Mobility Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches)
Configuring Mobility
Download this chapter
Configuring MobilityConfiguring Mobility
Download the complete book
Mobility Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches) Mobility Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches) (PDF - 2 MB)
 Feedback

Contents

Configuring Mobility

Configuring Mobility Agent

Configuring MA by Pointing to MC

Before You Begin
  • You must have atleast one MC.
  • You cannot configure mobility from the MA.
  • On the MA, you can either configure the MC address, or enable the MC function.
SUMMARY STEPS

    1.    configure terminal

    2.    wireless mobility group member ip 10.10.21.3


DETAILED STEPS
     Command or ActionPurpose
    Step 1 configure terminal


    Example: 
    Switch# configure terminal
     

    Enters global configuration mode.

     
    Step 2wireless mobility group member ip 10.10.21.3


    Example:
    Switch (config)# wireless mobility group member ip 10.10.21.3
     

    Defines the mobility controllers IP address.

     

    This example shows how to add an MA into the mobility group by pointing it to an MC: 

    Switch(config)# wireless mobility group member ip 10.10.21.3

    Adding a Mobility Controller Role to the Mobility Agent

    This configurations shows the mobility controller is added to an mobility agent.

    SUMMARY STEPS

      1.    wireless mobility controller ip 10.10.21.3


    DETAILED STEPS
       Command or ActionPurpose
      Step 1wireless mobility controller ip 10.10.21.3


      Example:
      Switch(config)# wireless mobility controller ip 10.10.21.3
       

      Converts the mobility agent into a mobility controller.

       

      This example shows how to add the MC role to an MA:

      Switch(config)# wireless mobility controller ip 10.10.21.3
Mobility role changed to Mobility Controller.
Please save config and reboot the whole stack.

      Configuring Optional Parameters on MA

      SUMMARY STEPS

        1.    wireless mobility load-balance thrshold 150


      DETAILED STEPS
         Command or ActionPurpose
        Step 1 wireless mobility load-balance thrshold 150


        Example: 
        Switch(config)# wireless mobility load-balance threshold 150
         

        Enables the load-balancing on the MA and sets the threshold value.

          
        Switch(config)# wireless mobility load-balance threshold 150

        Configuring Mobility Controller

        Configuring Converged Access Controllers

        Creating Peer Groups, Peer Group Member and Bridge Domain ID

        Before You Begin
        • On the MA, you can only configure the MCs IP address.
        • On the MC, you can define the peer-group and each peer group members IP address.
        SUMMARY STEPS

          1.    wireless mobility controller peer-group SPG1

          2.    wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2

          3.    wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6

          4.    wireless mobility controller peer-group SPG2

          5.    wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20

          6.    wireless mobility controller peer-group SPG1 bridge-domain-id 54


        DETAILED STEPS
           Command or ActionPurpose
          Step 1wireless mobility controller peer-group SPG1


          Example: 
          Switch(config)# wireless mobility controller peer-group SPG1
           

          Creates a peer group SPG1.

           
          Step 2wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2


          Example: 
          Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2
           
          Adds a member to peer group.
          Note    The member ip 10.10.20.2 is used for NATed member and public-ip 10.10.20.2 is optional and used only when the member is not NATed.
           
          Step 3wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6


          Example:
          Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6
           
          Adds another member to the peer group SPG1.
          Note    The member ip 10.10.20.2 is used for NATed member and public-ip 10.10.20.2 is optional and used only when the member is not NATed.
           
          Step 4wireless mobility controller peer-group SPG2


          Example:
          Switch(config)# wireless mobility controller peer-group SPG2
           

          Creates another peer group SPG2.

           
          Step 5wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20


          Example:
          Switch(config)# wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20
           
          Adds a member to peer group SPG2.
          Note    The member ip 10.10.20.2 is used for NATed member and public-ip 10.10.20.2 is optional and used only when the member is not NATed.
           
