Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Authentication Server Ordering in Mobility Master 8.4

This thread has been viewed 1 times

  • 1.  Authentication Server Ordering in Mobility Master 8.4

    Posted Sep 12, 2019 02:59 PM

    I am working to point our Mobility Master and the controllers (through the MM) to a VIP versus individual clearpass servers for authentication.  Is there not a way to order the authentication servers so that I don't have to remove them all and re-add them back in to get my VIP to be primary authentication for Radius and Tacacs?  



  • 2.  RE: Authentication Server Ordering in Mobility Master 8.4

    EMPLOYEE
    Posted Sep 12, 2019 03:01 PM

    - How many servers do you have?

     



  • 3.  RE: Authentication Server Ordering in Mobility Master 8.4

    Posted Sep 12, 2019 04:20 PM
    We have 3 cppm servers and would like to point to the VIP (hosted on an F5) for load balancing.


  • 4.  RE: Authentication Server Ordering in Mobility Master 8.4
    Best Answer

    EMPLOYEE
    Posted Sep 12, 2019 04:58 PM

    Okay.  If the VIP is on an F5 (and not CPPM) just remove all of the servers and then add the F5 ip address.  That should be it...  Is there something keeping you from doing that?  Existing clients should still authenticate to the specific radius server that they authenticated to before.  If you are skeptical, just do it in two steps, after hours.