Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass Cluster IP

This thread has been viewed 2 times

  • 1.  ClearPass Cluster IP

    Posted Jan 28, 2013 10:34 PM

    When two ClearPass nodes are a members of a cluster, is it possible to use the publisher's IP as a cluster IP? For radius authentication is it enough to use only the publisher's IP, or should we set the subscriber's IP as a fallback radius server? Amigopod used a cluster IP to act as one server but there is no option to set the cluster IP at ClearPass. I'm afraid the ClearPass cluster is only about DB synchronization. How does the ClearPass cluster work when I need to use it as a captive portal? Is it not possible to define a fallback portal in the controller. Do I need some extra clustering HW/SW to have a HA captive portal? Which interface does the subscriber node use for heartbeat signalization? The management, the data or both?



  • 2.  RE: ClearPass Cluster IP

    Posted Mar 03, 2013 10:21 PM
    @gbagita wrote:

     How does the ClearPass cluster work when I need to use it as a captive portal? Is it not possible to define a fallback portal in the controller. Do I need some extra clustering HW/SW to have a HA captive portal

    You could leverage an external load balancer (such as F5)  to provide this redundancy. I would be interested to hear what anyone else is doing with respect to Portal high availability.

     

    Regards

     

    Chris