请选择 进入手机版 | 继续访问电脑版

设为首页 收藏本站
思科服务支持社区 点击关注
思科服务支持社区

  
 找回密码
 立即注册

扫一扫,访问微社区

搜索
热搜: 邮件服务器
查看: 468|回复: 5

WLC5508 HA ( AP SSO)

[复制链接]
发表于 2017-11-18 21:01:32 | 显示全部楼层 |阅读模式
之前做的文档,作为参考分享给大家,新版本记住一点就是 redundancy-management port需要打vlan TAG

456.png
____________________________________________________________
WLC软件从7.3版本后支持 AP SSO;从7.5版本后支持Client SSO;
AP SSO允许AP与Active的WLC建立CAPWAP隧道,并与热备WLC共享AP的数据库镜像副本,WLC机箱或者网络故障的时候,减少主控制器的停机时间。
Client SSO功能,在当客户端与WLC关联或者是客户端参数变化的时候,热备控制器的客户端的信息就会被同步实现了无服务中断以及无SSID中断。
参考连接:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-1/HA_SSO_DG/High_Availability_DG.html
http://www.cisco.com/web/CN/products/products_netsol/wireless/pdf/cco_lan_10_v7.pdf
————————————————————
redundancy-managment 接口

redundancy port

——————————————————————
1.jpg


使用GUI配置HA(AP/Client SSO)
  • 配置“managment”“redundancy-management”接口在同一网段;
WLC1
2.jpg
WLC2 与WLC1的mannagment 同一个IP
②配置HA角色;

3.jpg
4.jpg

③启用AP/Client SSO功能;
5.jpg
④进入Monitor > Redundancy >Summary页面。检查冗余状态
6.jpg
###使用CLI配置HA(AP/Client SSO)
命令show inteface summary  <<<<查看WLC接口信息;
命令config interface address redundancy-management 10.0.61.21peer-redundancy-management 10.0.61.23       <<<<配置冗余管理接口;
命令config redundancy unit primary/secondary   <<<<配置HA角色;
命令config redundancy mode sso    <<<<启用SSO功能,协商角色;
命令show redundancy summary     <<<<确认HA状态;
7.jpg
8.jpg
9.jpg

