Cisco NAC3350-PROF-K9 Hardware Installation Guide - Page 144
Before Starting, Modifying CAS High Availability Settings,
View all Cisco NAC3350-PROF-K9 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 144 highlights
Installing a Clean Access Server High Availability Pair Chapter 4 Configuring High Availability (HA) Note The CA-signed certificate must be either based on the Service IP or a hostname/domain name resolvable to the Service IP through DNS. Note The Clean Access Server retrieves session information from the CAM during failover. For example, if user A is logged into the system in role B, when failover occurs, user A will still be logged in and have access specified by role B. If the CAS is the DHCP server and failover occurs, user A also retains his/her assigned IP address because to HA CASs do directly exchange DHCP failover information. Note For HA CAS pairs, any CAS network setting changes performed on an HA-Primary CAS through the CAS management pages or CAS direct access web console must also be repeated on the HA-Secondary CAS unit through its direct access web console. These settings include updating the SSL certificate, system time, time zone, DNS, or Service IP. See the Cisco NAC Appliance - Clean Access Server Configuration Guide, Release 4.8(3) and Modifying CAS High Availability Settings, page 4-40 for details. Before Starting 1. Before starting, make sure that both Clean Access Servers are installed and accessible over the network. See Perform the Initial CAS Configuration, page 3-24. 2. The two Clean Access Servers in the HA pair must remain Layer 2 adjacent to support heartbeat and sync functions. 3. If the Clean Access Servers have already been added to the management domain of a CAM, they should be removed. Use the Delete button in the List of Servers tab to remove the CASs. 4-24 Cisco NAC Appliance Hardware Installation Guide OL-20326-01