Wireless Access

Hello

I have two 3600 controller configured in Master / Backup thanks to VRRP.

I owns licenses for only one controller, these licenses are enabled on the Master for the management of access points.
Do I only activate the "Centralized-licensing-enable" function to ensure that my Master Controller provides its licenses Controller Backup in case of failure of the Master?

I also turn this feature on the Backup, am I right?

 

Laetitia,

PS: Do not speak English well, I went through the Google translator ...

 

#3600

---

@laetitia wrote:

Hello

I have two 3600 controller configured in Master / Backup thanks to VRRP.

I owns licenses for only one controller, these licenses are enabled on the Master for the management of access points.
Do I only activate the "Centralized-licensing-enable" function to ensure that my Master Controller provides its licenses Controller Backup in case of failure of the Master?

I also turn this feature on the Backup, am I right?

 

Laetitia,

PS: Do not speak English well, I went through the Google translator ...

 

---

If you  already have a master/backup master configured, you only need to Activate the "centralized-licensing-enable" function on the master.  It will be enabled automatically on the backup master AND the local controllers.  Just make sure that you click on "save configuration" or type "write mem" after you execute that, so that the locals and the backup master can get the configuration change.

 

You should be ok.

Master Backup is compulsory for centralized licensing ? Can't we do that if you we have only two controller's configured in VRRP mode where one is active and secondary is redundant ?

We have this architecture there precisely: just two controllers in Master / Backup thanks to VRRP. I do not have a Local Controller.

All my AP is managed by the master. 

 

Tomorrow, I will test the centralized licensing and especially check my AP continue to operate after you have disconnected the VRRP-Master.
If all goes well, the AP (normally managed by the VRRP-Master) should be managed by the VRRP-Backup (now Master).

 

In fact, I can not quite understand how the VRRP-backup recovers licenses if the VRRP-Master (which has licenses) is no longer on the network ... If someone can explain to me, just for my knowledge base ....

Please share your experience after testing.

laetitia how did this all work out for you?

Sorry, I completely forgot and post the results of my test.

It went great! I only lost 2 ping when I turn off my main controller.
My controller backup then took control of my AP though I have no license installed on it: virtualization licensing works perfectly well.

Hello,

 

I have the exact same situation here ... With 2 master controllers, but when I shut down my master one, the backup is becoming the new master but the licence is not copied to the standby, and my AP's are lost ...

I just enabled centralized license feature like you did. 

 

Do I have a way to verify my config ?

I probably missed something ....

You need to run these commands on the backup controller when it becomes the master.  

 

show license aggregate
show license server-table
show license client-table
show license-usage client
show license-usage ap 

 It is possible that you do not have master redundancy configured properly.  On the existing master, you should type "show switches" to see if you see the standy switch.

Here is the config of the standby when it becomes active :

 

(GRBWLC02) #show license aggregate

Aggregate License Table
-----------------------
Hostname IP Address AP PEF RF Protect xSec Module ACR WebCC Last update (secs. ago)
-------- ---------- --- --- ---------- ----------- --- ----- -----------------------
GRBWLC02 172.16.100.3 0 0 0 0 0 0 13

Total AP License Count :0
Total PEF License Count :0
Total RF Protect License Count :0
Total XSEC License Count :0
Total ACR License Count :0
Total WebCC License Count :0

(GRBWLC02) #show license server-table

License Server Table
--------------------
Service Type Aggregate Lic. Used Lic. Remaining Lic.
------------ -------------- --------- --------------
Access Points 62 0 62
Next Generation Policy Enforcement Firewall Module 62 0 62
RF Protect 0 0 0
xSec Module 0 0 0
Advanced Cryptography 0 0 0
WebCC 0 0 0

(GRBWLC02) #show license client-table

Built-in limit: 0
License Client Table
--------------------
Service Type System Limit Server Lic. Used Lic. Contributed Lic. Remaining Lic.
------------ ------------ ----------- --------- ---------------- --------------
Access Points 256 0 0 0 0
Next Generation Policy Enforcement Firewall Module 256 0 0 0 0
RF Protect 256 0 0 0 0
xSec Module 4096 0 0 0 0
Advanced Cryptography 4096 0 0 0 0
WebCC 256 0 0 0 0

(GRBWLC02) #show license-usage client

License Clients License Usage
-----------------------------
Hostname IP Address AP Lic. Used PEF Lic. Used RF Protect Lic. Used xSec Lic. Used ACR Lic. Used WebCC Lic. Used Last update (secs. ago)
-------- ---------- ------------ ------------- -------------------- -------------- ------------- --------------- -----------------------
GRBWLC02 172.16.100.3 0 0 0 0 0 0 8
172.16.100.2 0 0 0 0 0 0 24

Total AP Licenses Used :0
Total PEF Licenses Used :0
Total RF Protect Licenses Used :0
Total XSEC Licenses Used :0
Total ACR Licenses Used :0
Total WebCC Licenses Used :0
Total no. of clients :2

(GRBWLC02) #show license-usage ap

AP Licenses
-----------
Type Number
---- ------
AP Licenses 62
PEF Licenses 62
Overall AP License Limit 62

AP Usage
--------
Type Count
---- -----
Active CAPs 0
Standby CAPs 0
RAPs 0
Remote-node APs 0
Tunneled nodes 0
Total APs 0

Remaining AP Capacity
---------------------
Type Number
---- ------
CAPs 62
RAPs 62

 

 

But it looks like the AP's are still not coming back...

What does "show log system 50" and "show ap database" say?

Nothing special on the log system 50, that's why I cleared the config and did it again and this time this is working.

When the primary goes down, I have 30 days to replace it , right ?

Hey, a client controller retains its licensing information for 30 days after it loses contact with the licensing server, if the client reboots at any time during this 30-day window, the window will restart, and the client will retain its information for another 30 days.

Oh really ? That's strange but that looks cool, thank you.

I have 4 interfaces on the master WLC, but when it goes down, the standby doens't have these interfaces, it only has the management interface, so how the client traffic can still work ?

 

AL

VLANs, ip addreses and interfaces are not replicated in the global configuration and must be configured manually on the backup controller.

Alright, with a different IP address or the same ?

I mean, let's say we have on the WLC 1 :

 

VLAN 100 : 172.16.100.1

VLAN 101 : 172.16.101.1

 

Do I have to configure on the WLC 2 :

 

VLAN 100 : 172.16.100.1 or .2 ?

VLAN 101 : 172.16.101.1 or .2 ?

Different.  They must be unique.

Ok thank you, I will correct that