Security

last person joined: 19 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass Cluster Update without downtime

This thread has been viewed 12 times

  • 1.  ClearPass Cluster Update without downtime

    Posted Oct 10, 2017 05:44 AM

    Hi guys,

     

    is there a way to update a CP Cluster of two nodes (publisher and subscriber) without downtime? As far as I know there are no new authentications possible while the publisher is installing and rebooting.

     

    Thanks for your help ;)



  • 2.  RE: ClearPass Cluster Update without downtime

    Posted Oct 10, 2017 07:02 AM

    what i do is change all the authentication destination from controller to one clearpass, upgrade it then do the same with the other one.

    as long your clearpass can handle all the auths alone, it should be just fine.



  • 3.  RE: ClearPass Cluster Update without downtime
    Best Answer

    EMPLOYEE
    Posted Oct 10, 2017 07:11 AM
    You can also just stop the RADIUS and TACACS services on the node and the controller will automatically mark it out of service.


  • 4.  RE: ClearPass Cluster Update without downtime

    Posted Oct 10, 2017 07:21 AM

    But is a subscriber able to handle new authentications while the publisher is not available?



  • 5.  RE: ClearPass Cluster Update without downtime

    EMPLOYEE
    Posted Oct 10, 2017 07:24 AM
    Yes