMC) [MDC] #show aaa cluster essid Corporate bucketmap 


Bucket map for Corporate, Rcvd at : Wed Feb  5 00:46:08 2020

---------------------------------------------------------------
Item                  Value
----                  -----
Essid                 Corporate
UAC0                  10.23.195.57
UAC1                  10.23.195.62
Active Map[0-31]      00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[32-63]     00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[64-95]     00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[96-127]    00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[128-159]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[160-191]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[192-223]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[224-255]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 

Standby Map[0-31]     01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[32-63]    01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[64-95]    01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[96-127]   01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[128-159]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[160-191]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[192-223]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[224-255]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 

L2connect[0-31]       1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[32-63]      1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[64-95]      1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[96-127]     1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[128-159]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[160-191]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[192-223]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[224-255]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

IsActive[0-31]        1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[32-63]       1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[64-95]       1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[96-127]      1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[128-159]     1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[160-191]     1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[192-223]     1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 
IsActive[224-255]     1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 

  • Now change the UAC for the client using "cluster-debug bucketmap essid <essid> bucketindex <index value> active <<0-11> standby <0-11> 
(VMC) [MDC] #cluster-debug bucketmap essid Corporate bucketindex 106 active 1 standby 0


Verification

Verify on which controller the client is connected to using "show global-user-table list" from MM

(VMM) [mm] (config) #show global-user-table list 

Global Users
------------
    IP              MAC            Name   Current switch  Role           Auth  AP name            Roaming   Essid      Bssid              Phy   Profile    Type   User Type
----------     ------------       ------  --------------  ----           ----  -------            -------   -----      -----              ---   -------    ----   ---------
10.23.195.229  e4:46:da:23:70:39          10.23.195.62    authenticated        ac:a3:1e:c6:36:38  Wireless  Corporate  ac:a3:1e:e3:63:80  g-HT  Corporate  Linux  WIRELESS

 

Check the current UAC and SUAC using "show aaa cluster essid <essid> users"

(VMC) [MDC] #show aaa cluster essid Corporate users 

Active Users for ESSID : Corporate
-----------------------------------
BUCKET  MAC                IP             Active UAC    Standby UAC
------  ---                --             ----------    -----------
106     e4:46:da:23:70:39  10.23.195.229  10.23.195.62  10.23.195.57

 

Verify the buckmap change using "show aaa cluster essid <essid> bucketmap"

(VMC) [MDC] #show aaa cluster essid Corporate bucketmap 


Bucket map for Corporate, Rcvd at : Wed Feb  5 00:43:54 2020

---------------------------------------------------------------
Item                  Value
----                  -----
Essid                 Corporate
UAC0                  10.23.195.57
UAC1                  10.23.195.62
Active Map[0-31]      00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[32-63]     00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[64-95]     00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[96-127]    00 01 00 01 00 01 00 01 00 01 01 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[128-159]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[160-191]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[192-223]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 
Active Map[224-255]   00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 

Standby Map[0-31]     01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[32-63]    01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[64-95]    01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[96-127]   01 00 01 00 01 00 01 00 01 00 00 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[128-159]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[160-191]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[192-223]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 
Standby Map[224-255]  01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 01 00 

L2connect[0-31]       1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[32-63]      1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[64-95]      1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[96-127]     1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[128-159]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[160-191]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[192-223]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 
L2connect[224-255]    1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 

IsActive[0-31]        0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[32-63]       0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[64-95]       0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[96-127]      0 1 0 1 0 1 0 1 0 1 1 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[128-159]     0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[160-191]     0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[192-223]     0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
IsActive[224-255]     0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 
Version history
Revision #:
2 of 2
Last update:
‎02-17-2020 10:48 AM
Updated by:
 
Labels (1)
Contributors