Security

Reply
Occasional Contributor I

ClearPass Cluster Update without downtime

Hi guys,

 

is there a way to update a CP Cluster of two nodes (publisher and subscriber) without downtime? As far as I know there are no new authentications possible while the publisher is installing and rebooting.

 

Thanks for your help ;)

Frequent Contributor II

Re: ClearPass Cluster Update without downtime

what i do is change all the authentication destination from controller to one clearpass, upgrade it then do the same with the other one.

as long your clearpass can handle all the auths alone, it should be just fine.

Ricky E. Lee
CWNA | ACMP | ACCP
Guru Elite

Re: ClearPass Cluster Update without downtime

You can also just stop the RADIUS and TACACS services on the node and the controller will automatically mark it out of service.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: ClearPass Cluster Update without downtime

But is a subscriber able to handle new authentications while the publisher is not available?

Guru Elite

Re: ClearPass Cluster Update without downtime

Yes

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: