Users Guide

382 | Control Plane Security Dell PowerConnect ArubaOS 5.0 | [User Guide
You can view a controller’s current sequence number via the CLI using the command:
show whitelist-db cpsec-seq
Viewing and Managing the Master or Local controller Whitelists
The following sections describe the commands to view and delete entries in a master or local controller whitelist.
Viewing the Master or Local Controller Whitelist
To view the master or local controller whitelists via the WebUI, use the procedure below:
1. Access the controller’s WebUI, and navigate to Configuration>Controller.
2. Select the Control Plane Security tab.
The master and local controller whitelist tables each include the following information:
To view the master or local controller whitelists via the command-line interface, issue the following commands:
show whitelist-db cpsec-master-ctlr-list [mac-address <mac-address>]
show whitelist-db cpsec-local-ctlr-list [mac-address <mac-address>]
Deleting an Entry from the Master or Local Controller Whitelist
There is no need to delete a master controller from the master controller whitelist during the course of normal
operation. However, if you remove a local controller from the network, you should also remove the local controller
from the local controller whitelist on the master controller. If the local controller whitelist contains entries for
controllers no longer on the network, then a campus AP whitelist entry can be marked for deletion but will not be
physically deleted, as the controller will be waiting for an acknowledgement from another controller no longer on
the network. This can increase network traffic and reduce memory resources on the controller.
Table 74 Master and Local Controller Whitelist Information
Data Column Description
MAC-Address On a local controller whitelist: MAC address of the master controller.
On a master controller whitelist: MAC address of a local controller.
IP-Address On a local controller whitelist: IP address of the master controller.
On a master controller whitelist: IP address of a local controller.
Sequence Number The number of times the controller in the whitelist received and acknowledged a campus
AP whitelist change from the controller whose WebUI you are currently viewing.
For deployments with both master and local controllers:
z The sequence number on a master controller should be the same as the remote
sequence number on the local controller.
z The sequence number on a local controller should be the same as the remote
sequence number on the master controller.
Remote Sequence Number The number of times that the controller whose WebUI you are currently viewing has
received and acknowledged a campus AP whitelist change from the controller in the
whitelist.
For deployments with both master and local controllers:
z The remote sequence number on a master controller should be the same as the
sequence number on the local controller.
z The remote sequence number on a local controller should be the same as the
sequence number on the master controller.
Null Update Count The number of times the controller checked its campus AP whitelist and found nothing to
synchronize with the other controller. By default, the controller compares its control plane
security whitelist against whitelists on other controllers two minutes. If the null update
count reaches 5, the controller will send an “empty sync” heartbeat to the remote
controller to ensure the sequence numbers on both controllers are the same, then reset the
null update count to zero.