Wireless Access

We have upgraded our 2 x 3200 controllers to version 6.3.1.11.  Both were running as active/active without any issues.

The moment the second controller was upgraded (Primary) the VRRP address was unreachable.

1. Both controllers act as Standby Controllers now. - No APs can associate.

2. Master IP Address cannot be reached. (VRRP)

3. Controllers can ping eachother and even IKE handshake phase 1 and 2

4. No configuration was changed.

The setup is simple.

Controller 1

Master VRRP 1

Peers IP 172.16.1.132

Authentication IP SEC

Peers Key xxx

Controller 2

Master VRRP 1

Peer IP 172.16.1.131

Authentication IP SEC

Peers Key xxx

VIRTUAL ROUTER TABLE

Name: 1

IP address 172.16.1.130

VLAN 44

Admin: Up

ep 28 06:48:44 isakmpd[1585]: <103062> <INFO> |ike| 172.16.1.131:500-> IKE Aggressive Mode Phase 1 succeeded for peer 172.16.1.131
Sep 28 06:48:44 isakmpd[1585]: <103007> <INFO> |ike| IKE Aggressive Mode Phase 1 succeeded for peer 172.16.1.131
Sep 28 06:48:46 cfgm[1530]: <307218> <INFO> |cfgm| CFGM IPSEC src_net:0.0.0.0:0.0.0.0 dst_net:0.0.0.0:0.0.0.0 vlan:0 mac1: mac2: caCert: serverCert: suitBalgo:0 credType:0
Sep 28 06:48:56 fpapps[1762]: <208078> <INFO> |fpapps| LACPDU received on invalid port 1/0 intIfNum 1
Sep 28 06:49:00 cfgm[1530]: <399815> <INFO> |cfgm| Cannot connect to the master 172.16.1.131 error Operation already in progress errno 149 socket id 18
Sep 28 06:49:00 cfgm[1530]: <307242> <INFO> |cfgm| Failed to connect to the Master (172.16.1.131),Configuration socket will try again: Operation already in progress
Sep 28 06:49:00 cfgm[1530]: <307103> <INFO> |cfgm| send_tcp_hb_master 112 Connection to the master failed, Will retry socket ID 18 state CONFIG_SOCKET_NOTCONNECTED
Sep 28 06:49:01 cfgm[1530]: <307218> <INFO> |cfgm| CFGM IPSEC src_net:0.0.0.0:0.0.0.0 dst_net:0.0.0.0:0.0.0.0 vlan:0 mac1: mac2: caCert: serverCert: suitBalgo:0 credType

Sep 28 16:39:31 stm[1645]: <305018> <WARN> |stm| Switch is backup master; ignoring AP request

I've had to remove one from the network and use the other as a standalone.

Any ideas or suggestion?

Thanks

What is the 'show vrrp' for both the controllers?

Have you tried on one of them to shutdown the vrrp?

There is no VRRP setting for the current active controller.  Had to get wireless network up and running.

By shut down you mean force admin state to DOWN ? or?

Please note that the Primary also is  BACKUP state....

Here is the inactive unit output

Virtual Router 1:
Description Backup
Admin State UP, VR State BACKUP
IP Address 172.16.1.130, MAC Address 00:00:5e:00:01:01, vlan 301
Priority 100, Advertisement 1 sec, Preemption Enable Delay 0
Auth type NONE ********
tracking type is master-up-time, duration 30 minutes, value 20
tracked priority 100

Will try again tonight and send output as well as shut down the VRRP on one unit.

Thanks

VRRP was in shut down state on both controllers.

Cannot unshut them, and I also lose connectivity via CLI to the controller after a minute.

Tried setting up on one contorller with the other shut down, didnt work either.

Controller refueses to bring up VRRP and remains in backup state.

Reloaded older code 6.3.1.7 and with the same settings its working.

Keeping this version for now.