Security

Reply
Occasional Contributor I

ClearPass Cluster IP

When two ClearPass nodes are a members of a cluster, is it possible to use the publisher's IP as a cluster IP? For radius authentication is it enough to use only the publisher's IP, or should we set the subscriber's IP as a fallback radius server? Amigopod used a cluster IP to act as one server but there is no option to set the cluster IP at ClearPass. I'm afraid the ClearPass cluster is only about DB synchronization. How does the ClearPass cluster work when I need to use it as a captive portal? Is it not possible to define a fallback portal in the controller. Do I need some extra clustering HW/SW to have a HA captive portal? Which interface does the subscriber node use for heartbeat signalization? The management, the data or both?

Contributor I

Re: ClearPass Cluster IP


gbagita wrote:

 How does the ClearPass cluster work when I need to use it as a captive portal? Is it not possible to define a fallback portal in the controller. Do I need some extra clustering HW/SW to have a HA captive portal


You could leverage an external load balancer (such as F5)  to provide this redundancy. I would be interested to hear what anyone else is doing with respect to Portal high availability.

 

Regards

 

Chris

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: