Cisco NAC3350-PROF-K9 Hardware Installation Guide - Page 130

CCA Manager > Network, Clear Access Manager Mode

Page 130 highlights

Installing a Clean Access Manager High Availability Pair Chapter 4 Configuring High Availability (HA) If using a CA-signed certificate for the HA pair: Note This process assumes you have already generated a Certificate Signing Request and accompanying Private Key, submitted the request to your Certificate Authority, and have received your CA-signed certificate. If you have not yet obtained a CA-signed certificate for the CAS, be sure to follow the instructions in the "Manage CAM SSL Certificates" section of the Cisco NAC Appliance - Clean Access Manager Configuration Guide, Release 4.8(3) for details. Step 2 a. Click Browse and navigate to the directory on your local machine containing the CA-signed certificate and Private Key. b. Click Import. Note that you will need to import the same certificate later to the HA-Secondary CAS. Go to Administration > CCA Manager and click the Failover tab. Choose the HA-Primary option from the Clear Access Manager Mode dropdown menu. The high availability settings appear: Figure 4-5 HA-Primary Clean Access Manager Failover Settings Step 3 Step 4 Copy the value from the IP Address field under Administration > CCA Manager > Network and enter it in Service IP Address field. The Network Settings IP Address is the existing IP address of the primary Clean Access Manager. The idea here is to turn this IP address, which the Clean Access Servers already recognize, into the virtual Service IP address Clean Access Servers use for the Clean Access Manager pair. Change the IP address under Administration > CCA Manager > Network to an available address (for example x.x.x.121). 4-10 Cisco NAC Appliance Hardware Installation Guide OL-20326-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176

4-10
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 4
Configuring High Availability (HA)
Installing a Clean Access Manager High Availability Pair
If using a CA-signed certificate for the HA pair:
Note
This process assumes you have already generated a Certificate Signing Request and accompanying
Private Key, submitted the request to your Certificate Authority, and have received your CA-signed
certificate. If you have not yet obtained a CA-signed certificate for the CAS, be sure to follow the
instructions in the “Manage CAM SSL Certificates” section of the
Cisco NAC Appliance - Clean Access
Manager Configuration Guide, Release 4.8(3)
for details.
a.
Click
Browse
and navigate to the directory on your local machine containing the CA-signed
certificate and Private Key.
b.
Click
Import
. Note that you will need to import the same certificate later to the HA-Secondary
CAS.
Step 2
Go to
Administration
>
CCA Manager
and click the
Failover
tab. Choose the
HA-Primary
option
from the
Clear Access Manager Mode
dropdown menu.
The high availability settings appear:
Figure 4-5
HA-Primary Clean Access Manager Failover Settings
Step 3
Copy the value from the
IP Address
field under
Administration
>
CCA Manager > Network
and enter
it in
Service IP Address
field. The Network Settings IP Address is the existing IP address of the primary
Clean Access Manager. The idea here is to turn this IP address, which the Clean Access Servers already
recognize, into the virtual Service IP address Clean Access Servers use for the Clean Access Manager
pair.
Step 4
Change the
IP address
under
Administration
>
CCA Manager > Network
to an available address (for
example
x
.
x
.
x
.121).