Security

last person joined: yesterday 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Way to Stop ClearPass Cluster Update?

  • 1.  Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 10:12 AM

    Initially installing the Update for Cluster Upgrade Interface Patch for ClearPass 6.6.7 & 6.6.8 to Enable ClearPass 6.7.0 Upgrade. Unfortunately I did not read the fact that is should only be installed on the Publisher and not the subscriber. 

     

    My problem is now the update tool on the publish is stuck in in progress on applying to the subscriber. Is there a way to end this update as it shows in the logs on our subscriber that it does not apply to the subscriber. 

     

    Capture.PNG



  • 2.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 10:39 AM

    Please work with Aruba TAC for issues like this.



  • 3.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 10:41 AM

    Would love to but cant get into HPE enterprise support after login:

     

    Capture.PNG



  • 4.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 10:48 AM

    Hi,

     

    We can not stop the patch installation in middle, let it get installed, if it fails please open TAC ticket.

     

    Regards,

    Pavan

     

     



  • 5.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 10:51 AM

    Yea it is not failing it is just hung on the Publisher as 'In Progress'.  I logged into the subscriber locally and it says it failed because it was a subscriber.

     

    Thanks



  • 6.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 11:00 AM

    Hi,

     

    If it shows failed in subscriber then open TAC ticket, engineer can login to CLI and remove the patch from subscirber and intiitate the upgrade process.

     

    Try call support

     

    http://www.arubanetworks.com/support-services/contact-support/

    I tried hpmynetworking, it looks site is down.

     

    Regards,

    Pavan



  • 7.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 05, 2017 11:13 AM

    Thanks for confirming. I am calling now.

     

    Chris



  • 8.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 06, 2017 02:58 AM

    I had this exact same issues yesterday.

    I used the cluster update tool to install this pre-6.7 update to both publisher and subscriber.

     

    From release notes:

    "Through the Cluster Upgrade Portal — If a 6.6.7 or 6.6.8 version is upgraded to 6.7.0 through the Cluster
    Upgrade portal, a preparation patch is required first, and must be applied only to the publisher."

     

    Guess that was my issue... RTFM. sigh

     

     

     



  • 9.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 06, 2017 07:44 AM

    Haha yep! Read the manual. Support was able to get in and can the job hopefully they were able to help you aswell.

     

     



  • 10.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 06, 2017 07:47 AM

    Lets say support managed to get it fixed in the end. How we got there was less than ideal.



  • 11.  RE: Way to Stop ClearPass Cluster Update?

    Posted Dec 06, 2017 08:54 AM

    Yup just overlooked it in the release notes. Maybe in the future there is a way to prevent using the update cluster tool for patches of this nature only to be installed on the publisher.