Security

I have two clearpass servers on two different subnets. I am trying to convert one to a subscriber. Does it matter that they are in different subnets? If not, what could be the reason for failure? I have already doublechecked the cluster password and time.

 

Thanks Guys!

Yes, they can be on different subnets, but you cannot create VRRP between them.    Be sure that SSH and HTTPS are allowed between the two servers.

I figured. Thanks for clarifying. 

 

Double checked and nothing is block. 

Is it giving you an error messages?

No error code just a simple message. 

 

Make subscriber failed
Adding node as subscriber to 10.80.20.65's cluster...
Enter Publisher Password:
Setting up local machine as a subscriber to 10.80.20.65
ERROR - Setting up subscriber failed
Make subscriber failed

Make sure you set the cluster password in the sever settings, change cluster password.

Thanks tarnold. This was the first thing I checked.

There is a document on the suppot site on firewall setting. I would double check that you have all the ports unblocked.

Same issue...firewall was blocking the ports.  Thanks for the help!

Old topic with another solution.

 

I inherited a situation just like this. The solution was the servers had to be running the same version.

 

in newer versions it tells you that:

 

ERROR - 192.168.15.24: - Product version mismatch. Subscriber version=6.3.0.60730, publisher version=6.3.4.64924