Cisco 5520 Wireless LAN Controller Deployment Guide

1 Cisco 5520 Wireless LAN Controller Deployment GuideCisco 5520 Wireless LAN Controller DeploymentGuide2 Introduction2 Prerequisites2 ProductOverview2 Cisco5520 ControllerKey Attributes3AP PlatformSupport5 PlatformComponents6 SFP Support12 ImageSpecifications13 FaultToleranceCapability13 CustomerReplaceableUnits15 Link Aggregation(LAG)15 Inter-PlatformMobilityand GuestAnchorSupport16 InfrastructureMulticast16 New Mobilityand MC Support16 Lookand Feel of the Cisco5520 WirelessLANC ontroller16 Licensing23 Revised: July 21, 2015, Cisco 5520 Wireless LAN Controller Deployment GuideIntroductionThis documentintroducesthe Cisco5520 WirelessLANC ontroller(WLC),and providesgeneralguidelinesfor its this documentis to: Providean overviewof the Cisco5520 WLC,and its deploymentwithinthe CiscoUnifiedArchitecture. Highlightkey serviceproviderfeatures. Providedesignrecommendationsand considerationsspecificto the Cisco5520 no specificrequirementsfor this UsedThis documentis not restrictedto specificsoftwareand informationin this documentis createdfrom the devicesin a specificlab of the devicesused in this documentstartedwith a cleared(default) your networkis live, makesure that you understandthe potentialimpactof CiscoTechnicalTips Conventionsfor moreinformationon OverviewThe existingCisco5500 seriescontrollerscalesup to 500 APs, 7,000clients,and 8 explosionofmobileclientsin enterpriseempoweredby bringyour own device(BYOD)

2 ,the deploymentof wirelessin mission-criticalapplications,2and the adoptionof Wi-Fi in serviceprovidernetworksenablingnew businessmodelsrequirewirelessnetworksto providelargerAP scale,clientscale,and addressesthesekey deliversthe new Cisco5520wirelesscontrollerwith supportfor 20 Gbpsthroughput,1500 APs, and 20,000clientsto ensurebetterperformanceand scale followingtable capturessomeof the key hardwarecapabilitiesof this new 1: Hardware Capabilities of Cisco 5520 WLC5520 Hardware Capabilities1 RUChassisHeight20 GbpsThroughput1500AP Support20,000 ClientSupport2 x SFP+Data Ports-40 C 65 CStorageTemperature5 40 COperatingTemperature10 90% (non-condensing)OperatingHumidity770 W ACPowerOptionsCisco 5520 Controller Key AttributesSomeof the key attributesof the Cisco5520 controllerare: High AP scale (1500 APs in 1 RU ) High clientdensity(20,000clientsin 1 RU) High throughputof 20 Gbpswith 1 RU Supportfor 1500 APs, 1500 AP groups,1500 FlexConnectgroups,and up to 100 APs per FlexConnectgroup Supportfor 4096 VLANs 512 InterfaceGroups PMKC achesize of 40,000 Supportfor 25,000 RFID stracking,and the detectionand containmentof up to 24,000rogueAPs, and up to 32,000rogueclients(overand abovethe RFIDs) 3,000 APs per RRMG roup3 3,20,000 AVC Flows High Availabilitywith sub-secondAP and clientSSO TrustSecSXP Support Supportof all AP modesof operation(Local,FlexConnect,Monitor, RogueDetector, Sniffer, Bridge,and Flex+bridge) Rightto Use (RTU) licensingfor ease of licenseenablementand ongoinglicensingoperationsThe followingtable showsthe CiscoEnterpriseCampusControllerscomparis onat a glance:Table 2.

3 Cisco Enterprise Campus Controllers comparisonWiSM255085520 AttributesEnterpriseCampusEnterpriseCamp usand fullservicebranchEnterpriseCampusand fullservicebranchDeploymenttypeAll AP modesAll AP modesAll AP modesOperationalModes1000 APs15,000clients500 APs7000 clients1500 APs20,000clientsMaximumScale100 100012 5001 1500AP CountRangeCISL basedCISL basedRightto Use (withEULA)LicensingInternalconnectionsto theCatalystBackplanes8 x 1 G ports2 x 10 G portsConnectivityAC/DCCatalystchassisred undantPSU optionAC (redundantPSU option)770 W AC (optionalredundantPSU)Power1001001500 MaximumNumberofFlexConnectGroups2525100 MaximumNumberof APs perFlexConnectGroup4,0002,00024,000 MaximumNumberof RogueAPs Management5,000250032,000 MaximumNumberof RogueClientsManagement10,0005,00025,000 MaximumNumberof RFID2,0001,0003,000 MaximumAPs per RRMG roup5005001500 MaximumAP Groups4 WiSM255085520 Attributes6464512 MaximumInterfaceGroups646464 MaximumInterfacesperInterfaceGroup512512 4096 MaximumVLANsSupported512512512 MaximumWLANsSupported30,00014,00040,000 Fast SecureRoamingClients/MaxPMKC acheFeaturesupportunlessotherwisespecifi edwill be the sameas in Platform SupportThe Cisco5520 supportsthe followingaccesspointmodels.

4 1260,3500,600 1600,2600,3600 1700,2700,3700 OEAP600 702I,702W Cisco891 seriesintegratedservicesrouterand Cisco881 seriesintegratedservicesrouter 1530,1552WU,1550,1570 1040,1140, 1260 supportextendedto with parity5 Platform ComponentsCisco 5520 WLC Front Panel ViewCisco5520 wirelessLANcontrollersupportsseveralbutt ons,LED indicators,and a KVMconnectoron the front alsoincludesa powerbuttonand LocatorLED button,alongwith the followingLEDS:Systemstatus,PSU status,Fan status,NetworkLED,and On Switch and LED IndicatorA PowerButtonpush switchwith integratedLED is locatedon the front 3: Power On Switch and LED IndicatorFunctionLED Indicator ColorCard PowerStatusBi-colorYellow(Amber)GreenDec odeStateCard PowerOffOffSoft OffAmberOnCard PowerOnGreenOnLocator Switch and LED IndicatorA Unit Identifypush switchwith integratedLED is availableon the front paneland rear panel. Each presson the buttontogglesbetweenactiveand Status LED IndicatorThe systemstatusLED locatedon the front panelindicatesthe 4: System Status LED IndicatorFunctionLED Indicator ColorSystemStatusBi-colorYellow(Amber)Gr eenDecodeStateUndefinedOffCard is in normaloperatingconditionGreenOnSystemis in a degradedoperationalstateAmberOnCriticalf ault stateAmberBlinkingFan Status LED IndicatorThe Fan statusLED locatedon front panelindicatesthe fan 5: Fan Status LED IndicatorFunctionLED Indicator ColorFan StatusBi-colorYellow(Amber)GreenDecodeSt ateUndefinedOffFans are operatingand no error conditionhas been detectedGreenOnFans are in a degradedoperationalstate One of N fans has a faultAmberOnCriticalfault state Two or morefans has a faultAmberBlinkingTemperature Status LED IndicatorThe temperaturestatusLED is locatedon the front paneland indicateswhetheror not the systemis 6.

5 Temperature Status LED IndicatorFunctionLED Indicator ColorTemperature StatusBi-colorYellow(Amber)GreenDecodeSt ateUndefinedOffSystemis operatingat normaltemperatureGreenOnOne or more temperaturesensorsreachesUCRthresholdAmb erOnOne or more temperaturesensorsreachesUNRthresholdAmb erBlinkingPower Supply Status LED IndicatorThe powersupplystatusLED is locatedon the front paneland indicatesproperfunctioningof the 7: Power Supply Status LED IndicatorFunctionLED Indicator ColorAC PowerSupplyStatusBi-colorYellow(Amber)Gr eenDecodeStateUndefinedOffAC powersuppliesare operatingand noerror conditionhas been detectedGreenOnOne or morepowersuppliesare in adegradedoperationalstateAmberOnOne or morepowersuppliesare in acriticalfault stateAmberBlinkingNetwork Link LED IndicatorThe networkLED is locatedon the front paneland indicatesif any of the on-boardnetworkingports are connectedand 8: Network Link LED IndicatorFunctionLED Indicator ColorNetworkLink StatusSingleColorGreenDecodeStateUndefin edOffLink on any of the ports,but no activityGreenOnActivityon any of the portsGreenBlinkingFront Panel KVM Break-out ConnectorA singlefemaleconnectorprovidesaccessto video,two USB ports for keyboardand mouse,and an externalbreakoutconnectorto industrystandardinterfacesis followingfigureshowsan interfacesfor the cableare:1 FrontpanelKVM/Consoleconnector2DB9 serialport connector3 Dual Type-AUSB connectors4DB15 Video connector9 Cisco 5520 WLC Rear Panel ViewThe rear panelhas the followinginterfaces:1 Two Type A USB ports2 IMC port 10/100/1000 Base-TTo setupthe CIMC interface: Connectthe CIMC cable.

6 To enableDHCPto set the IP, use the commandimm dhcp enable. If DHCPis not available,use the commandimm address <ip address> <net mask> <gatewayip>. To view the IP and details,use the commandimm interfaceis for advanceddebuggingfor TAC and escalationuse settingsin the CIMCby customercan causeadverseimpacton controllersoftwareand StandardRS-232 SerialCOMport usingRJ-45connector4 Ethernetserviceport (SP) Management10/100/1000 Base-T5 RedundancyPort (RP)FunctionLED Indicator ColorManagementInterfacePort SpeedBi-colorYellow(Amber)GreenDecodeSta teLink Speed= 10 MbpSOffLink Speed= 100 MbpSAmberOnLink Speed= 1 GbpSGreenOnFunctionLED Indicator ColorManagementInterfacePort StatusBi-colorYellow(Amber)GreenDecodeSt ateNo LinkOffLinkGreenOnTraffic PresentBlinking6 VGAC onnector Rear panelhas a standardVGAport usinga femaleD-Sub-15 Connector7ID Switchand LED8 Two 1/10 G Managementand Networkports11 Functional DefinitionLEDLED:(Amber)On indicatespoweris goodPwr OKLED:(Amber)On indicates10 G modeLED:Off indicates1 G mode10 GLED.

7 (Green)On indicateslink up statusPort-nLink StatusLED:(Green)blinkingindicateslink activityPort-nLink ActivitySwitching Between 10 G and 1 G If there is nothinginstalledin port 1, the boardwill be configuredfor 10 G modeby ,to switchto 1 G mode,an SFP modulemust be installedin port 1 and the systemneedsto be rebooted. Conversely, if an SFP moduleis installedand the user wantsto switchto 4 x 10 G mode,then an SFP+modulemust be installedin port 1 and the WLCrebooted. Thus,OnlineInsertionand Removal(OIR)of SFP and SFP+between10 G and 1 G is not possible. OIR of 10 G to 10 G and 1 G and 1 G is is recommendedto have all ports as either10 G or 1 G. In case they are different,port 1 SFP determinesthe modeof operationand functionalityon the otherSFPsmay not SupportNetworkports for 5520 WLCsupportthe followingCiscoSFP/SFP+modules: GLC-T SFP-10G-SR SFP-10G-LR12 SFP-10G-LRM SFP-H10GB-CU1M SFP-H10GB-CU2M SFP-H10GB-CU2-5M SFP-H10GB-CU3M SFP-H10GB-CU5M SFP-H10GB-ACU7M SFP-H10GB-ACU10M SFP-10G-AOC7M SFP-H10GB-CU1-5M SFP-10G-AOC3M SFP-10G-AOC1M SFP-10G-AOC2M SFP-10G-AOC5M SFP-10G-AOC10 MImage SpecificationsCisco5520 WLCsupportsall the featuresof Not Supported on 5520 Controller PlatformThe followingfeaturesare not supportedon the 5520 controllerplatform: LocalAuthentication(wherethe controlleracts as the authenticationserver) InternalDHCP server Wired GuestFault Tolerance CapabilityThe Cisco5520 supportsthe statelessN+1 redundancymodel.

8 The N+1 HA architectureprovidesredundancyfor controllersacrossgeographicallyseparated ata centerswith low cost of singlebackupcontrollercan be used to moreinformationon this modelof redundancy, refer and Client SSOHigh AvailabilityStatefulSwitchover(SSO)model providesa Box-to-Boxredundancywith one controllerin activestate and asecondcontrollerin hot SSO modelmonitorsthe healthof the activecontrollervia a redundant(HA)port. Cisco5520 wirelessLANcontrollerhas a failoverRP configurationon the activecontrolleris synchedto the standbycontrollervia the redundantport. In HA, both controllerssharethe sameset of configurationincludingthe IP addressof the AP's CAPWAP state (for APs in RUNstate)is also a result,APs do not go into Discoverystate whenthe activecontrollerfails. Furthermore,a client'sinformationis syncedto the standbyWLCwhenthe clientassociatesto the WLCor the client s ,that is, the ones in Run state,are syncedto the standby.

9 Thus,clientre-associationis avoidedon switchover, makingthe failoverseamlessfor the APs as well as for the clients,resultingin zero clientservicedowntimeand no moreinformationon the SSO featureand the supportedtopologies,refer to the High Cisco 5520 SSO Pair to the Wired NetworkIt is recommendedto connectto a VSS pair and spreadthe links in each port-channelbetweenthe two physicalswitchesto preventa WLCswitchoverupon a failureof one of the VSS Replaceable UnitsCisco5520 wirelessLANcontrollerhas a minimalamountof separateorderableitems,includingall of the following: Powersupply SSD Hard Disk Drive(HDD) Optionto add a redundantpowersupplyon the Cisco5520 WLCThe powersupplyunits are field Aggregation (LAG)A singleLAGacrossthe 2 x 10 G interfacesis supportedin and later. LACPand PAgP are not supportedonthe Mobility and Guest Anchor SupportGuestanchorcapabilitywith: CiscoWLC5508 / 8510 / 7510 / WISM2runningas a foreigncontroller(EOIPT unnel) Cisco5520 / 8540 WLCrunningas a foreigncontroller(EOIPT unnel) Cisco5760 WLCrunningas a foreigncontrollerwith new mobilityturnedon (CAPWAP Tunnel)Foreigncontrollerto a guestanchorwhichis a: CiscoWLC5508 / 8510 / 7510 / WISM2(EOIPT unnel) Cisco5520 / 8540 WLC(EOIPT unnel) Cisco5760 WLCwith new mobilityturnedon (CAPWAP Tunnel)CAPWAP has nativemanagementplaneencryptionand optionaldata MulticastMulticastsupportis enabledin the Cisco5520 controllerwith the followingrestrictions: If all APs on the 5520 controllerare configuredin Localmode,Multicast-Multicastwill be the defaultmodeand all featuresare supported(for example,VideoStream).

10 If the APs are configuredas a mix of Localmodeand FlexConnectmode: If IPv6 is requiredon the FlexConnectAPs: DisableGlobalMulticastModeand changeto Multicast-Unicastmode. IPv6 / GARP will workon FlexConnectand LocalmodeAPs, but Multicastdata and the VideoStreamfeaturewill bedisabled. IPv6 / GARPis not requiredon FlexConnectAPs: Changethe modeto Multicast-Multicastand enableGlobalMulticastModeand IGMP/ MLDsnooping. IPv6,GARP, MulticastData,and VideoStreamare supportedon local Mobility and MC SupportCisco5520 supportsthe new mobilityfunctionalityto be compatiblewith inter-platformIRCMand guestanchorfunctionality. Thisplatformwill not functionas an and Feel of the Cisco 5520 Wireless LAN ControllerThe Cisco5520 controllerenablesconsoleredirectby defaultwith baud rate 9600,simulatinga VT100terminalwith no flow 5520 Controllerhas the sameboot sequenceas Up and Initial Configuration InitialBoot Sequence Boot Options Loadingthe OS and Boot Loader LoadingControllerServicesInitial Controller ConfigurationConfigurationWizard As with all othercontrollerplatforms,initialboot up requiresconfigurationusingthe Wizard As with all othercontrollerplatforms,5520 WLCalso support