          Step 6wireless mobility controller peer-group SPG1 bridge-domain-id 54


          Example:
          Switch(config)# wireless mobility controller peer-group SPG1 bridge-domain-id 54
           

          Adds a bridge domain to SPG1 used for defining the subnet-vlan mapping with other SPGs.

           

          This example shows how to create peer group and add members to it:

          Switch(config)# wireless mobility controller peer-group SPG1
Switch(config)# wireless mobility controller peer-group SPG1
Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2
Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6
Switch(config)# wireless mobility controller peer-group SPG2
Switch(config)# wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20
Switch(config)# wireless mobility controller peer-group SPG1 bridge-domain-id 54

          Configuring Local Mobility Group

          Configuration for wireless mobility groups and mobility group members where the mobility group is a group of MCs.

          Before You Begin

          MCs can belong only to one mobility group, and can know MCs in several mobility groups.

          SUMMARY STEPS

            1.    wireless mobility group name Mygroup

            2.    wireless mobility group member ip 10.10.34.10

            3.    wireless mobility group keepalive interval 5

            4.    wireless mobility group keepalive count 3


          DETAILED STEPS
             Command or ActionPurpose
            Step 1wireless mobility group name Mygroup


            Example: 
            Switch(config)# wireless mobility group name Mygroup
             

            Creates a mobility group named Mygroup.

             
            Step 2wireless mobility group member ip 10.10.34.10


            Example:
            Switch(config)# wireless mobility group member ip 10.10.34.10
             

            Adds a mobility controller to the Mygroup mobility group.

             
            Step 3wireless mobility group keepalive interval 5


            Example:
            Switch(config)# wireless mobility group keepalive interval 5
             

            Configures the interval between two keep alives sent to a mobility member.

             
            Step 4wireless mobility group keepalive count 3


            Example:
            Switch(config)# wireless mobility group keepalive count 3
             

            Configures the keep alive retries before a member status is termed DOWN.

              

            Switch(config)# wireless mobility group name Mygroup 
Switch(config)# wireless mobility group member ip 10.10.34.10 
Switch(config)# wireless mobility group keepalive interval 5 
Switch(config)# wireless mobility group keepalive count 3

            Adding a Peer Mobility Group

            Before You Begin

            MCs belong to only one group, and can know MCs in several groups.

            SUMMARY STEPS

              1.    wireless mobility group member ip 10.10.10.24 group Group2


            DETAILED STEPS
               Command or ActionPurpose
              Step 1wireless mobility group member ip 10.10.10.24 group Group2


              Example: 
              Switch(config)# wireless mobility group member ip 10.10.10.24 group Group2
               

              Adds the member as a peer MC in a different group than the Mygroup.

               

              Configuring Optional Parameters for Mobility Group

              Use this configuration to disable the sticky anchor.

              SUMMARY STEPS

                1.    wlan open21

                2.    no mobility anchor sticky


              DETAILED STEPS
                 Command or ActionPurpose
                Step 1 wlan open21


                Example: 
                Switch(config)# wlan open20
                 

                Configures a WLAN.

                 
                Step 2 no mobility anchor sticky


                Example: 
                Switch(config-wlan)# no mobility anchor sticky
                 

                Disables the default sticky mobility anchor.

                  
                Switch(config)# wlan open20
Switch(config-wlan)# no mobility anchor sticky

                Pointing the Mobility Controller to a Mobility Oracle

                Before You Begin

                You can configure a mobility oracle on a known mobility controller.

                SUMMARY STEPS

                  1.    wireless mobility group member ip 10.10.10.10 group Group3

                  2.    wireless mobility oracle ip 10.10.10.10


                DETAILED STEPS
                   Command or ActionPurpose
                  Step 1 wireless mobility group member ip 10.10.10.10 group Group3


                  Example: 
                  Switch(config)#wireless mobility group member ip 10.10.10.10 group Group3
                   

                  Creates and adds a MC to a mobility group.

                   
                  Step 2 wireless mobility oracle ip 10.10.10.10


                  Example: 
                  Switch(config)#wireless mobility oracle ip 10.10.10.10
                   

                  Configures the mobility controller as mobility oracle.

                    
                  Switch(config)#wireless mobility group member ip 10.10.10.10 group Group3
Switch(config)#wireless mobility oracle ip 10.10.10.10

                  Configuring Guest Controller

                  A guest controller is used when the clients traffic is tunneled to an guest anchor controller in the de militarized zone (DMZ). The guest client is authenticated at the anchor controller using web based mechanism. The authentication mechanism is optional and the guest is allowed to pass traffic without authentication also.

                  Enable the WLAN on the MA on which the guest client connects with the mobility anchor address of the guest controller.

                  On the guest controller WLAN, which can be CUWN 5500 or 5760, configure the mobility anchors ip address as its own ip address. This allows the traffic to be tunneld to the guest controller from MA.

                  SUMMARY STEPS

                    1.    wlan Mywlan1

                    2.    mobility anchor <guest-anchors-ip-address>

                    3.    client vlan<vlan-name>

                    4.    security open


                  DETAILED STEPS
                     Command or ActionPurpose
                    Step 1wlan Mywlan1


                    Example: 
                    Switch(config)# wlan Mywlan1
                     

                    Creates a wlan for the client.

                     
                    Step 2mobility anchor <guest-anchors-ip-address>


                    Example: 
                    Switch(config-wlan)# mobility anchor 10.10.10.2
                     

                    Enables the guest anchors (GA) IP address on the MA.

                     
                    Step 3client vlan<vlan-name>


                    Example: 
                    Switch(config-wlan)# client vlan gc_ga_vlan1
                     

                    Assigns a vlan to the clients wlan.

                     
                    Step 4security open


                    Example: 
                    Switch(config-wlan)# security open
                     

                    Assigns a security type to the wlan.

                      
                    Switch(config)# wlan Mywlan1
Switch(config-wlan)# mobility anchor 10.10.10.2
Switch(config-wlan)# client vlan gc_ga_vlan1
Switch(config-wlan)# security open

                    Configuring Guest Anchor

                    SUMMARY STEPS

                      1.    wlan Mywlan1

                      2.    mobility anchor <guest-anchors-own-ip-address>

                      3.    client vlan<vlan-name>

                      4.    security open


                    DETAILED STEPS
                       Command or ActionPurpose
                      Step 1wlan Mywlan1


                      Example: 
                      Switch(config)# wlan Mywlan1
                       

                      Creates a wlan for the client.

                       
                      Step 2mobility anchor <guest-anchors-own-ip-address>


                      Example: 
                      Switch(config-wlan)# mobility anchor 10.10.10.2
                       

                      Enables the guest anchors IP address on the guest anchor (GA). The GA assigns its own address on itself.

                       
                      Step 3client vlan<vlan-name>


                      Example: 
                      Switch(config-wlan)# client vlan gc_ga_vlan1
                       

                      Assigns a vlan to the clients wlan.

                       
                      Step 4security open


                      Example: 
                      Switch(config-wlan)# security open
                       

                      Assigns a security type to the wlan.

                        
                      Switch(config)# wlan Mywlan1
Switch(config-wlan)# mobility anchor 10.10.10.2
Switch(config-wlan)# client vlan gc_ga_vlan1
Switch(config-wlan)# security open

                      Configuring Converged Access Controller on 5508 or WiSM 2

                      Enabling the New Mobility

                      Before You Begin

                      You will require Cisco Unified Wireless Network 7.3 MR1, 8.0 or later to configure the new mobility architecture.

                      SUMMARY STEPS

                        1.    config mobility new-architecture enable


                      DETAILED STEPS
                         Command or ActionPurpose
                        Step 1config mobility new-architecture enable


                        Example: 
                        (Cisco Controller) >config mobility new-architecture enable
                         

                        Enables and installs the new mobility architecture on the CUWN based controller.

                          
                        (Cisco Controller) >config mobility new-architecture enable
Enabling new-architecture would change mobility architecture from flat to hierarchical !!!
Configuration changes will be saved and System will be rebooted. !!! 
Are you sure you want to continue? (y/n) y

                        Configuring Mobility Controller

                        This configuration shows how to change the MCs public address, or mobility group name.

                        SUMMARY STEPS

                          1.   


                        DETAILED STEPS
                           Command or ActionPurpose
                          Step 1


                          Example:  

                           

                          Creating Peer Groups, Peer Group Member and Bridge Domain ID

                          Before You Begin
                          • On the MA, you can only configure the MCs IP address.
                          • On the MC, you can define the peer-group and each peer group members IP address.
                          SUMMARY STEPS

                            1.    wireless mobility controller peer-group SPG1

                            2.    wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2

                            3.    wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6

                            4.    wireless mobility controller peer-group SPG2

                            5.    wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20

                            6.    wireless mobility controller peer-group SPG1 bridge-domain-id 54


                          DETAILED STEPS
                             Command or ActionPurpose
                            Step 1wireless mobility controller peer-group SPG1


                            Example: 
                            Switch(config)# wireless mobility controller peer-group SPG1
                             

                            Creates a peer group SPG1.

                             
                            Step 2wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2


                            Example: 
                            Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2
                             
                            Adds a member to peer group.
                            Note    The member ip 10.10.20.2 is used for NATed member and public-ip 10.10.20.2 is optional and used only when the member is not NATed.
                             
                            Step 3wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6


                            Example:
                            Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6
                             
                            Adds another member to the peer group SPG1.
                            Note    The member ip 10.10.20.2 is used for NATed member and public-ip 10.10.20.2 is optional and used only when the member is not NATed.
                             
                            Step 4wireless mobility controller peer-group SPG2


                            Example:
                            Switch(config)# wireless mobility controller peer-group SPG2
                             

                            Creates another peer group SPG2.

                             
                            Step 5wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20


                            Example:
                            Switch(config)# wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20
                             
                            Adds a member to peer group SPG2.
                            Note    The member ip 10.10.20.2 is used for NATed member and public-ip 10.10.20.2 is optional and used only when the member is not NATed.
                             
                            Step 6wireless mobility controller peer-group SPG1 bridge-domain-id 54


                            Example:
                            Switch(config)# wireless mobility controller peer-group SPG1 bridge-domain-id 54
                             

                            Adds a bridge domain to SPG1 used for defining the subnet-vlan mapping with other SPGs.

                             

                            This example shows how to create peer group and add members to it:

                            Switch(config)# wireless mobility controller peer-group SPG1
Switch(config)# wireless mobility controller peer-group SPG1
Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.2 public-ip 10.10.20.2
Switch(config)# wireless mobility controller peer-group SPG1 member ip 10.10.20.6 public-ip 10.10.20.6
Switch(config)# wireless mobility controller peer-group SPG2
Switch(config)# wireless mobility controller peer-group SPG2 member ip 10.10.10.20 public-ip 10.10.10.20
Switch(config)# wireless mobility controller peer-group SPG1 bridge-domain-id 54

                            Configuring Local Mobility Group

                            Configuration for wireless mobility groups and mobility group members where the mobility group is a group of MCs.

                            Before You Begin

                            MCs can belong only to one mobility group, and can know MCs in several mobility groups.

                            SUMMARY STEPS

                              1.    wireless mobility group name Mygroup

                              2.    wireless mobility group member ip 10.10.34.10

                              3.    wireless mobility group keepalive interval 5

                              4.    wireless mobility group keepalive count 3


                            DETAILED STEPS
                               Command or ActionPurpose
                              Step 1wireless mobility group name Mygroup


                              Example: 
                              Switch(config)# wireless mobility group name Mygroup
                               

                              Creates a mobility group named Mygroup.

                               
                              Step 2wireless mobility group member ip 10.10.34.10


                              Example:
                              Switch(config)# wireless mobility group member ip 10.10.34.10
                               

                              Adds a mobility controller to the Mygroup mobility group.

                               
                              Step 3wireless mobility group keepalive interval 5


                              Example:
                              Switch(config)# wireless mobility group keepalive interval 5
                               

                              Configures the interval between two keep alives sent to a mobility member.

                               
                              Step 4wireless mobility group keepalive count 3


                              Example:
                              Switch(config)# wireless mobility group keepalive count 3
                               

                              Configures the keep alive retries before a member status is termed DOWN.

                                

                              Switch(config)# wireless mobility group name Mygroup 
Switch(config)# wireless mobility group member ip 10.10.34.10 
Switch(config)# wireless mobility group keepalive interval 5 
Switch(config)# wireless mobility group keepalive count 3

                              Adding a Peer Mobility Group

                              Before You Begin

                              MCs belong to only one group, and can know MCs in several groups.

                              SUMMARY STEPS

                                1.    wireless mobility group member ip 10.10.10.24 group Group2


                              DETAILED STEPS
                                 Command or ActionPurpose
                                Step 1wireless mobility group member ip 10.10.10.24 group Group2


                                Example: 
                                Switch(config)# wireless mobility group member ip 10.10.10.24 group Group2
                                 

                                Adds the member as a peer MC in a different group than the Mygroup.

                                 

                                Configuring Optional Parameters for Mobility Group

                                Use this configuration to disable the sticky anchor.

                                SUMMARY STEPS

                                  1.    wlan open21

                                  2.    no mobility anchor sticky


                                DETAILED STEPS
                                   Command or ActionPurpose
                                  Step 1 wlan open21


                                  Example: 
                                  Switch(config)# wlan open20
                                   

                                  Configures a WLAN.

                                   
                                  Step 2 no mobility anchor sticky


                                  Example: 
                                  Switch(config-wlan)# no mobility anchor sticky
                                   

                                  Disables the default sticky mobility anchor.

                                    
                                  Switch(config)# wlan open20
Switch(config-wlan)# no mobility anchor sticky

                                  Pointing the Mobility Controller to a Mobility Oracle

                                  Before You Begin

                                  You can configure a mobility oracle on a known mobility controller.

                                  SUMMARY STEPS

                                    1.    wireless mobility group member ip 10.10.10.10 group Group3

                                    2.    wireless mobility oracle ip 10.10.10.10


                                  DETAILED STEPS
                                     Command or ActionPurpose
                                    Step 1 wireless mobility group member ip 10.10.10.10 group Group3


                                    Example: 
                                    Switch(config)#wireless mobility group member ip 10.10.10.10 group Group3
                                     

                                    Creates and adds a MC to a mobility group.

                                     
                                    Step 2 wireless mobility oracle ip 10.10.10.10


                                    Example: 
                                    Switch(config)#wireless mobility oracle ip 10.10.10.10
                                     

                                    Configures the mobility controller as mobility oracle.

                                      
                                    Switch(config)#wireless mobility group member ip 10.10.10.10 group Group3
Switch(config)#wireless mobility oracle ip 10.10.10.10

                                    Configuring the Mobility Oracle

                                    Configuring Mobility Oracle on CUWN

                                    Enabling Mobility Oracle on CUWN

                                    This configuration shows how to enable the mobility oracle on the 5508 or WiSM2 controllers.

                                    SUMMARY STEPS

                                      1.    config mobility oracleenable

                                      2.    config mobility oracle ip 10.10.10.5


                                    DETAILED STEPS
                                       Command or ActionPurpose
                                      Step 1config mobility oracleenable


                                      Example: 
                                      <cisco-controller> config wireless mobility oracle
                                       

                                      Enables the oracle on CUWN 5500.

                                       
                                      Step 2config mobility oracle ip 10.10.10.5


                                      Example: 
                                      <cisco-controller> config wireless mobility oracle ip 10.10.10.5
                                       

                                      Configures the MC with MO's IP address.

                                       

                                      This example shows how to enable oracle on CUWN and make the CUWN also act as MO:

                                      <cisco-controller> config wireless mobility oracle
<cisco-controller> config wireless mobility oracle ip 10.10.10.5