Wireless Access

Reply
New Contributor
Posts: 4
Registered: ‎11-11-2014

ClearPass cluster publisher/subscriber mismatched versions

Looking for some guidance regarding the following situation:

 

We currently have a single publisher CP-VA-25K running v6.3.1.62009, and 5 recently spun up   CP-VA-5K VMs that are v6.3.2.63239; these will be made subscribers.  Our plan was to add these 5, then get rid of the 25K and make one of the 5Ks the publisher.

 

Initially, we were going to upgrade the 6.3.1 publicher to 6.3.2, then add the 5Ks, but I can't find a 6.3.2 AOS version for download other than the OVF, which is of course not what I want for the physical appliance.  Are we are going to have to upgrade everything to a 6.4 version before we can create the cluster?

 

Any info is appreciated.  Thanks.

 

 

 

 

 

 

New Contributor
Posts: 4
Registered: ‎11-11-2014

Re: ClearPass cluster publisher/subscriber mismatched versions

Nevermind, looks like I've found it.

 

Nothing to see here, unless my cluster building process doesn't make sense.

Guru Elite
Posts: 8,792
Registered: ‎09-08-2010

Re: ClearPass cluster publisher/subscriber mismatched versions

If you are going to have 4 5K subscribers, you should consider leaving the 25k as the publisher as there will a substantial increase in load on the publisher with multiple subscribers.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor
Posts: 4
Registered: ‎11-11-2014

Re: ClearPass cluster publisher/subscriber mismatched versions

In our situation, some combination of our wireless architect and a consultant decided that we were better off replacing the single 25K appliance with 5x 5K VMs.  I think that we are looking at using our F5 environment to distribute traffic across the cluster, but i don't know that that is finalized, will work as expected, or is even needed.

 

Do client request always have to run through the publisher before being handed off to a subscriber?

Guru Elite
Posts: 8,792
Registered: ‎09-08-2010

Re: ClearPass cluster publisher/subscriber mismatched versions

No, all requests don't go through the publisher, but the publisher owns the database and uses significantly more resources than a subscriber.

 

It is recommended to use a larger publisher when using multiple subscibers.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: