cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
550
Views
0
Helpful
6
Replies

Aps not finding secondary controller

wynneit
Level 1
Level 1

I have just installed a secondary WLC 4402 where a client has 1121 APs and 1010 APs and I am slightly confused.

We have 2 CISCO-LWAPP-CONTROLLER entries in DNS

The WLCs are WLC1 and WLC2

The 1010 APs fail over to the secondary controller perfectly well.

The 1121 APs do not fail over.

I have given the APs primary and secondary controller names of WLC1 and WLC2.

Is this due to Option 43 not being configured correctly.

I believe though I have not investigated that there is a single entry for the 1121 APs in the DHCP scope for option 43 of the original conmtroller but there is no entry for the 1010 APs.

They are using the same DHCP scope in a layer 2 implementation.

Any help appreciated

6 Replies 6

Scott Fella
Hall of Fame
Hall of Fame

When the ap has joined a wlc, the dns and dhcp option 43 is not used. The information created in the mobility group (mac address, ip address and mobility group name) is used. This is how ap's learn of the other wlc. Setting the ap's primary and secondary and or tertiary wlc is required for ap's to be able to join the other wlc. Option 43 and dns is used if the ap goes throught the proccess of finding a wlc if the primary, secondary and or tertiary wlc is not found. It seems to me that the ap's have properly joined a wlc, there for, you need to verify why the 1121'a are not joining the secondary.

First of all, is the mobility group configured correctly and is ap fallback enabled or not. Also, verify that you can mping and eping the controllers. Is the wlc set to layer 2 or layer 3 mode? I think that the 1121 needs the wlc to be in layer 3, but I will check.

What you should also do is console into the ap and post the log so we can see what errors the ap is getting.

Here is a link. Search for layer 2

http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps6306/prod_bulletin0900aecd80321a2c_ps6521_Products_Bulletin.html

Here is a link for AP Fallback:

http://www.cisco.com/en/US/tech/tk722/tk721/technologies_tech_note09186a00807a85b8.shtml

-Scott
*** Please rate helpful posts ***

tkhan
Level 1
Level 1

Are the 1121s using SSC? If so, the secondary controller must have entries for them or they won't join.

Yes they do. I know there are two types of certificates. Can you point me somewhere that explains which APs use which certificates. Also assuming 1230s use SSC aswell why do these join automatically?

From my experience, all the new APs, 1131s, and 1200s series use MICs (Manufacturer Installed Certificates). So depending on when the AP was manufactured, it may have a MIC or generates an SSC when you convert it. All LWAPP APs have MICs. When I converted 1300+ AP1200s, only about 100 of them had MICs.

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00806a426c.shtml

http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html

Ive done hundreds of upgrades myself.

A while ago I had missing SSCs on 1230s.

Now its 1121s. If it was just the older APs I could understand but the 1010s worked fine its a little confusing with no clear parameters.

I guess its just wireless?

It wouldnt be fun if it was easy.

Thanks

1010 access points are the original Aironet access points and should come with a MIC since they are controller-only. So you have the right idea, but 1000-series access points will be an exception to the rule.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: