Security

Reply
Frequent Contributor I
Posts: 83
Registered: ‎09-29-2011

Clearpass Guest / High Avaibility / Can't create guest account

Hi,

 

We have two VM clearpass, one in publisher and one subscriber.
We have configurate high avaibility within cluster.

 

When we tests the high avaibility, we disconnecte the publisher and now it's the subscriber take the control, all it work fine exept when i want to create a guest user, the subcriber do not accepts, because we don't have the permission to write on.
Is it a normal work ?
Is there not a solution for to be a full mode of high avaibility ?

 

Thanks

 

Yann

Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: Clearpass Guest / High Avaibility / Can't create guest account

are you on the latest version/patch?

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Aruba
Posts: 1,520
Registered: ‎06-12-2012

Re: Clearpass Guest / High Availability / Can't create guest account

A couple things

 

1. Using a VIP in Clearpass 

 

 

2. Are you promoting the subscriber to publisher?

        a. If you are take a look at the logs and see if the promotion is completed.

        b. If it does take over as publisher and you still can't add guest please open a TAC case.

 

3. If you are not promoting the subscriber

        a. Then CPPM is working as expected.

        b. The publisher is the one that contains the guest user database.

 

So if the publisher goes down the subscriber will take over for all the auths and accounting for radius and tacacs, but you will not be able to add new guest accounts until the publisher comes back online.

 

You will need to make sure you not only are you using the VIP but you must also turn on auto promotion in the cluster wide settings.

 

screenshot_01 Aug. 07 23.39.gif

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Frequent Contributor I
Posts: 83
Registered: ‎09-29-2011

Re: Clearpass Guest / High Avaibility / Can't create guest account

I think in the las version :  6.2.0.54353

 

 

Frequent Contributor I
Posts: 83
Registered: ‎09-29-2011

Re: Clearpass Guest / High Availability / Can't create guest account

Thanks you for your answer, we have test and that meets the needs of my customer

 

Regards

 

Yann

Search Airheads
Showing results for 
Search instead for 
Did you mean: