PDF《Testing》

s APs and verifying successful authentication to the ACS server through each vendor'

s controller. The link to the controller at the datacenter was then purposefully brought down to simulate an outage. VoIP calls and FTP download sessions running on the laptops were monitored for any drops. Cisco FlexConnect did not experience any service outage when the controller was unavailable. FTP downloads continued, and VoIP calls remained up. The Cisco AP is capable of authenticating with the ACS server directly, bypassing the controller. Not only are existing users able to remain connected but new users may authenticate with the ACS server and pass traffic successfully. Users do not experience any down time during a controller outage. We verified that the AP was authenticating with the ACS directly by generating the authentication log reports for the last

30 minutes on the ACS. This indicated that the AP was operating in standalone mode. When the controller was brought back online, we observed that the AP went into connected mode, indicating that authentication would now take place with the controller. There was a difference with the Motorola WiNG v5.0. Motorola APs are entirely dependent on the controller. During the simulated controller outage, the entire branch loses wireless functionality. All APs are down, and do not broadcast an SSID. Existing clients lose connections, and new clients cannot join. An added headache from a network management perspective is that when the controller is brought back up, each access point at each branch must be rebooted in order for wireless functionality to be restored to end users. For Aruba VBN 2.0, when the controller was brought down, existing users kept their connections. VoIP calls remained up, and FTP sessions continued to download. However, new users were unable to authenticate using 802.1x as the APs were unable to authenticate on the controllers behalf, with or without ACS available. Local EAP (Wireless Resiliency) What happens when the primary and backup ACS Radius servers are both down at the datacenter? FTP session........