Security

last person joined: 23 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Reboot a subscriber - drop it first?

This thread has been viewed 2 times

  • 1.  Reboot a subscriber - drop it first?

    Posted Dec 15, 2017 03:33 PM

    Hi,

    I have a CPPM cluster with 8 appliances running 6.6.8.100017. In the last 24 hours two subscribers started logging dbcn, cpass-londiste restarted, and replication errors. One of the subscibers also stopped authenticating 802.1x users for about one minute today.

     

    Both of these two servers are pegged at 100% 'Swap Memory Usage'.  'Swap Space' is over 102% used. See attached pics. All servers remain in sync and aside from the 1 minute blip the two troubled subscribers are still handling their own. I have a small maintenance window tomrorow and would like to reboot one of these as a first step.

     

    My question is should I drop the subsciber first before rebooting it or just reboot it? If just reboot should I stop RADIUS service first?

     

    If anyone has any thoughts about root cause or have seen this before I'd be inerested to know your experience. The only changes made was adding syslog parameters to a different subsciber (not having issues) and literally just logging into Insight to poke around.

     

    Thanks in advance.

     

    Screen Shot 2017-12-15 at 3.22.43 PM.pngScreen Shot 2017-12-15 at 3.15.04 PM.png



  • 2.  RE: Reboot a subscriber - drop it first?

    Posted Dec 18, 2017 11:51 AM

    Hello! Should be no need to drop the subscriber first unless you plan on it staying out of the cluster for more than 24 hours?

     

    When doing upgrade/rebooting Clearpass servers you usually just change the standby-publisher to false to avoid the backup becoming publisher in normal maintenance windows.



  • 3.  RE: Reboot a subscriber - drop it first?

    Posted Dec 19, 2017 03:02 PM

    Thanks for the reply. I rebooted the subscriber 3 days ago without dropping it first and it came back up cleanly. Swap disk and Swap Disk Memory returned to normal values. After three days things still look good!

     

    Mike