Security

Hi,

We have two VM clearpass, one in publisher and one subscriber.
We have configurate high avaibility within cluster.

When we tests the high avaibility, we disconnecte the publisher and now it's the subscriber take the control, all it work fine exept when i want to create a guest user, the subcriber do not accepts, because we don't have the permission to write on.
Is it a normal work ?
Is there not a solution for to be a full mode of high avaibility ?

Thanks

Yann

are you on the latest version/patch?

A couple things

1. Using a VIP in Clearpass 

2. Are you promoting the subscriber to publisher?

        a. If you are take a look at the logs and see if the promotion is completed.

        b. If it does take over as publisher and you still can't add guest please open a TAC case.

3. If you are not promoting the subscriber

        a. Then CPPM is working as expected.

        b. The publisher is the one that contains the guest user database.

So if the publisher goes down the subscriber will take over for all the auths and accounting for radius and tacacs, but you will not be able to add new guest accounts until the publisher comes back online.

You will need to make sure you not only are you using the VIP but you must also turn on auto promotion in the cluster wide settings.

Thanks you for your answer, we have test and that meets the needs of my customer

Regards

Yann

I think in the las version :  6.2.0.54353