Security

Reply
Super Contributor I
Posts: 293
Registered: ‎02-07-2013

Changing master publisher IP address

Hi,

Just looking at performing a major upgrade  from 6.5.4 to 6.6 on our CPPM cluster. The last upgrade from 6.4 to 6.5 didn't go that well but luckily our wireles users could fall back onto FreeRadius while I sorted the mess out. Unfortunately we've now got loads of ComWare switch stacks all using Clearpass and will NOT work using FreeRadius.

 

What I'm planning on doing is

 

Create new master publisher with both interfaces on same networks as production master publisher running 6.5.6

Backup existing master ... and

upgrade new master to same release as current master (6.5.6)

Run new master on temp license

Restore backup onto new master

Upgrade to 6.6  ( VSA change from HP to Hewlett-Packard-Enterprises was a major pain)

Bind new hardware appliance to new master forming a new cluster giving 10 K licenses

As we're load balancing using an F5, add the 2 new servers to F5 load balance pool

one by one unbind secondary publishers from old cluster, upgrade and bind to new one

( Shouldn't have any effect on auths as both clusters will be getting auth requests from the F5)

Eventually I'll have the old master publisher running in standalone mode and all clearpass servers bound to the new master.

 

This is the bit I'm not sure about.

 

1). I then need to shutdown the old master publisher and change the IP address of the new publisher primary interface to be the old one ( we've got a lot of UDPhelpers pushing DHCP info to the old master publsher). We don't use the master publisher for authentication and all bar 1 of the secondary servers have the secondary (data) network port connected together.

 

2). Our new hardware appliance will be locafed in a DR room elsewhere on campus and so will only be connecte to the cluster via its primary interface. I guess I'll need to unbind it from the new master publisher before I do the Ip address change and then rebind it after the adress change.

 

Does the above sound right?

A

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: