Thanks for the suggestion, but no joy. The config update sync'd, but the allowlist didn't. FWIW, I always assumed that config updates were separate from database updates. Not sure this confirms that assumption since nothing I've tried syncs the allowlist, but I may try it again after this is fixed to find out for sure.
Oddly, IMO anyway, I tried updating the allowlist and that didn't sync it either - even on the MDs that had been up the whole time and were in sync prior to that change. I assumed the issue was with the MD's that had been disconnected, but I'm starting to suspect the MM may not be pushing the allowlist as expected. Everything else seems to be working, and the MDs seem to be able to pull records from the MM. When APs got load balanced after connecting the MD's yesterday, the ones that were not in the allowlist on their assigned MDs got an IKE error, bootstrapped, and them connected just fine. This suggests that the MD was able to learn that AP from the MM. I've seen what happens when it can't, and the AP just reboots continuously.
Original Message:
Sent: Jul 16, 2025 06:20 AM
From: mrww
Subject: Allowlist Synchronization
When you Write memory from the MM it should push down the configs to the MDs. It might be worth making a trivial change just to force the MM to push the config to all the MDs.