Security

last person joined: 8 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Virtual ClearPass High Avalability

This thread has been viewed 3 times

  • 1.  Virtual ClearPass High Avalability

    Posted Mar 29, 2016 01:26 PM

    ClearPass HW supports High Availability ( Active / Passive Clustering )

    Does Virtual Clearpass support it ?   in this case we need two Physical servers ? 

     

     



  • 2.  RE: Virtual ClearPass High Avalability

    Posted Mar 29, 2016 02:10 PM

    Hi

    You need two servers (physicial) or two VMs or even one VM and one server. So you need just minimum two CPPS doesn't matter are they VMs or physicial.

     

    Then you have to configure one of CPPMs to be subscriber. Let's say as subscriber is slave unit.

    Subscriber will synchroznie to Publisher unit. For details refer to CPPM documentation - setup is very simple. Just be sure that both CPPMs are in same version and same patchlevel.

     

    If you want active/passive redundancy then you can configure Virtual IP for both servers. Another solution is just to define two Radius/Tacacs server in your network devices configuration.

     

    Rob