Phased migration from ExtremeWireless V9 to V10

[LeoP1]

Hi Guys,

I'm working on a LAB environment to find the best (or less painful) path to migrate a customer installed base to V10.

This customer is running V9.21.20 (latest code) and have about 140 legacy (non V10-supported) access points deployed, and only about 10 38xx.

With the discontinuation of thee 38xx family, now we need to create a way to keep it working and expanding, while they are working on the phased replacement of the legacy base (26xx and 36xx, indoor and outdoor).

I was thinking about moving all legacy APs to the "CONTROLLER-1" and keep it as V9, while upgrading "CONTROLLER-2" to V10 and moving all the newer APs (38xx) to it.

In the LAB I found some issues... V9.21.20 can't get synchronized with V10.41.08 (besides it shows on the V9 side's VnS-> Sync Summary as Global Config Synchronized, on the V10 side it shows as Not Synchronized, just as all other VNS, WLANS, Topologies, and everything).

The Availability and Mobility tunnels seems to be UP (at the home screen, but on logs it shows as flappling, but I need to investigate this further... all connectivity is OK and worked fine before the CONTROLLER-2 upgrade to V10).

I know we are talking about different releases, and many things can't work, but it seems that nothing works with this scenario.

Ok, we can't have HA for legacy APs and newer features can't be synchronized, but theoretically the customer could live without it while he doesn't upgrade the legacy APs, but not even the GUEST PORTAL accounts get synchronized, creating a BIG issue, forcing to create two guest accounts for the same user to make it work on both environments (by the way, the customer don't have NAC).

Any ideas or experiences?

Best regards,

-Leo

[LeoP1]

Hi Stephan,

I've created a bash script that can handle the job, but still far from elegancy...

As soon as I have some spare time to make it more useful for everyone I'll share it.

Thanks!

Best regards,

-Leo

[StephanH]

Hello Leonardo,

the guest user handling is located in the CLI-Context: wlan->clients.
Here you can display all current guest user with the command show.

New guest accounts can be created with: client (YYYY-MM-DD HH:MM:SS)

Guest accounts can be deleted with: no client (YYYY-MM-DD HH:MM:SS)

If the guest admin do all changes on V9 roughly your program has to do the following three steps:

1. Receive existing user on V9 and V10 controller
2. Check if there are new guest user on V9 => If yes add to the V10
3. Check if there are user deleted on V9 => If yes delete from V10, too

That's can be done with python as script on the xmc.

You will find the commands in detail in the CLI Reference Guide.

Best regards
Stephan

[LeoP1]

Hi Stephan,

This customer fits the scenario where they have 2 V9 and want to migrate to 2 V10, but it will take some time (I hope not years LOL).

As they have XMC running, this script could be a great solution...

Can you share some more info on how can I make it?

Thank you!

Best regards,

-Leo

[StephanH]

Hello Leonardo,

we did several migrations with mobility groups of one V9 and one v10 controller. But we have customers with two V9 and two v10 controller (with availability)over a longer period (years), too.

If you have an XMC or an external server running e. g. python you can do the guest users sync via an little program. It's not really difficult.

Give the administrators for the guest user only access to the V9 controller and do a sync every 3 or 5 minutes. You can create and delete user on the other controllers by program. If you give the user only access to one of the controllers you can always sync in one direction and the program is more easier.

If you have more locations with APs it's a good practice to keep one site on V9 and another on V10.
In that case you have the same feature set on one site and in case there is a bug (which almost never exists ;-)). It's easier to locate the issue because every AP on one side will be affected.

If you have only one controller version on one side the guest access sync is much easier because of you need to sync less often.

Best regards
Stephan