01-18-2016 08:51 AM
I've got a cluster of CPPM servers, I'm using both network interfaces so I've got a management lan and a data lan. An F5 load balances client requests across the data lan interfaces of each of our secondary servers.
I've a question about how a CoA request gets out of the cluster. If I'm logged onto the master publisher and I send a CoA request to terminate a session, what clustered box does it come out of? Do CoA requests all come out of the master publisher? Does it come out of the cluster member that serviced the initial auth request?
Other reason for asking is on our comware switches you have to define the ip/key associated with the box sending the CoA and thats either going to be the master or all members of the cluster.
01-18-2016 08:53 AM
You should add all of your servers for dynamic authorization.
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
01-26-2016 12:53 AM
and if your servers have 2 network interfaces, a managment one and a data one that all the auths come in via?
Which interface do the CoA requests come out of?