An administrator implements the MultiZone feature and uses two clusters that utilize CPSec. A primary and a data zone are created. MultiZone APs successfully build sessions to the primary cluster but fail to establish sessions to the data zone cluster.
What must the administrator do to solve this problem?
For MultiZone APs to establish sessions with both the primary and data zone clusters using CPSec, they need to be added to the CPSec whitelist of each respective zone. Since the connection to the data zone is failing, it likely means that the MultiZone APs have not yet been added to the data zone's CPSec whitelist. Adding the MultiZone APs to the data zone's CPSec whitelist will resolve this issue.
C. That's ok.
C--> MultiZone CPsec on DZ It is highly recommended that you enable CPSec (Figure 4-12). At the time of this writing, the auto-certprovision feature is not supported on the DZ. Therefore, you must manually create an AP whitelist on the DZ. Later versions will support auto-cert-provisioning, eliminating the need to manually create an AP whitelist. As of AOS8.1, there is also support for MultiZone without CPsec.