### Backup Existing WLC 5508 ###

> transfer upload mode tftp

> transfer upload datatype config
> transfer upload filename wlc-backup-2017-11-30
> transfer upload path .
> transfer upload serverip x.x.x.x
> transfer upload start
-----------------------------------------------------------------------------------
-----------------------------------------------------

### Configure HA SSO From CLI ###

* Both WLC have IP management interface in same subnet
- configure interface address management 10.226.186.8 255.255.254.0 10.226.186.1
- IDSQR1VALEWC001 : 10.226.186.4/23
- IDSQR1VALEWC002 : 10.226.186.8/23
- > show interface summary

* Config the Redundancy Management IP Address & Peer Redundancy Management IP

Address
- IDSQR1VALEWC001 > config interface address redundancy-management 10.226.186.12
peer-redundancy-management 10.226.186.13
- IDSQR1VALEWC002 > config interface address redundancy-management 10.226.186.13
peer-redundancy-management 10.226.186.12
- > show interface summary
- Ping gateway from redundancy management ip address

* Configure one WLC as Primary & another WLC as Secondary

- IDSQR1VALEWC001 > config redundancy unit primary
- IDSQR1VALEWC002 > config redundancy unit secondary
- > show redundacy summary

* It's time to enable SSO

- Make sure physical connection between Redundant Port
- Make sure gateway is reachable from both WLC

* Enable SSO
- IDSQR1VALEWC001 > config redundancy mode sso
- IDSQR1VALEWC002 > config redundancy mode sso
- Reboot automatically

* Check boot up logs from both the WLC after enable SSO
- Must be console
- Once SSO is enabled, Standby WLC can be accessed via console connection or via
SSH on Service Port

* Once the Peer WLC transition to Standby Hot state, "-Standby" keyword is
automatically appended to the Standby WLCs prompt name
- IDSQR1VALEWC001-Standby >

* Check redundancy States

- For WLC 1, Monitor > Redundancy > Summary
- IDSQR1VALEWC001 > show redundancy summary
- For WLC 2, go to console
- IDSQR1VALEWC001-Standby > show redundancy summary
-----------------------------------------------------------------------------------
-----------------------------------------------------

### Disabling SSO on HA Pair ### ==> if the result is not expected
* Disable SSO on Primary Controller
 - > config redundancy mode disable
- Primary & Secondary reboot

* On Standby controller, re-enter the correct IP Address

- configure interface address management 10.226.186.8 255.255.254.0 10.226.186.1
- > config port adminmode all enable

* Save the configuration on both controller

- > save config

-----------------------------------------------------------------------------------
-----------------------------------------------------
-----------------------------------------------------------------------------------
-----------------------------------------------------
-----------------------------------------------------------------------------------
-----------------------------------------------------

Ex:

Configuration on Primary WLC:

configure interface address management 9.5.56.2 255.255.255.0 9.5.56.1
configure interface address redundancy-management 9.5.56.10 peer-redundancy-
management 9.5.56.11
configure redundancy unit primary
configure redundancy mode sso

Configuration on Hot Standby WLC:

configure interface address management 9.5.56.3 255.255.255.0 9.5.56.1
configure interface address redundancy-management 9.5.56.11 peer-redundancy-
management 9.5.56.10
configure redundancy unit secondary
configure redundancy mode sso

## Distri Switch (10.226.190.9) ##

interface GigabitEthernet3/5
description *** WLC02-VALE ***
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 186
switchport mode trunk
switchport nonegotiate
channel-group 5 mode on
end

interface GigabitEthernet3/6
description *** WLC02-VALE ***
switchport
switchport trunk encapsulation dot1q
switchport trunk native vlan 186
switchport mode trunk
switchport nonegotiate
channel-group 5 mode on
end

interface Port-channel5
description *** WLC02-VALE ***
switchport
switchport trunk encapsulation dot1q
 switchport trunk native vlan 186
switchport mode trunk
switchport nonegotiate
end