Lets say I have 2 zones, HQ, ZoneA in 1 cluster
HQ:
Subnets A,B,C override with hqzone.test.nac (virtual ip of ZoneA)
ZoneA:
Subnets D,E,F override with zoneA.test.nac,hqzone.test.nac (virtual ip of ZoneA and HQ)
Question:
If I connect from subnet Z (onguard is reachable to clearpass) which is not defined in the onguard zoning, what will happen? which server will I be talking to? Let say my last updated was from ZoneA with the agent.conf file being "zoneA.test.nac,hqzone.test.nac, 1.1.1.1,2.2.2.2". Will my agent.conf file stay put as it is? or it will update differently?