Wireless Access

I have 2 x 7010 controllers in a DMZ supplying corporate wireless access via RAP.  I've upgraded to OS8.2.1.0 from 6.4, there's no MM in this part of the network so i've gone with standalone MC's and master redundancy (similar to 6.4) however when I've set up the HA with a master and standby LMS in the group i'm not seeing the standby IP in the sh ap database command and nor am I seeing any information when I do a sh ha ap table.  Does HA work with RAP's in this scenario?  I've seen on a much earler post that in 6.4 HA does not work with RAP's is it the same for OS8?

There is no "HA" for Raps in AOS8 orAOS 6.  You just use LMS-ip and backup LMS-ip, but a standby tunnel is not created on the second controller.  The "HA" Campus concept does not translate for RAPs.

so no point in setting up an HA group then?

Not with remote APs, no.

Also, clustering does not work with RAPs currently either.  So an MM and clustering will also not help you right now.  Just an FYI.

ok no problem - back to VRRP failover then for the mo!

Many thanks

You can do VRRP failover if there is no firewall between the AP and the VRRP (the controllers have public ip addresses as well as a VRRP addressed on them).  It is preferable to point a RAP to a DNS a-record that has two ip addresses, that way the AP will either get both ip addresses and try one after the other, or the DNS round-robins and gives the RAP a different address for each request.

The RAP's are pointing at a DNS address which is the IP of the VRRP but all 3 external IP addresses (Controller 1, Controller 2 & VRRP) are allowed through the firewall

That probably is fine.