冗余管理接口(redundance-management interface):逻辑接口。
         必须与管理接口在同一网段。此接口用来监控主用WLC状态、作为源PING网关(网络可达行)、和Syslog&NTP&TFTP服务器通信进行配置上传。
冗余端口(redundance port):物理端口。该端口将被分配一个最后2字节是冗余管理接口IP最后2字节(前2个字节总是169.254)的自动生成的IP地址。
---------------------------------------技术小细节:
两台WLC,Virtual-IP应该一致;建议RP直连;SP设置DHCP;
AP SSO,不支持内部DHCP; 启用AP/Client  SSO将会重启无线控制器。
  启用了SSO功能,备用WLC上管理接口的GUI/TELNET/SSH将无法正常访问,可以通过console、Service Port的SSH/Telnet连接和冗余管理接口上的SSH进行连接。
下面是两台已经配置好AP SSO的 WCL CT5508的配置
______________________________________________________________________________________
(Cisco Controller) >show interface summary
Number of Interfaces.......................... 8
Interface Name Port Vlan Id IP Address Type Ap MgrGuest
-------------------------------- ---- ----------------------- ------- ------ -----
management LAG 32 172.16.32.161 Static Yes No
redundancy-management LAG 32 172.16.32.163 Static NoNo
redundancy-port - untagged 169.254.32.163 Static No No
service-port N/A N/A 10.1.1.1 Static No No
virtual N/A N/A 1.1.1.1 Static No No
vlan_30_office LAG 30 172.16.30.253 Dynamic No No
vlan_31_pda LAG 31 172.16.31.253 Dynamic No No
vlan_33_guest LAG 33 172.16.33.243 Dynamic No No
(Cisco Controller) >show redundancy summary
Redundancy Mode = SSO ENABLED
Local State = ACTIVE
Peer State = STANDBY HOT
Unit = Primary
Unit ID = C0:8C:60:35:8C:60
Redundancy State = SSO
Mobility MAC = C0:8C:60:35:8C:60
BulkSync Status = Complete
Average Redundancy Peer Reachability Latency = 422Micro Seconds
Average Management Gateway Reachability Latency = 5979Micro Seconds
(Cisco Controller) >show interface detailedmanagement
Interface Name...................................management
MAC Address......................................c0:8c:60:35:8c:6f
IP Address.......................................172.16.32.161
IP Netmask.......................................255.255.255.128
IP Gateway.......................................172.16.32.129
External NAT IP State............................Disabled
External NAT IP Address..........................0.0.0.0
Link Local IPv6 Address..........................fe80::c28c:60ff:fe35:8c6f/64
STATE ...........................................REACHABLE
Primary IPv6 Address.............................::/128
STATE ........................................... NONE
Primary IPv6 Gateway............................. ::
Primary IPv6 Gateway Mac Address.................00:00:00:00:00:00
STATE ...........................................INCOMPLETE
VLAN............................................. 32
Quarantine-vlan.................................. 0
Active Physical Port............................. LAG(13)
Primary Physical Port............................ LAG(13)
Backup Physical Port.............................Unconfigured
DHCP Proxy Mode..................................Global
Primary DHCP Server..............................172.16.32.129
Secondary DHCP Server............................Unconfigured
DHCP Option 82...................................Disabled
DHCP Option 82 bridge mode insertion.............Disabled
IPv4 ACL.........................................Unconfigured
IPv6 ACL.........................................Unconfigured
mDNS Profile Name................................Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No
L2 Multicast.....................................Enabled
备机:
(Cisco Controller-Standby) >show interface summary
Number of Interfaces.......................... 8
Interface Name Port Vlan Id IP Address Type Ap MgrGuest
-------------------------------- ---- ----------------------- ------- ------ -----
management LAG 32 172.16.32.161 Static Yes No
redundancy-management LAG 32 172.16.32.164 Static NoNo
redundancy-port - untagged 169.254.32.164 Static No No
service-port N/A N/A 10.1.1.1 Static No No
virtual N/A N/A 1.1.1.1 Static No No
vlan_30_office LAG 30 172.16.30.253 Dynamic No No
vlan_31_pda LAG 31 172.16.31.253 Dynamic No No
vlan_33_guest LAG 33 172.16.33.243 Dynamic No No
(Cisco Controller-Standby) >show redundancy summary
Redundancy Mode = SSO ENABLED
Local State = STANDBY HOT
Peer State = ACTIVE
Unit = Secondary (Inherited AP License Count = 50)
Unit ID = 4C:00:82:71:BB:80
Redundancy State = SSO
Mobility MAC = C0:8C:60:35:8C:60
Average Redundancy Peer Reachability Latency = 457Micro Seconds
Average Management Gateway Reachability Latency = 2066Micro Seconds

  • 1
  • 2
  • 3
  • 4
  • 5
  • 1
  • 2
  • 3
  • 4
  • 5
平均得分0 (0 评价)
发表于 2017-11-20 13:14:42 | 显示全部楼层
详细,楼主能不能介绍下企业常用的场景和对应的方案
  • 1
  • 2
  • 3
  • 4
  • 5
  • 1
  • 2
  • 3
  • 4
  • 5
平均得分0 (0 评价)
发表于 2017-11-20 16:15:37 | 显示全部楼层
月底实施刚好会用到,多谢。
  • 1
  • 2
  • 3
  • 4
  • 5
  • 1
  • 2
  • 3
  • 4
  • 5
平均得分0 (0 评价)
 楼主| 发表于 2017-11-20 16:50:31 | 显示全部楼层
LieBenSun0407 发表于 2017-11-20 16:15
月底实施刚好会用到,多谢。

  记得注意vlan配置,R口
  • 1
  • 2
  • 3
  • 4
  • 5
  • 1
  • 2
  • 3
  • 4
  • 5
平均得分0 (0 评价)
 楼主| 发表于 2017-11-20 16:51:04 | 显示全部楼层
13nash 发表于 2017-11-20 13:14
详细,楼主能不能介绍下企业常用的场景和对应的方案

  这个 官网上面有吧,我下次找找看啊
  • 1
  • 2
  • 3
  • 4
  • 5
  • 1
  • 2
  • 3
  • 4
  • 5
平均得分0 (0 评价)
发表于 2017-11-20 21:07:53 | 显示全部楼层
简单实用
  • 1
  • 2
  • 3
  • 4
  • 5
  • 1
  • 2
  • 3
  • 4
  • 5
平均得分0 (0 评价)
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

Archiver | 思科服务支持社区  

GMT+8, 2017-12-13 07:23 , Processed in 0.095051 second(s), 44 queries .

京ICP备09041801号-187

版权所有 :copyright:1992-2019 思科系统  重要声明 | 保密声明 | 隐私权政策 | 商标 |

快速回复 返回顶部 返回列表