Security

Reply
MVP
Posts: 724
Registered: ‎03-25-2009

Virtual ip settings

I was under the impression that clearpass redundancy would have to be set at the authenticator level (switches/controllers)?

I.e. I would have to add the publisher and the subscriber nodes as 2 seperate radius servers in my authenticating server group in my wlan controllers.

 

Now I see however a "virtual ip settings" option in clearpass 6.1 (not sure if it was there in earlier versions).

Is this indeed like a vrrp where I enter both publisher and its subscriber with the result that my server group only needs the virtual-ip configured?

 

Any advantages of this over configuring 2 auth servers in your authenticators?

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 8,175
Registered: ‎09-08-2010

Re: Virtual ip settings

[ Edited ]

The virtual IP in 6.1 does indeed provide similar functionality to VRRP. You would point your devices to the single virtual IP. I think the benefits would depend on your network. If you have hundreds of switches and controllers, it's much easier to add a single RADIUS server config.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor II
Posts: 41
Registered: ‎05-06-2013

Re: Virtual ip settings

Can a vip be assigned to the data and management interfaces?

 

I only ask as i get an error when trying to assign a vip to the data interfaces after adding a vip to the mgmt interfaces.

 

cheers

 

 

 

MVP
Posts: 4,168
Registered: ‎07-20-2011

Re: Virtual ip settings

 

I think your issue is that you don't have both IP addresses on the same segment 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor II
Posts: 41
Registered: ‎05-06-2013

Re: Virtual ip settings

I know :smileyembarrassed:

 

bit of a typo missed the 1 got so excited to test this new feature that I missed the typo.

MVP
Posts: 724
Registered: ‎03-25-2009

Re: Virtual ip settings

Using Virtual IP interfaces in a ClearPass Cluster:

http://www.youtube.com/watch?v=0kk8HSoPiZQ

 

High availability for a ClearPass Cluster

http://www.youtube.com/watch?v=dHLRU_kYsUs

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: