how to connect wlc 5508 on 2 switches for redundancy

Answered Question
Nov 26th, 2009
User Badges:

Hi, i plan implementation of WLC5508, but in documentation is not clear how to connect WLC5508 on two chassis for redundancy. I do it with WLC4404, where I have option to choose primary and backup port for managemant interface. I understand that in 5508 managemant interface is not mapped to any port.

Correct Answer by weterry about 7 years 4 months ago

You can still define primary/secondary ports as long as you don't have LAG enabled. If you are trying to use two different switches then you shouldn't have LAG enabled anyway (unless it is a 3750 stack or vss)


You can still define multiple AP-Managers as well.  The Management interface, by default, is an ap-manager but it will not be an ap-manager on the backup port if you have an ap-manager defined for that port.....   Make sense?


Just think of the 5508 ports defined like a 4400, except that you don't have to have an AP-manager for each port unless you want one..

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Leo Laohoo Thu, 11/26/2009 - 15:50
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

Configuring Link Aggregation (or LAG) in a WLC4400 or 5508 is equivalent to configuring Etherchannel.  It's recommended to use LAG if, for example, your WLC is connected to a 2975 or 3750/3750-E switch stack or a 6500VSS.


Enabling Link Aggregation (LAG)
https://www.cisco.com/en/US/docs/wireless/controller/6.0/configuration/guide/c60mint.html#wp1277652

Correct Answer
weterry Thu, 11/26/2009 - 19:11
User Badges:
  • Silver, 250 points or more

You can still define primary/secondary ports as long as you don't have LAG enabled. If you are trying to use two different switches then you shouldn't have LAG enabled anyway (unless it is a 3750 stack or vss)


You can still define multiple AP-Managers as well.  The Management interface, by default, is an ap-manager but it will not be an ap-manager on the backup port if you have an ap-manager defined for that port.....   Make sense?


Just think of the 5508 ports defined like a 4400, except that you don't have to have an AP-manager for each port unless you want one..

dejash123 Sat, 11/28/2009 - 04:21
User Badges:

What confuses me is the part in config guide for WLC 6.0 that says for managemant and dynamic interfaces:

configure:

...

...

-Physical port assignement (for all controllers exept the 5500 series)

...


so i guess it means that you can not map managemant and dynamic interface on physical port.



In my lab I have 4402,

management on vlan 101 (primary port 1, sec 2)

ap-manager - vlan 101

dynamic int. on vlan 69,74 (pri 1, sec 2),79,650 (pri 2, sec 1)

port 1 is on switch 1

port 2 is on switch 2



If I don't have configuration option of physical assignement for managemant and dynamic int. on 5508, I'm in trouble.

Scott Fella Sun, 11/29/2009 - 09:09
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

Dejash123,


You can setup the 5508 just like any other WLC.  It's the code that will determine what you can and can't do.  Here is a link showing a configuration example with dynamic interfaces on seperate ports:


http://www.cisco.com/en/US/partner/docs/wireless/controller/6.0/configuration/guide/c60mint.html#wp1278779


Is there are reason you do not want to use LAG?


Hope this answers your question.

andres.lorat Thu, 09/02/2010 - 12:06
User Badges:

Hi, how are you?.

I am beginning to install 1 wlc 5508 with 2 Switches.  My idea is to use multiple interfaces AP Manager. Since a connection of the WLC will go to  SW1 and the other to the SW2.  In our network SSIDs will be 2. I have doubts as I must configure the ports of the WLC5508.  How many interfaces AP-Manager i must configure?.  These interfaces AP-Manager  must be associate to a physical port. The interfaces management and interfaces of SSIDs must leave all in the same port(trunk)?.


Sorry by my doubts.

Thanks.

Andres.

scott.stapleton Sun, 11/29/2009 - 23:50
User Badges:

The last time I tried LAG on a 4402, it did not function properly with VSS. APs would keep bouncing. The switch was configured with whatever load balancing algorithm was suggested in the config guide and other such LAG advice was followed. A TAC call suggested that it was not supported.

dejash123 Thu, 04/08/2010 - 01:38
User Badges:

Hi Weterry,


you're right, I do not use LAG, I have the management interface (primary port 1 - backup port 2) that act like AP-manager and AP-manager 2 for port 2, just like I do on 4402, but sometimes the clients who are associated to the AP's that are on port 2 can not authenticate.


Is it a bug on 5508?


I tried without AP-manager 2 and I think it works.


I have not read anywhere a clear explanation that is not necessery to have an AP-manager for 5508 unless you want one.


By the way I still have a problem with that strict CPU ACL if you remember.

dejash123 Fri, 03/26/2010 - 06:23
User Badges:

Thank you all for your answers but I still have a problem.


Some of you have suggested LAG, but I have redundancy between the two chassis (2 Cisco Cat 4500 switches), not between the two modules of one chassis.

I tried to make the design as it is a WLC4402, but even if everything worked well in the lab with 4402 does not behave well on 5508.

Now on 5508 I have:


management interface (ap-manager enable) - VLAN 101, primary port 1, backup port 2

ap-manager interface - VLAN 102, primary port 2


AP's are fine distributed on both physical ports (ap-manager's), but there's a problem with clients. When both the physical interfaces on WLC are UP, clients fail to authenticate when they associated to AP's that are on the second physical port. When I put all of AP's on just one physical port (ds1 or ds2, no metter) clients associete and authenticate fine, only on Monitor clients screen of WLC I see some clients on the other port (port with no AP's).


I think there is a problem with these two interfaces.


Is it necessary to have dedicated ap-manager on port 2 for WLC5508 or I can have only management interface (ap-manager enable)? 

Scott Fella Fri, 03/26/2010 - 06:41
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

Do you happen to see any errors on the switch like client seen on vlan 'x'?  Try this... maybe it will work or not (I use LAG too)... keep your ap-managers on the same vlan as your management interface which also should all be configured for native vlan.

dejash123 Fri, 03/26/2010 - 07:05
User Badges:

Hi Scott,


As I say I don't use LAG because WLC is connected on two 4500 switches.


I tried to make ap-managers on the same vlan as my mgmt interface, but I got a message - you already have interface in this vlan - or something like this.

Scott Fella Fri, 03/26/2010 - 07:33
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 Wireless

I understand you want to connect to two different switches.... You should be able to add a dynamic ap manager interface using a different ip address....


My bad... for the 5508's your Management interface needs to be on a different vlan than any of your AP-Manager interfaces... that is why you got that error.


Also.... when you have both ds ports up, are you seeing errors on the switch. Verify your vlans are forwarding on the trunk ports.

tdorsey123 Mon, 04/05/2010 - 20:30
User Badges:

Maybe my question should require a new thread but it is very close to this one.  If I have two switches(3560s in HSRP) and I want to do redundancy from a WLC 5508.  Am I really limited to one trunk to each switch and the other six GigE Ports on the WLC collect dust?  (i.e. I can't have 2 LAG groups for redundancy?) Seems a shame if that is true.

Scott Pickles Wed, 04/07/2010 - 08:50
User Badges:

Correct - you CANNOT have two LAG groups.  LAG is sort of an 'all-or-nothing' scenario in that if you enable LAG, all ports must connect to the same physical chassis.  They can connect to different modules within the chassis, but NOT to modules in DIFFERENT chassis.  If you need to support physical connections to two different switches/chassis, then you must disable LAG and use dynamic AP-Manager interfaces and statically assign to which ports they apply.  In your case, asking about the other 6 connections collecting dust, the number of interfaces connected depends on how many APs the 5508 is licensed for and supporting.  Depending on how many APs you have on the controller, you could connect the first 2 to one switch, and ports 3 and 4 to the other switch.  If you have a higher volume, connect more ports accordingly (e.g. 1-4 to switch 1, 5-8 to switch 2).


Regards,
Scott

andres.lorat Thu, 09/02/2010 - 12:08
User Badges:

Hi, how are you?.

I am beginning to install 1 wlc 5508 with 2 Switches.  My idea is to use multiple interfaces AP Manager. Since a connection of the WLC will go to  SW1 and the other to the SW2.  In our network SSIDs will be 2. I have doubts as I must configure the ports of the WLC5508.  How many interfaces AP-Manager i must configure?.  These interfaces AP-Manager  must be associate to a physical port. The interfaces management and interfaces of SSIDs must leave all in the same port(trunk)?.


Sorry by my doubts.

Thanks.

Andres.

Leo Laohoo Thu, 09/02/2010 - 15:50
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

Configuring AP Manager on a 5508 is optional.

Actions

This Discussion

Related Content