Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Some elements of Master/Local config out of sync (access policy)

This thread has been viewed 4 times

  • 1.  Some elements of Master/Local config out of sync (access policy)

    Posted Jan 02, 2014 07:12 AM

    Have a new pair of 7220's (running v6215) configured as Master/Local and the access policy/firewall on the local does not reflect what is configured on the Master.  I would expect changes made on the master to propogate to the local when applied/saved, which is certainly the case on our older 6000 setup. 

     

    Other elements of the config appear to sync ok, and they are aware of each other.

     

     

     

     

     

     


    #7220


  • 2.  RE: Some elements of Master/Local config out of sync (access policy)

    EMPLOYEE
    Posted Jan 02, 2014 07:43 AM
    @$k3l3t0r wrote:

    Have a new pair of 7220's (running v6215) configured as Master/Local and the access policy/firewall on the local does not reflect what is configured on the Master.  I would expect changes made on the master to propogate to the local when applied/saved, which is certainly the case on our older 6000 setup. 

     

    Other elements of the config appear to sync ok, and they are aware of each other.

     

     

     

     

     

     

    Which elements?  There are some elements that are Global and Some elements that are local to the specific controller.

    If you type "show switches" on the commandline of the master it will tell you who is in synch and who is not.   If you type "write mem" on the master controller it will synch your controllers.


    #7220


  • 3.  RE: Some elements of Master/Local config out of sync (access policy)

    Posted Jan 02, 2014 07:49 AM

    For example on our exisitng 6000 if I create a new firewall policy, then apply and save.. it pushes this down the the attached locals, this isnt happening on the 7220's, in fact the firewall config on the local looks like the bare out of box config.  Must point out, the 7220's isnt part of a live setup at the mo.. they are just being configured for testing etc...


    #7220


  • 4.  RE: Some elements of Master/Local config out of sync (access policy)

    EMPLOYEE
    Posted Jan 02, 2014 07:52 AM
    Do they all have firewall licenses?


  • 5.  RE: Some elements of Master/Local config out of sync (access policy)

    Posted Jan 02, 2014 07:56 AM

    Cant actually check right now, as Ive killed connectivity to the local, and will need a visit!  We had tech support in assisting with initial config, and I believe they installed licensing on the master and was told its not necessary on the local due to a new centralised licensing... 



  • 6.  RE: Some elements of Master/Local config out of sync (access policy)

    EMPLOYEE
    Posted Jan 02, 2014 08:03 AM

    Centralized licensing is off by default, so you would have had to turn it on, on the master for it to flow to the local.  Please check this on the master.

     



  • 7.  RE: Some elements of Master/Local config out of sync (access policy)

    Posted Jan 03, 2014 06:24 AM

    Having probs locating this on the master to enabel?? 



  • 8.  RE: Some elements of Master/Local config out of sync (access policy)
    Best Answer

    Posted Jan 03, 2014 07:23 AM

    Hi

     

    You'll need 6.3 and above for centralised licensing

     

    Cheers



  • 9.  RE: Some elements of Master/Local config out of sync (access policy)

    Posted Jan 03, 2014 07:27 AM

    Literally just this second found that out :-)

     

    We had been told by Aruba that this was available in 6.2!  Hmm.. 6.3 is early release too... nice.. beta testing in corporate environment!



  • 10.  RE: Some elements of Master/Local config out of sync (access policy)

    Posted Jan 03, 2014 07:34 AM

    It's early release yes, but I have got a lot of customers using it. 

     

    Maybe you could speak to your local SE and see if you can get an eval PEF license while you wait for 6.3 to go GA?



  • 11.  RE: Some elements of Master/Local config out of sync (access policy)

    Posted Jan 06, 2014 05:42 AM

    All sorted now.. thanks for your assistance/advice!  :smileyhappy: