Cisco 5520 Quick reference guide

Cisco 5520 Wireless LAN Controller Deployment Guide
Cisco 5520 Wireless LAN Controller Deployment Guide 4
Introduction 4
Prerequisites 4
Product Overview 4
Cisco 5520 Controller Key Attributes 5
AP Platform Support 7
Platform Components 8
SFP Support 15
Image Specifications 16
Fault Tolerance Capability 16
Customer Replaceable Units 17
Link Aggregation (LAG) 18
Inter-Platform Mobility and Guest Anchor Support 18
Infrastructure Multicast 18
New Mobility and MC Support 19
Look and Feel of the Cisco 5520 Wireless LAN Controller 19
Out of Band Management on Service Port 26
Local EAP Support 28
Wired Guest Access Support 28

Licensing 29
2

3

Revised: March 23, 2016,
Cisco 5520 Wireless LAN Controller Deployment Guide
Introduction
This document introduces the Cisco 5520 Wireless LAN Controller (WLC), and provides general guidelines for its deployment. The
purpose of this document is to:
•Provide an overview of the Cisco 5520 WLC, and its deployment within the Cisco Unified Architecture.
•Highlight key service provider features.
•Provide design recommendations and considerations specific to the Cisco 5520 Controller.
Prerequisites
Requirements
There are no specific requirements for this document.
Components Used
This document is not restricted to specific software and hardware versions.
The information in this document is created from the devices in a specific lab environment. All of the devices used in this document
started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any
command.
Conventions
Refer to Cisco Technical Tips Conventions for more information on document conventions.
Product Overview
The existing Cisco 5500 series controller scales up to 500 APs, 7,000 clients, and 8 Gbps maximum throughput. The explosion of
mobile clients in enterprise empowered by bring your own device (BYOD), the deployment of wireless in mission-critical applications,
4

and the adoption of Wi-Fi in service provider networks enabling new business models require wireless networks to provide larger
AP scale, client scale, and higher throughput.
The Cisco Unified Wireless Network Software Release 8.1 addresses these key challenges. Release 8.1 delivers the new Cisco 5520
wireless controller with support for 20 Gbps throughput, 1500 APs, and 20,000 clients to ensure better performance and scale for
business critical networks.
The following table captures some of the key hardware capabilities of this new platform.
Table 1: Hardware Capabilities of Cisco 5520 WLC
5520Hardware Capabilities
1 RUChassis Height
20 GbpsThroughput
1500AP Support
20,000Client Support
2 x SFP+Data Ports
-40°C –65°C
Storage Temperature
5–40°C
Operating Temperature
10 –90% (non-condensing)
Operating Humidity
770 W ACPower Options
Cisco 5520 Controller Key Attributes
Some of the key attributes of the Cisco 5520 controller are:
•High AP scale (1500 APs in 1 RU )
•High client density (20,000 clients in 1 RU)
•High throughput of 20 Gbps with 1 RU
•Support for 1500 APs, 1500 AP groups, 1500 FlexConnect groups, and up to 100 APs per FlexConnect group
•Support for 4096 VLANs
•512 Interface Groups
•PMK Cache size of 40,000
•Support for 25,000 RFIDs tracking, and the detection and containment of up to 24,000 rogue APs, and up to 32,000 rogue clients
(over and above the RFIDs)
•3,000 APs per RRM Group
5

•3,20,000 AVC Flows
•High Availability with sub-second AP and client SSO
•TrustSec SXP Support
•Support of all AP modes of operation (Local, FlexConnect, Monitor, Rogue Detector, Sniffer, Bridge, and Flex+bridge)
•Right to Use (RTU) licensing for ease of license enablement and ongoing licensing operations
The following table shows the Cisco Enterprise Campus Controllers comparison at a glance:
Table 2: Cisco Enterprise Campus Controllers comparison
WiSM255085520Attributes
Enterprise CampusEnterprise Campus and full
service branch
Enterprise Campus and full
service branch
Deployment type
All AP modesAll AP modesAll AP modesOperational Modes
1000 APs
15,000 clients
500 APs
7000 clients
1500 APs
20,000 clients
Maximum Scale
100 –100012 –5001 –1500
AP Count Range
CISL basedCISL basedRight to Use (with EULA)Licensing
Internal connections to the
Catalyst Backplanes
8 x 1 G ports2 x 10 G portsConnectivity
AC/DC Catalyst chassis
redundant PSU option
AC (redundant PSU option)770 W AC (optional redundant
PSU)
Power
100100
1500
Maximum Number of
FlexConnect Groups
2525100Maximum Number of APs per
FlexConnect Group
4,0002,00024,000Maximum Number of Rogue
APs Management
5,000250032,000Maximum Number of Rogue
Clients Management
10,0005,00025,000Maximum Number of RFID
2,0001,0003,000Maximum APs per RRM
Group
5005001500Maximum AP Groups
6

WiSM255085520Attributes
6464512Maximum Interface Groups
646464Maximum Interfaces per
Interface Group
5125124096Maximum VLANs Supported
512512512Maximum WLANs Supported
30,00014,00040,000Fast Secure Roaming
Clients/Max PMK Cache
Feature support unless otherwise specified will be the same as in 8510.Note
AP Platform Support
The Cisco 5520 supports the following access point models:
•1260, 3500, 600
•1600, 2600, 3600
•1700, 2700, 3700
•OEAP 600
•702I, 702W
•Cisco 891 series integrated services router and Cisco 881 series integrated services router
•1530, 1552WU, 1550, 1570
•1040, 1140, 1260 support extended to 8.1 with 8.0 parity
7

Platform Components
Cisco 5520 WLC Front Panel View
Cisco 5520 wireless LAN controller supports several buttons, LED indicators, and a KVM connector on the front panel. It also
includes a power button and Locator LED button, along with the following LEDS: System status, PSU status, Fan status, Network
LED, and Temperature LED.
Power On Switch and LED Indicator
A Power Button push switch with integrated LED is located on the front panel.
Table 3: Power On Switch and LED Indicator
FunctionLED Indicator Color
Card Power StatusBi-color Yellow
(Amber)
Green
DecodeState
Card Power OffOff
Soft OffAmber On
Card Power OnGreen On
Locator Switch and LED Indicator
A Unit Identify push switch with integrated LED is available on the front panel and rear panel . Each press on the button toggles
between active and non-active states.
System Status LED Indicator
The system status LED located on the front panel indicates the overall system health.
8

Table 4: System Status LED Indicator
FunctionLED Indicator Color
System StatusBi-color Yellow
(Amber)
Green
DecodeState
UndefinedOff
Card is in normal operating conditionGreen On
System is in a degraded operational stateAmber On
Critical fault stateAmber Blinking
Fan Status LED Indicator
The Fan status LED located on front panel indicates the fan health.
Table 5: Fan Status LED Indicator
FunctionLED Indicator Color
Fan StatusBi-color Yellow
(Amber)
Green
DecodeState
UndefinedOff
Fans are operating and no error condition
has been detected
Green On
Fans are in a degraded operational state
•One of N fans has a fault
Amber On
Critical fault state
•Two or more fans has a fault
Amber Blinking
Adaptive fan speed to control noise issues seen with 5520 FCS hardware is introduced in release version
8.1.131.0.
Note
9

Temperature Status LED Indicator
The temperature status LED is located on the front panel and indicates whether or not the system is operating within acceptable
temperature limits.
Table 6: Temperature Status LED Indicator
FunctionLED Indicator Color
Temperature StatusBi-color Yellow
(Amber)
Green
DecodeState
UndefinedOff
System is operating at normal
temperature
Green On
One or more temperature sensors reaches
UCR threshold
Amber On
One or more temperature sensors reaches
UNR threshold
Amber Blinking
Power Supply Status LED Indicator
The power supply status LED is located on the front panel and indicates proper functioning of the power supply.
Table 7: Power Supply Status LED Indicator
FunctionLED Indicator Color
AC Power Supply StatusBi-color Yellow
(Amber)
Green
DecodeState
UndefinedOff
AC power supplies are operating and no
error condition has been detected
Green On
One or more power supplies are in a
degraded operational state
Amber On
One or more power supplies are in a
critical fault state
Amber Blinking
10

Network Link LED Indicator
The network LED is located on the front panel and indicates if any of the on-board networking ports are connected and operating.
Table 8: Network Link LED Indicator
FunctionLED Indicator Color
Network Link StatusSingle Color
Green DecodeState
UndefinedOff
Link on any of the ports, but no activityGreen On
Activity on any of the portsGreen Blinking
Front Panel KVM Break-out Connector
A single female connector provides access to video, two USB ports for keyboard and mouse, and an RS-232C console serial port.
An external breakout connector to industry standard interfaces is required. The following figure shows an example cable.
The interfaces for the cable are:
1Front panel KVM/Console connector
2DB9 serial port connector
3Dual Type-A USB 2.0 connectors
4DB15 Video connector
11

Cisco 5520 WLC Rear Panel View
The rear panel has the following interfaces:
1Two Type A 3.0 USB ports
2IMC port 10/100/1000 Base-T
To setup the CIMC interface:
•Connect the CIMC cable.
•To enable DHCP to set the IP, use the command imm dhcp enable.
•If DHCP is not available, use the command imm address <ip address> <net mask> <gateway ip>.
•To view the IP and details, use the command imm summary.
12

CIMC web interface is for advanced debugging for TAC and escalation use only.
Changing of settings in the CIMC by customer can cause adverse impact on controller
software and functionality.
Note
3SerialCOM connector —Standard RS-232 Serial COM port using RJ-45 connector
4Ethernet service port (SP) —Management 10/100/1000 Base-T
5Redundancy Port (RP)
FunctionLED Indicator Color
Management Interface Port SpeedBi-color Yellow
(Amber)
Green
DecodeState
Link Speed = 10 MbpSOff
Link Speed = 100 MbpSAmber On
Link Speed = 1 GbpSGreen On
FunctionLED Indicator Color
Management Interface Port StatusBi-color Yellow
(Amber)
Green
DecodeState
No LinkOff
LinkGreen On
Traffic PresentBlinking
6VGA Connector —Rear panel has a standard VGA port using a female D-Sub-15 Connector
7ID Switch and LED
8Two 1/10 G Management and Network ports
13

Functional DefinitionLED
LED: (Amber) On indicates power is goodPwr OK
LED: (Amber) On indicates 10 G mode
LED: Off indicates 1 G mode
10 G
Green On—Link is up in 10Gbe Mode
Amber On—Link is up in 1 Gbe Mode
Off—Link status is down
Port-n Link Status
LED: (Green) blinking indicates link activityPort-n Link Activity
Switching Between 10 G and 1 G
•If there is nothing installed in port 1, the board will be configured for 10 G mode by default. Therefore, to switch to 1 G mode,
an SFP module must be installed in port 1 and the system needs to be rebooted.
•Conversely, if an SFP module is installed and the user wants to switch to 4 x 10 G mode, then an SFP+ module must be installed
in port 1 and the WLC rebooted.
•Thus, Online Insertion and Removal (OIR) of SFP and SFP+ between 10 G and 1 G is not possible.
•OIR of 10 G to 10 G and 1 G and 1 G is possible.
It is recommended to have all ports as either 10 G or 1 G. In case they are different, port 1 SFP determines
the mode of operation and functionality on the other SFPs may not work.
Note
Table 9: Functionality of Cisco 5520 WLC when OIR occurs
RemarksPort2Port1Hot Swap of SFP/SFP+
Cisco 5520 WLC requires
reboot for Port1 OIR in 1G
YesNo1G to 1G
14

RemarksPort2Port1Hot Swap of SFP/SFP+
Cisco 5520 WLC requires
reboot between 1G and 10G
NoNo1G to 10G
Cisco 5520 WLC requires
reboot between 10G and 1G
NoNo10G to 1G
No reboot requiredYesYes10G to 10G
SFP Support
Network ports for 5520 WLC support the following Cisco SFP/SFP+ modules:
•GLC-T
•SFP-10G-SR
•SFP-10G-LR
•SFP-10G-LRM
•SFP-H10GB-CU1M
•SFP-H10GB-CU2M
•SFP-H10GB-CU2-5M
•SFP-H10GB-CU3M
•SFP-H10GB-CU5M
•SFP-H10GB-ACU7M
•SFP-H10GB-ACU10M
•SFP-10G-AOC7M
•SFP-H10GB-CU1-5M
•SFP-10G-AOC3M
•SFP-10G-AOC1M
•SFP-10G-AOC2M
•SFP-10G-AOC5M
•SFP-10G-AOC10M
•GLC-LH*
•GLC-EX-SMD*
•GLC-SX-MMD*
•SFP-10G-SR-S
•SFP-10G-LR-S
15

*Needs GLC-T on Port 1.Note
Image Specifications
Cisco 5520 WLC supports all the features of release 8.1.
Feature Not Supported on 5520 Controller Platform
The following features are not supported on the 5520 controller platform:
•Local Authentication (where the controller acts as the authentication server)
•Internal DHCP server
•Wired Guest
Fault Tolerance Capability
The Cisco 5520 supports the stateless N+1 redundancy model . The N+1 HA architecture provides redundancy for controllers across
geographically separate data centers with low cost of deployment. A single backup controller can be used to provide backup for
multiple primary WLCs.
For more information on this model of redundancy, refer to
http://www.cisco.com/c/en/us/td/docs/wireless/technology/hi_avail/N1_High_Availability_Deployment_Guide/N1_HA_Overview.html.
AP and Client SSO
High Availability Stateful Switchover (SSO) model provides a Box-to-Box redundancy with one controller in active state and a
second controller in hot standby state. The SSO model monitors the health of the active controller via a redundant (HA) port. Cisco
5520 wireless LAN controller has a failover RP Port.
The configuration on the active controller is synched to the standby controller via the redundant port. In HA, both controllers share
the same set of configuration including the IP address of the management interface. The AP's CAPWAP state (for APs in RUN state)
is also synched. As a result, APs do not go into Discovery state when the active controller fails. Furthermore, a client's information
is synced to the standby WLC when the client associates to the WLC or the client’s parameters change. Fully authenticated clients,
that is, the ones in Run state, are synced to the standby. Thus, client re-association is avoided on switchover, making the failover
seamless for the APs as well as for the clients, resulting in zero client service downtime and no SSID outage.
For more information on the SSO feature and the supported topologies, refer to the High Availability deployment Guide.
16

Connecting Cisco 5520 SSO Pair to the Wired Network
It is recommended to connect to a VSS pair and spread the links in each port-channel between the two physical switches to prevent
a WLC switchover upon a failure of one of the VSS switches.
Customer Replaceable Units
Cisco 5520 wireless LAN controller has a minimal amount of separate orderable items, including all of the following:
17

•Power supply
•SSD Hard Disk Drive (HDD)
•Option to add a redundant power supply on the Cisco 5520 WLC
The power supply units are field replaceable.Note
Link Aggregation (LAG)
A single LAG across the 2 x 10 G interfaces is supported in software versions 8.1 and later. LACP and PAgP are not supported on
the controller.
Inter-Platform Mobility and Guest Anchor Support
Guest anchor capability with:
•Cisco WLC 2504/5508 / 8510 / 7510 / WISM2 running as a foreign controller (EOIP Tunnel)
•Cisco 5520 / 8540 WLC running as a foreign controller (EOIP Tunnel)
•Cisco 5760 WLC running as a foreign controller with new mobility turned on (CAPWAP Tunnel)
Foreign controller to a guest anchor which is a:
•Cisco WLC 2504/5508 / 8510 / 7510 / WISM2 (EOIP Tunnel)
•Cisco 5520 / 8540 WLC (EOIP Tunnel)
•Cisco 5760 WLC with new mobility turned on (CAPWAP Tunnel)
CAPWAP has native management plane encryption and optional data payload encryption.
Infrastructure Multicast
Multicast support is enabled in the Cisco 5520 controller with the following restrictions:
•If all APs on the 5520 controller are configured in Local mode, Multicast-Multicast will be the default mode and all features
are supported (for example, VideoStream).
If the APs are configured as a mix of Local mode and FlexConnect mode:
•If IPv6 is required on the FlexConnect APs:
•Disable Global Multicast Mode and change to Multicast-Unicast mode.
•IPv6 / GARP will work on FlexConnect and Local mode APs, but Multicast data and the VideoStream feature will be
disabled.
•IPv6 / GARP is not required on FlexConnect APs:
18

Change the mode to Multicast-Multicast and enable Global Multicast Mode and IGMP / MLD snooping.
•
•IPv6, GARP, Multicast Data, and VideoStream are supported on local mode APs.
New Mobility and MC Support
Cisco 5520 supports the new mobility functionality to be compatible with inter-platform IRCM and guest anchor functionality. This
platform will not function as an MC.
Look and Feel of the Cisco 5520 Wireless LAN Controller
The Cisco 5520 controller enables console redirect by default with baud rate 9600, simulating a VT100 terminal with no flow control.
The 5520 Controller has the same boot sequence as existing controller platforms.
Boot Up and Initial Configuration
•Initial Boot Sequence
•Boot Options
•Loading the OS and Boot Loader
•Loading Controller Services
Initial Controller Configuration
Configuration Wizard —As with all other controller platforms, initial boot up requires configuration using the Wizard menu.
WLAN Express Setup —As with all other controller platforms, 5520 WLC also supports the Express WLAN Setup over wired
Ethernet connection.
19

20