How to get access points to go back to their cluster

AOS8

I have MM/MC setup 3 sets of 2 cluster 7220's. Each in their own data center. Few days ago we lost one data center due to some fiber work. The WAPS ended up on the other datacenter's controllers overloading the pair. I have LMS setup at the cluster level for each data center has a primary LMS for the group. The AP-groups are at the managed network level so each cluster has the same AP-groups. When they move over they get the new LMS from those controllers then I have to spend hours using the APMOVE command. Rebooting and putting the other cluster VIP in the provision IP doesn't move it. The only thing that works is the CLI command apmove. Which works great it's super fast I have to create these massive lists using excel and notepad. It's lot of work.

Is there a way to make them go back once the data center returns. This is one of the big reasons I want to go to AOS 10 AP's are not homed to a controller. We can dump traffic locally at the office the WAP is installed. Data center outage has no affect other then guest wireless.

reddit.com
u/blastman8888 — 5 days ago

New to HA and ESPhome can't get my HA to connect I'm able to ping the IP of the ESP32

Just got a few Esp32's followed some videos was able to install the software using a USB cable on my windows 11 PC. My HA is installed on a Raspberry pie. I found the IP address my router gave it confirmed it pings from my windows PC. When I remove the power from the Esp32 pinging stops. I know it's connected to my Wi-Fi. Just can't get the ESPhome I want to use to monitor my JK BMS solar battery.

https://preview.redd.it/i1oc9c3qa48h1.png?width=547&format=png&auto=webp&s=579fe231e0d738e402405f086f1bcb20b7114a37

I eventually got it working I had to add the device to an area then it asked for the IP address and it was able to connect.

reddit.com
u/blastman8888 — 18 days ago

AP-555 Split 5GHZ radio set to automatic Airmatch hasn't turned any on

I'm testing a new AP group we have few thousand AP555's. I wanted to split the radio because I've never seen a single client connect 8x8. I thought the MM would automatically turn it on if I set it to automatic. None of them have been enabled. Is there something has to be done to get Airmatch to turn it on. Only reason I left it in automatic was if we had interference could allow airmatch to turn it off. I did find one write up on airheads should set it to enable but also said use that if we wanted to manually set the channels. I want Airmatch to do that.

reddit.com
u/blastman8888 — 27 days ago

ClearPass Client did not complete EAP transaction 802.1x Machine auth. Only in one building

We have a group of AP555 and 655 in one building on one floor most windows laptops are having this timeout when trying to authenticate. We do get random timeouts in other areas but usually laptop connects after a one or two times. This actually won't allow the laptop to connect. Majority of our indoor waps are in the same AP group across the company. If we take one of those laptops into another building or outside it connects. Any idea why this would be limited to one areas. I have done some searching read about the MTU size for EAP transactions. I would think the problem would be all over if it was that only. Controllers are 7220's on AOS8.10.0.17 with an MM.

These laptops are able to connect to guest Wi-Fi which is captive portal. I wonder if there is a problem with the backhaul from that floor.

Update This has been resolved it was a switch in the path that was allowing high BW in one direction very little BW in the other direction. It was just enough to keep the waps up, but due to the strange imbalance EAP-TLS auth was affected. After the switch was rebooted everything returned to normal. Lessons learned always start at layer 1 first.

reddit.com
u/blastman8888 — 1 month ago

WMM-vo-dscp 48 or 56? Will it help with cell phone Wifi-calling

Still working on a new WLAN configuration to improve wifi calling were also turning on 6ghz, removing 2.4g, removing slower speeds then 12mbit. This is a pre-shared key SSID has a default AAA authenticated. Tac is asking me to add ACL for voice which we are not sure it will make a difference since authenticated default role ACL says "Allow all".

Should I also enable WMM-vo-dscp 48 or 56 on the SSID profile.

WIFI-calling uses a VPN tunnel to the carrier, so would the controller even match on these values and know it's a Wi-Fi call. This is an older setting going back over 10 years probably was used for Cisco-WIFI phones that didn't use any tunnel encryption.

reddit.com
u/blastman8888 — 2 months ago

NFPA 855 2026 updated more regulation coming for battery installing.

I've been reading this new regulation requires Hazard Mitigation Analysis report done by a instate PE. Also other regulations such as 80kwh max although there seems to be some wiggle room like 80 outside and 80 in the garage. I wonder if this will impact modular solar like EcoFlow. Also a 20kw max for each battery maybe EcoFlow can argue each module is a battery.

NFPA 855 Residential Battery Setbacks: 2026 Installer Guide

u/blastman8888 — 2 months ago