- Preface
- Using the Command-Line Interface
- Using the Web Graphical User Interface
-
- Configuring the Switch for Access Point Discovery
- Configuring Data Encryption
- Configuring Retransmission Interval and Retry Count
- Configuring Adaptive Wireless Intrusion Prevention System
- Configuring Authentication for Access Points
- Converting Autonomous Access Points to Lightweight Mode
- Using Cisco Workgroup Bridges
- Configuring Probe Request Forwarding
- Optimizing RFID Tracking
- Configuring Country Codes
- Configuring Link Latency
- Configuring Power over Ethernet
-
- Preventing Unauthorized Access
- Controlling Switch Access with Passwords and Privilege Levels
- Configuring TACACS+
- Configuring RADIUS
- Configuring Kerberos
- Configuring Local Authentication and Authorization
- Configuring Secure Shell (SSH)
- Configuring Secure Socket Layer HTTP
- Configuring IPv4 ACLs
- Configuring IPv6 ACLs
- Configuring DHCP
- Configuring IP Source Guard
- Configuring Dynamic ARP Inspection
- Configuring IEEE 802.1x Port-Based Authentication
- Configuring Web-Based Authentication
- Configuring Port-Based Traffic Control
- Configuring IPv6 First Hop Security
- Configuring Cisco TrustSec
- Configuring Wireless Guest Access
- Managing Rogue Devices
- Classifying Rogue Access Points
- Configuring wIPS
- Configuring Intrusion Detection System
-
- Administering the System
- Performing Switch Setup Configuration
- Configuring Right-To-Use Licenses
- Configuring Administrator Usernames and Passwords
- Configuring 802.11 parameters and Band Selection
- Configuring Aggressive Load Balancing
- Configuring Client Roaming
- Configuring Application Visibility and Control
- Configuring Voice and Video Parameters
- Configuring RFID Tag Tracking
- Configuring Location Settings
- Monitoring Flow Control
- Configuring SDM Templates
- Configuring System Message Logs
- Configuring Online Diagnostics
- Managing Configuration Files
- Configuration Replace and Configuration Rollback
- Working with the Flash File System
- Working with Cisco IOS XE Software Bundles
- Troubleshooting the Software Configuration
- Index
Configuring Wireless High Availability
- Finding Feature Information
- Information about High Availability
- Information about Access Point Stateful Switch Over
- Initiating Graceful Switchover
- Configuring EtherChannels
- Configuring LACP
- Troubleshooting High Availability
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Information about High Availability
The high availability feature is enabled by default when the switches are connected using the stack cable and the Cisco StackWise-160 technology is enabled. You cannot disable it; however, you can initiate a manual graceful-switchover using the command line interface to use the high availability feature enabled in the switch.
Information about Access Point Stateful Switch Over
An Access Point Stateful Switch Over (AP SSO) implies that all the access point sessions are switched over state-fully and the user session information is maintained during a switchover, and access points continue to operate in network with no loss of sessions, providing improved network availability. The active switch in the stack is equipped to perform all network functions, including IP functions and routing information exchange. The switch supports 1000 access points and 12000 clients.
However, all the clients are de-authenticated and need to be re-associated with the new active switch except for the locally switched clients in FlexConnect mode when a switchover occurs.
Once a redundancy pair is formed while in a stack, high availability is enabled, which includes that access points continue to remain connected during an active-to-standby switchover.
![]() Note | You can not disable AP SSO while in a switch stack once the switches form a redundant pair. |
Initiating Graceful Switchover
To perform a manual switchover and to use the high availability feature enabled in the switch, execute the redundancy force-switchover command. This command initiates a graceful switchover from the active to the standby switch.
Switch# redundancy force-switchover
System configuration has been modified. Save ? [yes/no] : yes
Building configuration …
Preparing for switchover …
Compressed configuration from 14977 bytes to 6592 bytes[OK]This will reload the active unit and force switchover to standby[confirm] : y
Configuring EtherChannels
The LAG, or an EtherChannel, bundles all the existing ports in both the standby and active units into a single logical port to provide an aggregate bandwidth of 60 Gbps. The creation of an EtherChannel enables protection against failures. The EtherChannels or LAGs created are used for link redundancy to ensure high availability of access points.
Configuring LACP
1.
configure terminal
2.
interface port-channel
number
3.
lacp max-bundle
number
4.
lacp port-priority
number
5.
switchport backup interface
po2
6.
end
7.
show etherchannel summary
8.
show interfaces switchport backup
DETAILED STEPS
Troubleshooting High Availability
- Access the Standby Console
- Before a Switchover
- After a Switchover
- Monitoring the Switch Stack
- LACP Configuration: Example
- Flex Link Configuration: Example
- Viewing Redundancy Switchover History (GUI)
- Viewing Switchover States (GUI)
Access the Standby Console
You can only access the console of the active switch in a stack. To access the standby switch, use the following commands.
Use this functionality only under supervision of Cisco Support.
1.
configure terminal
2.
service internal
3.
redundancy
4.
main-cpu
5.
standby console enable
6.
exit
DETAILED STEPS
Before a Switchover
A switchover happens when the active switch fails; however, while performing a manual switchover, you can execute these commands to initiate a successful switchover:
1.
show redundancy states
2.
show
switch detail
3.
show
platform ses states
4.
show
ap summary
5.
show
capwap detail
6.
show
dtls database-brief
7.
show
power inline
DETAILED STEPS
After a Switchover
This section defines the steps that you must perform to ensure that successful switchover from the active to standby switch is performed. On successful switchover of the standby switch as active, all access points connected to the active need to re-join the standby (then active) switch.
1.
show ap uptime
2.
show wireless summary
3.
show wcdb database all
4.
show power inline
DETAILED STEPS
| Command or Action | Purpose | |
|---|---|---|
| Step 1 | show ap uptime
Example: Switch# show ap uptime
|
Verify if the uptime of the access point after the switchover is large enough. |
| Step 2 | show wireless summary
Example: Switch# show wireless summary
|
Display the clients connected in the active switch. |
| Step 3 | show wcdb database all
Example: Switch# show wcdb database all
|
Display if the client has reached the uptime. |
| Step 4 | show power inline
Example: Switch# show power inline
|
Display the power over Ethernet power state. |
Monitoring the Switch Stack
|
Command |
Description |
|---|---|
|
show switch |
Displays summary information about the stack, including the status of provisioned switches and switches in version-mismatch mode. |
|
show switch stack-member-number |
Displays information about a specific member. |
|
show switch detail |
Displays detailed information about the stack. |
|
show switch neighbors |
Displays the stack neighbors. |
|
show switch stack-ports [summary] |
Displays port information for the stack. |
|
show redundancy |
Displays the redundant system and the current processor information. The redundant system information includes the system uptime, standby failures, switchover reason, hardware, configured and operating redundancy mode. The current processor information displayed includes the active location, the software state, the uptime in the current state and so on. |
|
show redundancy state |
Displays all the redundancy states of the active and standby switches. |
LACP Configuration: Example
This example shows how to configure LACP and to verify creation of the LACP bundle and the status:
Switch(config)# ! interface TenGigabitEthernet1/0/1 switchport mode trunk channel-group 1 mode active lacp port-priority 10 ip dhcp snooping trust ! interface TenGigabitEthernet1/0/2 switchport mode trunk channel-group 1 mode active lacp port-priority 10 ip dhcp snooping trust ! interface TenGigabitEthernet1/0/3 switchport mode trunk channel-group 1 mode active lacp port-priority 10 ip dhcp snooping trust ! interface TenGigabitEthernet1/0/4 switchport mode trunk channel-group 1 mode active ip dhcp snooping trust ! interface TenGigabitEthernet1/0/5 switchport mode trunk channel-group 1 mode active ip dhcp snooping trust ! interface TenGigabitEthernet1/0/6 switchport mode trunk channel-group 1 mode active ip dhcp snooping trust ! interface TenGigabitEthernet2/0/1 switchport mode trunk channel-group 1 mode active lacp port-priority 10 ip dhcp snooping trust ! interface TenGigabitEthernet2/0/2 switchport mode trunk channel-group 1 mode active lacp port-priority 10 ip dhcp snooping trust ! interface TenGigabitEthernet2/0/3 switchport mode trunk channel-group 1 mode active lacp port-priority 10 ip dhcp snooping trust ! interface TenGigabitEthernet2/0/4 switchport mode trunk channel-group 1 mode active ip dhcp snooping trust ! interface TenGigabitEthernet2/0/5 switchport mode trunk channel-group 1 mode active ip dhcp snooping trust ! interface TenGigabitEthernet2/0/6 switchport mode trunk channel-group 1 mode active ip dhcp snooping trust ! interface Vlan1 no ip address ip igmp version 1 shutdown ! Switch# show etherchannel summary Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use f - failed to allocate aggregator M - not in use, minimum links not met u - unsuitable for bundling w - waiting to be aggregated d - default port Number of channel-groups in use: 1 Number of aggregators: 1 Group Port-channel Protocol Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SU) LACP Te1/0/1(P) Te1/0/2(P) Te1/0/3(P) Te1/0/4(H) Te1/0/5(H) Te1/0/6(H) Te2/0/1(P) Te2/0/2(P) Te2/0/3(P) Te2/0/4(H) Te2/0/5(H) Te2/0/6(H)
This example shows the switch backup interface pairs:
Switch# show interfaces switchport backup
Switch Backup Interface Pairs:
Active Interface Backup Interface State
------------------------------------------------------------------------
Port-channel1 Port-channel2 Active Standby/Backup Up
This example shows the summary of the EtherChannel configured in the switch:
Switch# show ethernet summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) LACP Te1/0/1(P) Te1/0/2(P) Te1/0/3(P)
Te1/0/4(P) Te1/0/5(P) Te1/0/6(P)
2 Po2(SU) LACP Te2/0/1(P) Te2/0/2(P) Te2/0/3(P)
Te2/0/4(P) Te2/0/5(P) Te2/0/6(P)
Flex Link Configuration: Example
This example shows how to configure flex link and to verify creation and the status of the created link:
Switch(config)# ! interface Port-channel1 description Ports 1-6 connected to NW-55-SW switchport mode trunk switchport backup interface Po2 switchport backup interface Po2 preemption mode forced switchport backup interface Po2 preemption delay 1 ip dhcp snooping trust ! interface Port-channel2 description Ports 7-12connected to NW-55-SW switchport mode trunk ip dhcp snooping trust ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf no ip address negotiation auto ! interface TenGigabitEthernet1/0/1 switchport mode trunk channel-group 1 mode on ip dhcp snooping trust ! interface TenGigabitEthernet1/0/2 switchport mode trunk channel-group 1 mode on ip dhcp snooping trust ! interface TenGigabitEthernet1/0/3 switchport mode trunk channel-group 1 mode on ip dhcp snooping trust ! interface TenGigabitEthernet1/0/4 switchport mode trunk channel-group 1 mode on ip dhcp snooping trust ! interface TenGigabitEthernet1/0/5 switchport mode trunk channel-group 1 mode on ip dhcp snooping trust ! interface TenGigabitEthernet1/0/6 switchport mode trunk channel-group 1 mode on ip dhcp snooping trust ! interface TenGigabitEthernet2/0/1 switchport mode trunk channel-group 2 mode on ip dhcp snooping trust ! interface TenGigabitEthernet2/0/2 switchport mode trunk channel-group 2 mode on ip dhcp snooping trust ! interface TenGigabitEthernet2/0/3 switchport mode trunk channel-group 2 mode on ip dhcp snooping trust ! interface TenGigabitEthernet2/0/4 switchport mode trunk channel-group 2 mode on ip dhcp snooping trust ! interface TenGigabitEthernet2/0/5 switchport mode trunk channel-group 2 mode on ip dhcp snooping trust ! interface TenGigabitEthernet2/0/6 switchport mode trunk channel-group 2 mode on ip dhcp snooping trust ! interface Vlan1 no ip address Switch# show etherchannel summary Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use f - failed to allocate aggregator M - not in use, minimum links not met u - unsuitable for bundling w - waiting to be aggregated d - default port Number of channel-groups in use: 2 Number of aggregators: 2 Group Port-channel Protocol Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SU) - Te1/0/1(P) Te1/0/2(P) Te1/0/3(P) Te1/0/4(P) Te1/0/5(P) Te1/0/6(P) 2 Po2(SU) - Te2/0/1(P) Te2/0/2(P) Te2/0/3(D) Te2/0/4(P) Te2/0/5(P) Te2/0/6(P)
Viewing Redundancy Switchover History (GUI)
| Step 1 | Click
The Redundancy States page is displayed. The values for the following parameters are displayed in the page:
| ||||||||||||
| Step 2 | Click Apply. |
Viewing Switchover States (GUI)
| Step 1 | Click
The Redundancy States page is displayed. The values for the following parameters are displayed in the page:
| ||||||||||||||||||||||||||||||||
| Step 2 | Click Apply. |

Feedback